Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/738ED03204F711EE80553644C4F9AE02.roa
File: 738ED03204F711EE80553644C4F9AE02.roa (raw, json)
Hash identifier: QxJ3ogsKvNhOqBwWtR9O0aS47M1iFlOFCMlYWhWBlkA=
Subject key identifier: C1:8B:03:71:DD:70:56:58:6F:F5:5D:A9:EC:DD:2F:DB:51:71:D0:38
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8F59
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/738ED03204F711EE80553644C4F9AE02.roa
Signing time: Thu 30 May 2024 16:23:26 +0000
ROA not before: Thu 30 May 2024 16:23:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149621
IP address blocks: 103.145.36.0/23 maxlen: 24
103.195.244.0/22 maxlen: 24
2001:df7:c80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36697 (0x8f59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:23:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a7fe-8a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:98:b8:83:a5:9f:18:a0:01:03:af:c1:25:
14:31:fc:7c:2e:36:64:c4:6d:da:59:52:1b:9f:a8:
d5:f5:82:f8:4f:4b:b5:c9:63:80:ea:e2:0a:13:7f:
fa:0f:30:5d:36:2d:a6:a5:aa:05:23:c3:92:51:d4:
fe:47:2a:83:97:f2:c7:2a:41:d4:14:2e:92:45:47:
ee:ce:d6:4d:b4:00:96:07:d3:a2:4c:bc:9a:1e:eb:
c9:c5:8a:de:6b:24:6c:12:e2:2e:91:29:5f:8b:4e:
4b:73:da:9e:09:f1:06:cd:2c:5b:a7:a0:c8:d5:f5:
0d:f6:36:f5:02:97:9e:01:c2:0c:e7:a4:51:9f:bf:
98:7d:79:29:c3:6c:62:f3:63:59:2d:4f:79:57:b5:
8a:39:5a:cd:6a:ac:c9:39:9a:60:44:68:b2:eb:d5:
5f:a4:1c:43:1d:a0:5f:19:33:5c:b4:33:73:2c:d7:
74:18:19:ce:2f:ba:ac:68:89:08:bb:ef:f5:5b:84:
94:a7:3c:dd:ce:4b:df:27:b2:99:4d:9e:e4:1f:6d:
21:5c:50:3f:2e:9f:58:eb:84:93:16:9a:59:f3:a5:
33:6e:6b:94:92:c7:71:52:9e:4b:ea:c4:62:8d:42:
da:96:d3:87:52:8d:55:09:bb:44:70:7f:2c:e1:5b:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8B:03:71:DD:70:56:58:6F:F5:5D:A9:EC:DD:2F:DB:51:71:D0:38
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/738ED03204F711EE80553644C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.36.0/23
103.195.244.0/22
IPv6:
2001:df7:c80::/48
Signature Algorithm: sha256WithRSAEncryption
4e:78:3f:3e:f7:f7:6a:0a:9c:eb:42:09:7e:b5:df:31:a9:d3:
5c:e7:72:7c:5b:e6:50:67:e3:76:a3:32:4f:95:ce:dc:6d:d7:
c4:f0:d9:42:94:bc:55:96:0a:42:87:f2:ee:02:7e:9c:7a:38:
db:73:b4:62:4b:25:ea:58:46:b7:97:00:39:1b:96:95:cb:4d:
0e:80:2a:2b:f5:2c:ca:b2:a5:07:cc:ff:87:9e:2a:39:39:38:
e0:c9:29:cb:1d:90:b3:37:d8:38:a2:4f:f2:6c:19:26:92:09:
96:2f:c3:c4:2b:55:56:ae:17:f4:90:3f:7f:03:80:c3:16:b1:
57:b5:da:62:dd:18:d3:a5:82:39:64:24:ed:4b:01:6f:fa:4a:
23:ef:e2:b0:08:f5:84:c6:66:51:0c:1b:d3:71:03:86:04:55:
8e:fd:c1:c6:3c:d6:85:38:9c:cd:68:1e:63:09:1d:02:d2:34:
8e:c3:88:68:ab:32:ce:5b:c7:23:b5:bd:51:e7:72:61:60:84:
fe:e2:43:e4:e3:ba:67:4d:7d:79:2e:fb:05:8e:6c:aa:0c:93:
6e:55:d6:64:0d:ef:a6:70:cc:5b:cf:93:8e:5e:09:a4:64:b8:
eb:ea:18:52:be:e3:b9:37:4d:a1:39:57:4d:80:91:d8:57:7b:
a2:b7:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:32 2025 by rpki-client