Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
File: 693EEC340FB711ECA0E62853C4F9AE02.roa (raw, json)
Hash identifier: 7Pm1fOlWDfguGd9Fy9VoMvAMT+CzOkTYNpoDnP7P+ts=
Subject key identifier: ED:79:68:D5:62:A8:A9:3D:99:C6:1C:DA:90:83:E1:EE:F8:38:24:87
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8E30
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
Signing time: Thu 30 May 2024 16:18:41 +0000
ROA not before: Thu 30 May 2024 16:18:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142533
IP address blocks: 103.169.250.0/24 maxlen: 24
103.169.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36400 (0x8e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:18:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a6e0-8a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:b1:c7:f9:15:ba:36:45:a9:fe:ec:d5:af:
39:b2:54:0c:dd:c9:67:b9:74:8c:5c:34:fc:f1:91:
4a:a5:9f:21:11:20:32:b1:39:30:56:c7:ac:7f:82:
ac:43:13:7b:f7:5b:33:25:1c:cf:4c:73:7f:61:3b:
74:89:4e:a6:b6:80:cd:2c:40:b5:76:cd:42:ee:31:
18:69:6d:12:fc:e6:d4:17:74:73:b2:47:a8:7b:4a:
a6:27:c9:66:47:68:b9:cb:42:39:25:14:a9:40:15:
d1:fc:b3:86:33:2d:eb:b8:e3:16:0e:03:b2:a7:46:
33:87:0c:b2:0b:7d:de:08:b6:10:fd:99:ee:a8:06:
10:f8:cb:5b:d8:3d:ca:46:b9:af:0e:73:84:1b:dc:
b8:b0:9a:a3:22:ca:f4:47:fa:0b:c2:80:8f:5a:9a:
b3:e5:0a:e3:6c:cb:69:e6:45:9b:d7:8a:c4:b2:3f:
8b:3c:85:13:d7:0e:01:7d:32:08:72:04:30:fa:e6:
26:cd:29:42:5f:46:64:25:87:96:21:4b:6c:2f:3d:
0b:13:51:32:ae:c0:9e:b9:23:db:80:98:db:4e:86:
35:3a:7a:2f:af:25:03:cf:00:30:78:20:98:bf:13:
d4:11:5e:bf:12:ac:80:01:59:b7:3a:63:c0:a6:03:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:68:D5:62:A8:A9:3D:99:C6:1C:DA:90:83:E1:EE:F8:38:24:87
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/693EEC340FB711ECA0E62853C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.250.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:64:8c:04:7a:50:c1:49:ce:c1:89:82:bf:57:5e:b4:fc:c5:
9e:a8:b7:46:e3:dc:14:1c:68:6d:a2:88:06:1a:1b:7a:65:b3:
28:02:14:66:00:07:5d:6c:c5:53:f1:ee:17:81:02:d5:79:48:
c6:2b:42:79:fb:d3:be:42:3c:ce:66:28:41:32:4f:2d:96:e0:
98:47:d6:cb:6d:0e:b2:dd:f1:68:20:74:c3:31:89:a0:1b:56:
52:63:02:00:f3:96:ca:1c:62:b9:17:31:9a:4c:30:20:58:0b:
96:81:b6:0c:14:b7:3d:7e:9d:af:6e:a0:5c:55:7f:16:2f:e1:
1e:21:75:b7:a0:f9:39:d2:14:5d:00:bd:a3:58:a5:a1:a2:c3:
f2:79:28:a6:dc:2f:52:ce:b8:65:54:2f:3d:58:62:33:df:e1:
ba:2e:4c:68:13:35:7f:74:ae:e7:4d:0a:13:28:20:eb:f6:73:
3c:1e:5e:d4:d0:2e:11:38:b5:35:9d:29:1a:7d:ae:6c:07:3d:
4b:41:eb:a0:23:47:89:e8:a1:54:6f:0b:b9:65:46:b0:49:42:
16:6f:f4:57:04:1f:8e:06:76:de:68:1e:cd:5e:e4:11:90:8c:
d7:8d:62:2f:53:44:4e:68:6b:fe:9a:4b:fb:fe:71:1a:cf:58:
af:8d:3a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:11 2025 by rpki-client