Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A177F7AFB6111EC9E830E28C4F9AE02.roa
File: 8A177F7AFB6111EC9E830E28C4F9AE02.roa (raw, json)
Hash identifier: fjygrfHO9vJnuYb0spDljUTmjbGhpKv+pRkeX5wUvJw=
Subject key identifier: 29:D6:95:04:FC:8F:9E:C0:3D:38:91:6D:59:D6:10:1A:AC:10:F5:F8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8F3C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A177F7AFB6111EC9E830E28C4F9AE02.roa
Signing time: Thu 30 May 2024 16:22:58 +0000
ROA not before: Thu 30 May 2024 16:22:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149585
IP address blocks: 103.189.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36668 (0x8f3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:22:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a7e2-d000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:1f:b3:07:e7:a1:d0:c5:1c:bc:03:db:e5:
c4:04:52:42:9b:38:bd:98:8f:64:ae:96:da:c1:79:
83:69:f5:cc:51:c6:15:27:c8:73:74:87:25:10:e7:
f0:ad:a7:81:48:c6:32:78:dd:47:d3:14:17:15:22:
81:53:a2:ca:05:c9:96:3b:56:4b:e8:bc:2c:4a:ce:
08:01:8e:8f:f4:da:f3:ef:a6:96:54:30:33:40:26:
89:cd:66:df:a0:c3:e7:0c:14:90:4b:98:2c:4c:df:
a8:83:e4:51:44:49:60:94:0e:64:ca:27:bb:8c:65:
96:38:a1:e7:7c:d0:1e:29:8d:7f:58:7f:f7:10:9f:
58:3e:12:25:c4:24:e0:f1:f0:67:10:8c:c4:37:eb:
49:66:97:c2:92:9b:ed:d8:b1:28:fe:35:99:49:5b:
aa:30:42:21:e2:6e:d2:53:63:61:35:db:62:77:e0:
e1:a5:2f:c9:0a:6d:98:2a:e3:e2:c9:3c:b4:72:c4:
97:db:98:e6:cb:85:29:47:2c:55:82:62:6e:6f:1f:
f8:2f:bc:d3:0c:f5:e2:54:45:c6:36:3b:78:b4:4c:
ae:5d:dc:a3:1e:0f:7b:55:01:bc:18:b0:01:95:a7:
7f:2c:5c:f5:11:b8:53:c7:0e:17:e7:e8:3b:f5:12:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D6:95:04:FC:8F:9E:C0:3D:38:91:6D:59:D6:10:1A:AC:10:F5:F8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A177F7AFB6111EC9E830E28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.196.0/24
Signature Algorithm: sha256WithRSAEncryption
40:bf:80:ab:7b:65:2c:f0:1d:f9:96:e0:3d:7a:00:fd:29:f1:
71:eb:2a:4c:ca:81:c9:e9:18:f2:4f:43:80:e2:6d:bb:96:e0:
3f:e4:45:0b:68:7b:26:5e:a0:2b:1c:f3:06:70:f1:a1:fa:24:
e4:a9:44:d2:9f:4b:3b:d4:e7:f9:72:c4:16:28:1a:59:f8:7b:
07:67:c4:95:73:de:f5:90:42:6e:32:a5:9e:65:21:df:4f:ca:
f3:b5:54:81:b4:2c:1b:f0:1e:49:94:ab:54:75:f7:cd:e2:b5:
37:af:6f:97:8a:a5:b2:d9:32:5e:63:2a:d8:13:f7:08:95:dc:
2b:d7:4a:c7:d4:1f:04:9d:7f:25:1b:03:8b:dc:38:bb:4c:e8:
91:27:cf:4a:d7:43:08:54:d4:1e:27:27:30:b0:0f:2a:f0:a3:
8e:fc:b1:60:e5:2b:53:37:1b:72:95:6c:b6:71:6b:e7:d3:56:
b7:c9:e2:40:bc:97:31:5b:9a:7f:ce:0b:f3:94:31:7d:92:64:
17:44:3b:26:61:d4:07:4a:1a:a9:7a:f7:a7:37:92:0e:19:ca:
9c:bc:4c:41:34:08:ac:c3:43:d0:45:1a:2b:56:73:f1:eb:54:
33:d1:83:2c:00:c8:6d:db:c9:f6:96:25:d2:5e:b9:bc:57:0d:
d5:a5:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:27 2025 by rpki-client