Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A0423943C8711EC889B9D78C4F9AE02.roa
File: 6A0423943C8711EC889B9D78C4F9AE02.roa (raw, json)
Hash identifier: G1fJgzDwGlSSkX/An/CxzL/mC4426P33WFnar7dcoDA=
Subject key identifier: 37:35:C5:8A:D8:3A:66:8A:68:14:0C:F6:31:79:B6:A2:B6:F7:BA:3F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8B2F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A0423943C8711EC889B9D78C4F9AE02.roa
Signing time: Thu 30 May 2024 16:06:08 +0000
ROA not before: Thu 30 May 2024 16:06:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136670
IP address blocks: 103.122.132.0/22 maxlen: 24
2001:df2:c440::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35631 (0x8b2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:06:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a3f0-588e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:f9:ce:bd:e2:3e:21:ce:86:05:68:d6:ac:
70:f0:3d:56:14:2f:bf:9e:12:a2:77:a7:09:2f:83:
35:80:c0:9c:dc:2f:4b:6e:55:21:f2:56:87:28:6b:
cd:8a:f6:14:71:e5:d3:87:59:b0:3e:57:37:4a:09:
6a:96:8d:af:86:5a:67:29:9c:4c:c7:06:ba:d7:4d:
fe:92:2f:ab:0e:71:98:bd:8a:07:59:24:41:2a:5b:
8e:7c:6d:1f:9e:c8:a7:6d:14:c5:7f:ed:2a:99:20:
4d:cd:12:c1:03:b3:48:e2:f7:8a:25:51:2b:05:bf:
66:ed:06:c4:5d:04:9a:fc:0b:f9:3d:c5:a9:57:53:
4d:00:b8:22:4a:c9:07:dd:1a:a1:2c:38:c8:5f:c8:
bd:8b:4c:af:56:18:ed:e9:d1:1d:6f:bc:ea:99:df:
de:d2:1f:5e:6a:70:cb:3e:e3:76:d7:75:81:1c:75:
63:06:39:68:2f:34:02:3c:4f:05:22:b2:a8:80:a6:
c6:e1:32:f3:e0:b7:dd:5b:8d:45:05:28:e4:3b:6d:
20:7c:da:57:36:fd:43:0e:ef:2d:a2:3c:1d:69:f6:
07:7c:c7:a7:f0:29:94:30:eb:be:40:3c:a8:38:65:
64:88:43:d0:b1:50:7c:b1:d5:45:ca:eb:69:7b:14:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:35:C5:8A:D8:3A:66:8A:68:14:0C:F6:31:79:B6:A2:B6:F7:BA:3F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A0423943C8711EC889B9D78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.132.0/22
IPv6:
2001:df2:c440::/48
Signature Algorithm: sha256WithRSAEncryption
18:b1:77:c8:b4:af:6f:b2:bd:2f:3b:2c:4e:03:75:19:8c:ec:
3b:5d:7f:d5:a7:8a:36:60:dc:dd:53:8a:f8:4e:be:35:08:cb:
3d:68:88:34:05:31:fa:d1:a8:3c:ba:48:8a:28:fe:a0:d0:ee:
86:82:bd:1f:ce:12:7e:f4:fe:9d:dd:e7:05:6b:c8:95:61:0d:
a6:0a:ee:4f:89:ae:b5:92:6f:36:64:cf:eb:f6:ad:45:9d:64:
50:8c:dd:96:d8:70:db:4b:2d:12:31:c4:ff:71:10:74:c9:f3:
fe:10:2d:e5:d5:62:21:8b:01:fc:40:2e:3f:71:7f:2d:b0:bc:
57:14:cc:14:e3:25:18:d3:cc:06:23:80:95:6a:9c:ed:b8:43:
9a:ff:e6:c1:73:14:c6:77:2e:e4:3c:cf:32:0d:56:ad:5d:10:
b2:7c:67:e8:b4:14:89:cd:32:cb:7a:32:3b:fb:eb:c0:6c:5d:
dd:c4:8f:16:68:ae:19:2c:e0:7b:e9:18:5b:5a:7f:eb:4c:03:
56:f7:11:6d:14:8d:39:48:45:40:5a:95:e7:7d:f7:8a:53:81:
b4:c3:02:81:71:ba:5f:db:f6:2a:ce:af:c5:01:78:cf:f1:d2:
1c:99:15:e5:55:32:ca:07:e5:9d:63:9e:dc:06:10:13:3b:18:
4b:c5:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:02 2025 by rpki-client