Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B3D23485D7311ECB1D03353C4F9AE02.roa
File: 6B3D23485D7311ECB1D03353C4F9AE02.roa (raw, json)
Hash identifier: OKRBK80KPWbnLjJ0K2uQDTQRtdWCtT3BDJvhT/YfkFE=
Subject key identifier: 0E:D8:9D:35:E7:8F:9E:D1:92:D6:50:EE:9B:99:A4:8A:EB:B1:E8:39
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8B84
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B3D23485D7311ECB1D03353C4F9AE02.roa
Signing time: Thu 30 May 2024 16:07:32 +0000
ROA not before: Thu 30 May 2024 16:07:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137139
IP address blocks: 103.75.164.0/22 maxlen: 24
103.112.252.0/22 maxlen: 24
2400:f9e0::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35716 (0x8b84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:07:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a444-116f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:ee:de:64:f1:2f:e6:66:a3:75:c6:ef:df:
13:ce:f4:b2:10:a5:63:e0:05:26:96:ae:f4:17:8b:
67:60:c7:08:fc:2f:a7:fb:11:ca:d5:78:22:48:ec:
99:76:53:76:1c:bf:fa:22:20:e0:7f:ac:29:da:64:
37:3b:ed:cb:17:24:71:3d:90:b6:64:f9:32:a2:ed:
d1:8d:35:22:a7:23:d7:19:78:18:c1:d3:7a:42:90:
48:62:58:8a:e1:c0:99:1a:8f:ab:bc:70:c7:f4:b9:
dd:1d:ce:de:7b:40:41:e1:9c:ec:3a:93:fb:31:04:
8e:1e:a6:f8:0b:56:0f:53:a8:dd:c3:99:87:4b:fa:
2f:17:7b:05:9a:9f:6e:27:6a:a1:07:84:0b:58:b8:
1b:c4:95:0f:37:8a:98:70:db:af:fd:b6:64:27:44:
66:1d:7d:ba:d1:7d:7d:ef:45:76:56:5d:74:89:87:
29:a2:5c:d2:70:3a:47:8e:6b:ab:77:34:6e:e6:cf:
17:f0:80:3d:69:93:2e:12:ef:80:3a:13:c3:24:71:
d7:06:5a:2c:99:86:24:2f:1d:94:80:24:4f:33:18:
83:ca:4c:96:17:af:d1:48:83:12:6c:dc:f6:a8:2f:
c9:5b:06:a0:4c:f8:85:41:47:27:ca:1b:04:34:bb:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D8:9D:35:E7:8F:9E:D1:92:D6:50:EE:9B:99:A4:8A:EB:B1:E8:39
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B3D23485D7311ECB1D03353C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.164.0/22
103.112.252.0/22
IPv6:
2400:f9e0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:2a:79:20:7c:b4:bb:3d:a3:02:c9:b7:94:0d:07:cb:1d:be:
6d:db:c7:72:e1:db:de:07:e1:45:61:eb:17:89:54:3c:34:0e:
9d:be:59:e4:63:27:d9:a9:a9:ea:98:f1:31:66:c8:65:19:43:
13:e4:7a:8c:41:15:cf:f6:5c:b3:53:47:70:40:1e:31:31:94:
92:62:5b:f2:fe:83:f0:46:9d:6b:f8:0b:fc:3d:2c:20:1e:75:
f0:bf:95:d7:b7:35:bd:f5:38:4a:b1:7e:d0:bd:3a:55:4c:f6:
47:9f:45:00:a7:9f:d2:40:60:36:74:e2:d0:81:03:01:c2:58:
7c:cc:ca:0a:5a:91:e2:3f:9b:43:e9:1f:be:31:1f:37:fc:92:
4d:6c:d5:d9:90:8c:96:8d:e4:dd:80:83:c6:63:9f:20:ad:cc:
06:d0:dd:c3:e9:6f:77:f4:82:19:11:42:b5:00:e9:29:b5:25:
21:c2:4a:e0:2d:d2:5d:d2:7f:5f:da:c5:ed:3f:ca:82:81:97:
51:4c:4f:aa:ef:62:64:36:6f:25:83:5c:34:7b:39:8e:de:b1:
93:89:a0:9f:cb:da:fa:f8:53:c5:f3:c8:20:04:96:9f:27:ef:
db:94:9c:d4:24:d3:71:cf:5d:fb:e0:9b:11:3c:61:25:12:ce:
ca:5e:2c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:31:01 2025 by rpki-client