Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77E15212C59011EA8E3FD81FC4F9AE02.roa
File: 77E15212C59011EA8E3FD81FC4F9AE02.roa (raw, json)
Hash identifier: JtHLMapTyMh6WT2V30+pgDGyZ7vq5Oqwlj6lFIx0vV4=
Subject key identifier: 11:14:15:AC:9E:BD:41:7A:5C:E1:74:02:F6:90:69:0A:F9:B8:EA:92
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8B6E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77E15212C59011EA8E3FD81FC4F9AE02.roa
Signing time: Thu 30 May 2024 16:07:12 +0000
ROA not before: Thu 30 May 2024 16:07:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137107
IP address blocks: 103.108.152.0/22 maxlen: 24
103.109.78.0/23 maxlen: 24
103.120.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35694 (0x8b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:07:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a42f-7117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:eb:f3:a6:01:4e:fa:c5:2b:8e:d4:c5:a5:
06:f0:34:e6:62:53:2e:36:35:1c:24:91:13:5f:3d:
cd:da:ac:eb:ff:32:06:80:6d:c1:e6:3c:ba:1b:da:
61:49:38:5b:18:b5:77:60:45:b5:8f:0a:34:e7:82:
7b:c1:d0:82:90:87:d2:8f:a0:99:1a:7a:33:d1:26:
a6:3b:71:3f:ee:e8:20:f2:f3:69:6f:62:85:8f:dc:
94:e4:fa:54:90:52:75:fb:72:75:b1:36:1b:50:f8:
1b:de:b9:e6:b3:53:98:0f:1b:ef:0b:12:31:68:ce:
ae:9d:50:2c:9c:e2:27:fe:c4:54:d9:88:dc:75:96:
a1:c6:23:f6:34:3c:2c:4f:8a:26:16:b2:e3:86:da:
c6:66:c3:f8:5e:84:22:c8:55:74:45:f2:bf:90:ab:
36:96:8f:82:25:43:9e:a2:5e:98:0b:2f:d4:f8:dc:
9f:20:79:a1:e8:08:29:fb:c2:c6:7d:c7:a8:77:b7:
80:4b:4a:78:7d:71:6b:55:da:88:45:70:0e:57:57:
8d:bd:f7:7b:8d:e4:51:55:f6:e9:95:6f:b4:81:06:
c1:12:24:52:92:2b:6e:8d:73:2a:74:a9:8f:97:1b:
1d:13:a1:f0:24:f9:5b:8f:31:85:1e:59:60:9e:5b:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:14:15:AC:9E:BD:41:7A:5C:E1:74:02:F6:90:69:0A:F9:B8:EA:92
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77E15212C59011EA8E3FD81FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.152.0/22
103.109.78.0/23
103.120.190.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:67:8c:e2:83:24:04:e2:55:10:f6:41:9e:1d:b5:ff:24:e6:
9a:76:d0:2c:ae:8a:72:27:38:63:07:b1:2b:b2:ce:77:0d:d9:
b2:f1:bd:fa:3c:cd:cf:a8:09:32:1c:7b:ce:c7:02:9d:18:ae:
ed:d1:a6:19:17:6a:b1:73:73:b2:0c:17:05:c5:1a:5d:35:c2:
1f:12:16:56:9b:95:d2:55:7d:fb:2d:18:72:e6:c1:10:00:1d:
c9:ab:23:4e:87:b9:77:dd:5d:24:5f:f5:c5:da:62:00:ec:da:
e4:ad:e5:19:7d:06:95:bf:7c:32:45:bc:2c:ec:f9:e4:43:f4:
94:82:64:d1:ae:ef:5b:53:fc:3e:15:5a:29:68:cb:2d:5e:fd:
8a:d4:95:ff:ec:7a:fe:80:e4:e1:54:5d:67:8b:93:c8:1b:7e:
76:0f:96:b8:d3:3f:3b:cf:e7:3a:30:43:74:50:6b:10:c7:b3:
b7:13:03:34:45:b7:07:f6:15:f3:7a:ed:d4:49:c0:93:20:6e:
a4:5b:93:2f:4d:e1:47:e4:53:3f:73:46:58:2f:9d:36:c7:98:
94:4e:3c:75:2f:78:4c:09:59:7d:61:1d:8f:79:8d:1f:28:2e:
37:28:c5:de:ed:1c:ea:34:06:49:40:cd:18:31:5f:4f:92:26:
a9:0f:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:41:45 2025 by rpki-client