Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85D2F052D5E111ECB31AC843C4F9AE02.roa
File: 85D2F052D5E111ECB31AC843C4F9AE02.roa (raw, json)
Hash identifier: 4KVtjiN2CCIi4xwfpE/VjdGG/0fO1vm9E7bf9tOFiZc=
Subject key identifier: 0A:FA:FB:39:82:07:70:D1:69:72:E8:CF:DE:3E:7E:58:A6:C4:0A:39
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 89C9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85D2F052D5E111ECB31AC843C4F9AE02.roa
Signing time: Thu 30 May 2024 16:00:18 +0000
ROA not before: Thu 30 May 2024 16:00:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134868
IP address blocks: 103.139.201.0/24 maxlen: 24
103.139.222.0/23 maxlen: 24
103.209.16.0/23 maxlen: 24
103.211.162.0/23 maxlen: 24
2001:df0:9580::/48 maxlen: 48
2001:df1:3e00::/48 maxlen: 56
2001:df2:82c0::/48 maxlen: 48
2402:a740::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35273 (0x89c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:00:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a292-01cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:42:a8:be:6e:54:61:f7:0d:e7:90:7e:f8:
87:4f:11:a5:98:53:e3:52:3f:93:ac:df:bb:e9:64:
c9:29:87:53:2a:0c:96:c7:b2:ba:84:38:66:30:4b:
d2:46:da:e4:87:41:7c:d4:c3:ef:33:f7:bf:31:55:
a6:13:74:61:d2:32:52:33:af:78:65:5d:23:b9:66:
40:c5:fa:69:84:4f:8e:75:65:02:70:11:71:89:9c:
2a:7f:dd:6d:af:f6:49:85:18:f0:50:9c:b9:d9:85:
de:6e:c2:bf:73:f5:31:5d:c3:66:cb:9c:ad:c9:97:
ce:39:0d:95:e7:7c:e5:a2:03:a6:c4:27:c1:f4:5b:
f2:9e:a1:29:df:4f:90:08:e9:87:b6:93:32:d5:3b:
59:eb:16:aa:2a:23:be:5e:1a:05:0d:e7:95:3e:67:
6c:62:0d:02:12:fd:37:08:6c:13:7c:97:9c:81:28:
98:0e:59:3f:e5:60:e0:f4:af:b0:55:f9:d1:15:3d:
7d:82:93:52:b2:1f:d9:41:28:f3:31:d8:ea:16:79:
e4:64:3f:ed:d6:aa:a8:01:68:33:e4:9d:d9:44:bd:
fc:a9:2e:b1:f7:31:db:23:e0:5a:88:5a:e5:20:83:
3f:2c:ac:54:89:7a:50:65:01:de:95:f7:65:83:0f:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FA:FB:39:82:07:70:D1:69:72:E8:CF:DE:3E:7E:58:A6:C4:0A:39
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85D2F052D5E111ECB31AC843C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.201.0/24
103.139.222.0/23
103.209.16.0/23
103.211.162.0/23
IPv6:
2001:df0:9580::/48
2001:df1:3e00::/48
2001:df2:82c0::/48
2402:a740::/32
Signature Algorithm: sha256WithRSAEncryption
1b:96:fd:29:7f:06:11:2e:22:ef:7d:f9:3d:ef:3c:34:a8:89:
e6:25:08:9c:87:e4:8b:0c:c8:40:70:e6:57:a5:4c:92:ae:27:
d6:75:f4:7e:93:e3:b3:99:81:1b:8e:42:44:8b:d1:4a:c3:7a:
5c:a6:07:7d:35:92:b5:f0:c6:a1:5b:9e:e0:f1:f7:aa:d7:11:
35:a8:0c:c8:6f:39:f1:e8:92:cb:c1:6e:06:b0:3c:d4:47:32:
51:19:75:92:bb:87:06:03:b2:48:4b:09:48:f2:0a:36:fb:ea:
03:5c:70:42:90:2e:10:e8:65:70:fc:fe:f5:ce:84:78:f3:ce:
74:2d:8f:ba:5e:02:03:66:ea:7e:d7:aa:ec:c8:8a:07:54:ee:
da:d5:72:dd:dc:08:fe:d5:88:25:8a:e2:b6:5a:b0:7a:28:69:
92:e0:61:78:29:bc:9f:4c:05:45:8e:44:3e:b4:74:a3:83:cc:
5f:ca:25:4f:42:84:a3:22:2e:da:43:20:6a:11:85:fa:ac:9a:
2e:a4:6a:f5:51:27:a2:e7:28:54:48:33:86:8b:3a:20:dc:24:
14:13:be:f9:d8:1b:d0:74:0f:44:a9:4c:ed:7c:7e:74:21:cb:
96:22:be:8a:2f:68:94:19:e8:83:34:c3:5d:97:c5:ed:d2:94:
98:be:ba:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:45 2025 by rpki-client