Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D09CBD84A5C11EFA1AC9877C4F9AE02.roa
File: 8D09CBD84A5C11EFA1AC9877C4F9AE02.roa (raw, json)
Hash identifier: vU5C8BzUJX+zc7/IiW3ZAx2j1BP1uUuAwgsfK0ZvhnY=
Subject key identifier: 4C:59:99:60:D6:C6:1E:10:23:7B:EB:73:63:1D:F0:52:B2:F0:2C:29
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 952E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D09CBD84A5C11EFA1AC9877C4F9AE02.roa
Signing time: Thu 25 Jul 2024 08:04:44 +0000
ROA not before: Thu 25 Jul 2024 08:04:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134859
IP address blocks: 103.205.13.0/24 maxlen: 24
103.205.14.0/24 maxlen: 24
103.205.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38190 (0x952e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 25 08:04:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66a2071b-56eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:17:5c:f4:41:47:ca:fc:6c:6b:ae:cc:3a:
aa:a9:8d:3d:7e:cd:3a:68:74:d2:ed:59:16:b4:6e:
bf:c8:da:6d:03:54:6f:d3:99:c9:5d:9a:2d:f1:e9:
99:3e:aa:2f:04:41:ed:0f:26:83:c8:87:10:24:1d:
01:2e:07:29:68:e8:25:59:28:03:83:a0:25:dd:25:
1a:90:b9:78:e9:8a:cf:cb:39:25:6d:35:d4:e1:cf:
7d:8b:7b:ce:69:e6:3a:41:ff:3e:89:35:2b:e7:95:
24:15:6d:a7:ee:63:f3:15:e3:0d:59:22:4f:a8:61:
2c:07:a9:e8:68:93:9e:22:25:5d:50:9a:d2:cb:a1:
74:4e:15:40:e3:84:5e:6d:b7:6e:7f:aa:13:dd:9f:
b5:0d:59:92:8c:a7:9d:00:83:7d:3a:6c:a5:0c:ce:
6f:d1:15:09:fb:e4:2a:3f:3b:2d:30:1b:57:79:a9:
00:01:18:9a:26:f2:5d:94:77:88:7d:c3:5b:b5:03:
67:bc:c0:1b:f7:d1:06:2c:ed:16:0e:4d:16:7f:a9:
f8:4d:5a:55:6a:bc:fd:eb:59:47:5b:78:e2:80:ce:
8b:62:0c:ba:72:ec:14:ee:72:9b:9f:f6:e1:5e:c2:
cb:9a:24:97:df:e6:ac:00:05:67:28:8b:7c:8b:3b:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:59:99:60:D6:C6:1E:10:23:7B:EB:73:63:1D:F0:52:B2:F0:2C:29
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D09CBD84A5C11EFA1AC9877C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.13.0-103.205.15.255
Signature Algorithm: sha256WithRSAEncryption
b9:98:ce:94:77:18:45:68:72:af:4d:e8:40:51:1d:79:58:91:
87:bb:47:aa:25:42:2f:bc:4e:3b:aa:18:1d:59:29:be:46:41:
f1:10:48:6e:b2:da:4f:85:54:23:c0:9e:ae:ec:f3:4b:c8:8a:
e6:60:fd:c1:e1:9d:99:0e:2d:70:6f:3a:05:28:ac:15:8b:90:
ca:7c:42:cd:f9:48:4c:5c:55:e1:92:38:b6:a3:80:20:b4:b4:
64:aa:15:b4:b8:e5:72:cb:95:e9:5a:1d:b9:78:85:42:c4:27:
df:18:b7:d3:40:a0:8d:f1:44:5e:98:13:81:17:1d:2d:a7:c3:
45:01:40:18:8f:27:d9:cf:4c:ea:8b:1c:fb:de:7f:6b:41:b3:
be:09:30:22:a6:72:6b:4c:c7:3d:10:e7:e4:36:18:4f:b4:ff:
86:b1:a9:8e:c1:0c:0c:41:91:49:19:f5:79:65:1d:c5:28:cd:
af:c8:26:ce:fb:7d:35:2b:8a:20:4d:cf:46:c5:d4:46:f9:91:
21:f5:f8:21:13:2c:43:9e:f4:2b:dd:57:19:9d:92:22:7d:da:
e9:97:e7:32:55:97:e4:91:f2:70:8b:c8:d3:3b:08:3b:ee:b5:
db:3e:1d:e5:4b:0b:83:e1:43:df:76:f2:9b:7f:fc:77:ce:a7:
d1:5b:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:27 2025 by rpki-client