Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7192E87803B911EB9EBCD06FC4F9AE02.roa
File: 7192E87803B911EB9EBCD06FC4F9AE02.roa (raw, json)
Hash identifier: clFhjP1rSVYdUUWx7umKh8YuDp6I1itSlQ9VvIQ0BeQ=
Subject key identifier: D7:BB:D6:1D:96:AA:5D:79:41:F2:44:49:F8:BA:E2:7D:77:B6:6C:84
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9C2E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7192E87803B911EB9EBCD06FC4F9AE02.roa
Signing time: Fri 25 Oct 2024 09:49:10 +0000
ROA not before: Fri 25 Oct 2024 09:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137151
IP address blocks: 103.107.60.0/22 maxlen: 24
103.134.8.0/22 maxlen: 24
2401:8320::/32 maxlen: 32
2401:8320:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39982 (0x9c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 25 09:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=671b6995-ddaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:ac:12:bd:89:46:42:e4:b6:1a:1f:34:48:
22:34:52:79:6e:73:fa:b6:0e:57:7e:ad:24:7b:10:
b4:89:b8:d1:76:dd:90:c4:11:60:76:ca:4a:d6:24:
36:9e:5b:72:1f:aa:99:4f:a4:33:ed:8a:b3:a6:ff:
e3:65:ce:76:89:41:e4:23:b7:24:ba:e5:6b:d1:d7:
fb:10:76:18:e0:18:c0:9d:68:20:9b:08:ec:cf:f1:
6e:62:91:06:94:43:8b:82:ef:f0:c5:24:3e:73:d9:
57:bb:f5:33:0b:51:b5:9d:80:9c:1d:f0:f4:b1:b8:
b1:92:55:aa:89:53:16:8f:10:f3:36:a9:81:aa:65:
6c:0a:12:2f:0f:0c:2d:18:4b:b2:8f:2b:8f:2d:1a:
40:40:0c:16:92:d6:80:5e:77:f2:30:2c:9e:e9:67:
99:4c:d7:22:06:75:26:5f:6e:71:06:33:4c:99:ce:
43:73:6b:4f:89:3c:47:61:aa:d3:48:f0:fa:18:48:
1c:63:09:a1:b4:1b:d4:69:63:16:3c:6c:c1:02:06:
c2:fb:6f:e6:fd:d2:4d:50:6d:d0:f7:15:d8:b0:36:
d5:4f:c7:71:70:63:95:ce:9c:8d:35:fb:f7:92:45:
54:bb:3f:ed:52:df:cf:9f:11:c9:a5:44:2b:83:bd:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BB:D6:1D:96:AA:5D:79:41:F2:44:49:F8:BA:E2:7D:77:B6:6C:84
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7192E87803B911EB9EBCD06FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.60.0/22
103.134.8.0/22
IPv6:
2401:8320::/32
Signature Algorithm: sha256WithRSAEncryption
59:bb:3a:c5:1c:20:93:31:31:1f:94:14:ac:2a:6f:e3:fb:53:
95:8a:e1:33:7a:73:03:ee:c1:09:69:a3:63:f2:84:40:5a:ea:
80:df:5e:29:b6:64:bb:b7:1c:a6:f2:ea:99:d5:25:3d:c0:7e:
5d:c6:71:c0:b5:56:a2:71:1e:b4:e7:17:4b:c2:e4:37:4c:d8:
a4:51:2b:61:fa:4b:6e:e0:2f:ca:40:62:85:8b:93:ac:b8:c7:
04:2d:d3:c1:8e:bd:74:61:0f:d6:ba:a2:d0:e8:14:28:61:be:
d3:5e:ea:c8:80:d4:e5:9d:39:d3:f3:f3:80:ec:f3:d1:e1:0b:
2f:6b:43:48:c0:6b:f0:8a:91:f3:d4:fe:80:ed:2b:cd:e0:2b:
73:1c:0d:b2:cb:bc:f8:00:c6:3d:ec:52:ec:33:6d:ce:2c:d5:
e9:7e:40:67:92:fd:d7:d6:5c:cd:ba:0a:85:2e:b6:be:e4:50:
78:50:79:02:e3:a6:05:3c:88:1f:59:66:c0:47:41:c5:53:cf:
8c:26:ba:50:a7:16:65:ad:b2:5f:d7:af:0a:37:93:d8:59:22:
33:6f:54:d0:f1:1e:b6:99:00:56:fb:b9:36:d2:59:43:ca:ea:
91:7a:72:45:ea:73:61:f0:33:64:0a:97:92:e8:58:48:fc:03:
78:f3:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:05:54 2025 by rpki-client