Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/970ED090476E11EC8A31B762C4F9AE02.roa
File: 970ED090476E11EC8A31B762C4F9AE02.roa (raw, json)
Hash identifier: Iygb04Q/NzbSUUIrTU29egwh91aKR5t7KNqpMptNk5c=
Subject key identifier: CA:E5:70:9E:4D:C2:51:74:50:ED:AD:99:BF:BD:ED:E1:98:D9:6A:E4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90AE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/970ED090476E11EC8A31B762C4F9AE02.roa
Signing time: Thu 30 May 2024 16:28:58 +0000
ROA not before: Thu 30 May 2024 16:28:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 103.55.74.0/24 maxlen: 24
103.153.57.0/24 maxlen: 24
103.153.251.0/24 maxlen: 24
103.183.72.0/24 maxlen: 24
103.183.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37038 (0x90ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:28:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a94a-abe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:93:03:19:75:cc:41:67:71:2e:a5:0f:ab:
a6:8d:44:3a:ec:0d:4e:e3:92:ab:46:22:2d:a2:ac:
33:18:3a:d0:3d:bf:cf:00:b8:dc:e7:ba:d8:c7:f2:
8c:dc:b2:ec:cd:e7:1e:77:81:d0:2e:f5:a0:2c:ee:
0f:78:4a:35:cf:f3:cf:56:ff:41:b9:72:4a:41:c5:
7d:27:eb:02:db:26:5d:2d:1e:23:dd:54:5e:16:72:
dd:70:71:a6:31:43:d2:e5:f4:9c:d6:47:5c:b1:46:
53:67:87:01:42:e9:e2:b6:ae:4c:8d:86:1c:fb:dd:
a5:ec:a9:43:b9:51:06:56:71:65:f7:3d:e7:ba:6a:
6d:3e:a6:a2:22:1f:ac:9c:e1:7b:03:6d:86:20:d2:
28:fa:b4:43:6e:8e:d2:11:7d:89:35:d0:fb:31:70:
09:0c:37:cf:4d:bc:ad:df:8b:62:17:2b:d8:b7:aa:
b5:f2:f0:97:c2:2d:d8:e1:ca:83:cd:8a:4d:00:61:
b1:7a:14:94:5b:16:56:20:28:bd:49:dc:c8:d6:d9:
07:d5:85:b9:c7:30:9c:86:47:30:a4:95:c2:ff:30:
46:6a:3d:59:5a:c8:a0:d0:df:c0:73:08:92:96:de:
2e:85:fa:64:c1:ab:70:da:fe:55:c1:a7:de:e2:27:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E5:70:9E:4D:C2:51:74:50:ED:AD:99:BF:BD:ED:E1:98:D9:6A:E4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/970ED090476E11EC8A31B762C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.55.74.0/24
103.153.57.0/24
103.153.251.0/24
103.183.72.0/23
Signature Algorithm: sha256WithRSAEncryption
45:0f:95:71:46:a0:b8:8f:35:85:47:65:2e:4a:fa:41:08:76:
b2:8d:88:31:a7:8a:26:bb:4d:78:3b:90:9b:08:50:26:9e:94:
6a:fb:11:05:33:ae:7d:59:f4:4f:17:fe:ca:12:54:c5:da:23:
f2:e7:0b:9a:4c:79:a5:5a:6a:5a:77:4e:5d:b6:cc:a4:9b:26:
e5:ea:49:ff:c0:d5:4b:b0:44:a8:de:7b:85:24:8c:c3:4c:50:
f9:e8:b7:d3:88:36:9a:c9:bc:e2:c6:e4:dd:3d:50:38:62:61:
d7:77:bb:00:d8:eb:72:d2:a6:dd:92:72:48:70:06:4c:ff:93:
c7:66:a7:3d:eb:44:6f:bf:83:33:e0:96:ea:3e:19:03:c3:91:
34:e8:17:66:15:d9:47:99:12:a4:57:39:0f:5e:45:f3:8c:1e:
3d:b8:bf:77:fa:1f:b2:59:41:8d:b1:ea:4d:fe:8f:8a:4c:90:
31:9c:b7:d3:95:8a:8e:ef:c8:d4:4d:c0:d3:dc:38:cd:b9:ed:
38:1a:ab:9f:96:f9:f6:55:ce:79:da:69:c1:44:f7:9b:ae:e6:
ce:6d:a9:64:2b:ac:94:f2:2d:f6:d7:0d:54:43:cd:e2:ba:7f:
d7:c2:89:61:3d:07:ef:04:5d:1b:8f:e3:5e:cb:b7:0b:a3:3e:
85:f8:8c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:31:17 2025 by rpki-client