Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74F91AE464DA11ED8D290065C4F9AE02.roa
File: 74F91AE464DA11ED8D290065C4F9AE02.roa (raw, json)
Hash identifier: 45VMgLlk0Su7ih5TtgznhZDJS8n/i5OQaHRBkLVkq7I=
Subject key identifier: DF:AA:71:FB:80:00:8D:7E:A8:FE:AB:4E:17:5F:C6:9E:D2:ED:D7:02
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8977
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74F91AE464DA11ED8D290065C4F9AE02.roa
Signing time: Thu 30 May 2024 15:58:56 +0000
ROA not before: Thu 30 May 2024 15:58:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134251
IP address blocks: 103.194.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35191 (0x8977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:58:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a240-6094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:21:b1:93:25:3d:2d:b4:25:c4:ad:35:8f:
bd:b7:a8:c6:19:52:39:ed:49:84:8d:38:91:b0:d5:
7b:8e:4d:01:07:14:c4:64:af:af:87:a2:85:be:57:
9a:25:69:a3:a6:9c:77:3a:b7:b5:8f:23:36:cf:b4:
9a:73:b8:68:ac:d4:f0:e9:29:2e:59:99:b1:63:e9:
f7:68:2f:b5:af:1c:28:57:b5:fc:2a:95:29:63:ec:
c7:30:e2:9a:cc:b4:96:aa:a3:c5:e3:c2:f1:3a:8e:
63:90:73:5f:a5:54:70:ff:40:6a:28:cd:df:87:c2:
6f:5b:5b:80:21:d3:0f:d6:6e:f6:d3:2c:52:e4:6e:
e5:6f:b4:e6:99:03:4b:de:68:bc:a8:73:aa:4c:f2:
98:bf:a6:8c:52:c9:db:95:d4:47:84:2f:6d:4d:de:
d4:05:50:e1:c7:e6:f7:19:0c:14:2f:59:07:27:eb:
72:bc:83:7e:40:08:37:bc:fa:7d:ff:6e:61:e7:7d:
3f:ab:db:db:73:21:18:71:ad:41:f4:8d:21:77:85:
1a:54:f8:1e:17:f9:55:5d:b9:3a:ed:fd:b0:3a:4c:
e8:51:2a:96:1c:3c:d4:8a:79:6e:38:10:23:c6:3b:
b2:26:e4:af:82:1c:1f:f3:d7:05:a0:b7:ab:a6:1f:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AA:71:FB:80:00:8D:7E:A8:FE:AB:4E:17:5F:C6:9E:D2:ED:D7:02
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74F91AE464DA11ED8D290065C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.194.45.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:6a:9a:dc:ed:56:44:88:76:6c:7c:9e:47:4e:3a:95:90:98:
40:f5:96:64:59:fd:57:d4:33:04:16:f9:64:60:af:69:a3:84:
3b:9f:9c:06:3e:38:7c:71:62:bb:b7:26:64:f2:20:99:08:89:
f9:0e:1c:9d:9a:29:35:65:f3:f2:29:c4:ca:83:7d:9a:49:a8:
7e:0b:4e:a2:0d:a3:cd:e1:32:1a:b6:a5:06:71:4f:60:3b:f1:
e1:56:3f:98:33:12:2d:60:c3:16:7f:63:b8:10:ec:9d:9e:7f:
7d:b0:fe:e8:10:b5:4f:2a:40:84:33:35:a0:45:65:e1:2f:1a:
a1:cd:2a:f5:01:e4:f9:16:05:c1:f3:4e:1e:07:c9:59:bc:bb:
c6:32:7d:02:8b:d1:7c:c8:c6:c8:2b:6a:02:c8:3d:bf:0a:f8:
28:fe:76:21:e2:61:fd:f0:37:30:f5:52:c4:31:1d:9e:2b:0a:
1c:14:29:4e:18:ef:1b:87:5d:d2:dc:bc:f7:0d:b6:50:de:66:
f0:42:5f:b3:6f:4b:04:16:87:bd:ef:69:3b:0e:45:9a:c5:77:
48:10:d0:f0:70:fb:6e:e6:7d:e0:5d:82:5a:33:63:49:fb:1d:
9e:2a:ea:46:e7:2a:db:43:03:5c:79:66:6c:ea:06:f0:68:c3:
33:9b:dc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:03 2025 by rpki-client