Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8148D968913A11EFA48AB64CC4F9AE02.roa
File: 8148D968913A11EFA48AB64CC4F9AE02.roa (raw, json)
Hash identifier: njBgFsBoBzxuHgGRHUhVH+ZFqU4mMveBiVTwbjPoRW0=
Subject key identifier: E6:0F:19:C4:BA:95:DB:BC:C1:04:DF:B7:BC:B5:F4:2A:F3:F6:CF:97
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A472
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8148D968913A11EFA48AB64CC4F9AE02.roa
Signing time: Fri 31 Jan 2025 12:50:44 +0000
ROA not before: Fri 31 Jan 2025 12:50:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45194
IP address blocks: 103.183.25.0/24 maxlen: 24
103.185.237.0/24 maxlen: 24
103.199.136.0/22 maxlen: 24
137.59.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42098 (0xa472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 31 12:50:44 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679cc724-f9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:65:45:a5:f5:d1:9d:25:fa:f5:43:97:22:
57:a0:e2:8c:7e:e5:20:45:7a:2e:f5:d1:40:74:96:
9a:f7:68:d6:dd:96:fc:c4:f7:53:bd:c1:4f:9e:0a:
af:bb:99:61:be:4a:37:65:03:6c:a7:04:3f:e6:32:
cb:96:e1:a1:a4:5d:11:a3:62:ab:d2:44:6e:d3:83:
48:af:94:06:7d:18:d6:d4:84:34:44:c3:9f:14:e1:
18:9e:66:c4:ef:ec:98:f8:2a:14:7b:f7:4d:4b:c5:
37:be:d0:3b:4b:58:7c:7d:3a:c3:ca:01:02:32:f2:
ba:8a:f1:08:e6:c4:de:51:9e:8d:f0:43:bb:e6:a3:
c2:80:b9:c7:27:0b:98:24:48:57:f3:0e:16:d8:c0:
e4:db:76:52:63:3d:9a:da:1f:21:7f:c8:43:99:cb:
c1:78:da:e1:52:8a:2b:ae:ff:a3:eb:79:a9:5a:23:
4f:91:89:a1:dd:dd:17:2b:b0:23:3c:35:79:b6:ad:
0d:0a:5b:f6:89:da:36:7c:44:ce:5a:13:a8:89:52:
92:32:95:bd:0d:3c:3a:0e:b2:db:b6:eb:47:c0:98:
32:8a:7c:4f:8f:93:9a:62:51:26:99:04:75:52:82:
d0:58:a1:05:b5:53:f1:79:9d:95:d4:72:b5:48:3d:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0F:19:C4:BA:95:DB:BC:C1:04:DF:B7:BC:B5:F4:2A:F3:F6:CF:97
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8148D968913A11EFA48AB64CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.25.0/24
103.185.237.0/24
103.199.136.0/22
137.59.68.0/22
Signature Algorithm: sha256WithRSAEncryption
36:32:d8:5d:42:60:af:ee:32:1e:32:3f:0c:35:b2:28:88:2c:
24:fa:8b:66:ea:53:c4:69:5c:cb:68:64:14:60:5c:af:9b:eb:
86:75:95:04:7b:22:6d:cd:73:79:72:c0:56:4e:9d:ad:3e:7d:
41:f7:f0:b8:79:5c:4d:40:cb:e1:9e:01:5e:12:52:09:2e:a0:
a3:6f:f4:eb:75:fe:d3:a6:eb:5b:74:f4:61:d3:3c:67:3d:bb:
75:0d:db:e1:0e:05:3c:99:94:b4:4d:3b:fb:bf:fa:64:6b:fb:
5c:36:3c:bf:53:68:28:84:1c:6a:f9:9c:49:d7:fd:91:7b:ec:
2a:d3:89:e3:5d:8a:d7:f6:d7:89:a2:74:6f:0c:28:88:fd:a1:
07:6c:2b:02:52:c1:4a:1f:b7:b8:f8:fb:5e:c7:8f:9c:36:57:
f5:8c:e0:02:aa:e2:94:5c:a5:0d:a7:db:fa:af:ab:dc:3a:01:
bf:45:6e:6e:98:ff:af:48:85:ee:3d:56:21:d0:42:64:f2:6b:
29:1c:7b:6f:9c:17:f2:dc:99:e1:cc:94:35:7b:5f:11:33:0b:
a2:dc:c0:2e:9f:92:74:45:72:30:37:48:77:05:f5:22:ce:ce:
39:51:c1:7a:a1:5d:12:1e:73:19:e3:ed:46:fd:8e:9a:21:f6:
e3:79:36:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:07:00 2025 by rpki-client