Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/991142DE84EE11EC83FAF06EC4F9AE02.roa
File: 991142DE84EE11EC83FAF06EC4F9AE02.roa (raw, json)
Hash identifier: HmyPfwJfwSrUGBeD/Cj01E6pD0VTDmLDo/z+Qzzft2g=
Subject key identifier: E0:EE:FA:87:7A:F3:06:23:67:0E:05:1F:3C:18:E1:EA:78:41:04:79
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8E55
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/991142DE84EE11EC83FAF06EC4F9AE02.roa
Signing time: Thu 30 May 2024 16:19:16 +0000
ROA not before: Thu 30 May 2024 16:19:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 146896
IP address blocks: 103.173.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36437 (0x8e55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:19:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a704-7078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7d:93:7a:88:4b:8e:66:62:cc:c3:99:59:9e:
13:04:8e:78:c3:9f:31:37:37:a2:34:3d:09:a8:9a:
f3:23:3b:6e:82:ab:d0:0b:21:b9:7b:c6:3f:a2:79:
5b:c2:bd:11:72:65:9b:b2:08:c8:2d:5d:5c:fd:01:
05:83:ff:45:a9:c8:86:e7:d4:a7:0b:25:12:0e:54:
d7:f8:96:77:30:00:87:a0:b5:10:94:ee:25:e5:10:
28:af:8c:07:34:ba:e4:0b:22:f7:e9:9f:42:ab:36:
90:38:b3:8c:01:f6:d3:7f:be:08:4d:09:df:79:49:
03:6e:fa:be:8b:91:da:95:70:0f:31:fd:f4:e8:8e:
ad:56:ea:91:83:1b:f6:da:97:5d:ae:12:75:83:13:
03:b6:25:cc:ff:14:d2:96:5d:de:5a:cc:f0:4d:67:
72:35:39:c8:1c:b2:15:77:6f:d8:a0:48:47:9f:16:
a5:ad:27:a2:b3:dd:45:09:17:ba:ee:89:89:a3:e2:
5c:14:b0:22:fb:6f:d5:b5:f9:76:27:41:4f:0e:a6:
99:b4:ca:75:43:d7:1d:f1:ec:f2:64:c2:df:6c:0b:
76:ab:f4:98:30:4e:0d:e6:9d:55:c6:69:1a:8f:9f:
7f:5a:ac:de:78:d4:9e:a7:3c:b9:20:ad:c8:49:dd:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EE:FA:87:7A:F3:06:23:67:0E:05:1F:3C:18:E1:EA:78:41:04:79
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/991142DE84EE11EC83FAF06EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:23:b3:83:ce:e9:5a:10:db:4d:e0:f2:00:11:34:32:2a:cc:
64:8e:41:46:ef:6a:0b:05:14:33:9e:12:e0:2b:c1:e3:e1:05:
46:3f:b4:ef:20:30:3b:91:20:69:c9:71:d6:28:c5:4b:56:10:
60:cf:63:3e:2b:24:fc:41:fd:2b:aa:bb:e8:19:f7:3c:d6:f4:
29:f8:26:9b:d9:47:d8:81:c8:2e:c2:9e:cb:36:af:39:87:ae:
3f:69:89:52:1e:64:e4:82:7f:75:e7:e8:28:34:a5:ad:e0:63:
1e:59:a3:59:38:13:2d:ec:1b:19:00:b6:ab:42:0f:1a:b0:87:
cc:21:3d:bc:24:4d:2e:d8:49:9c:a7:9b:2d:a3:79:43:01:63:
c7:97:1b:5b:b5:47:8b:2f:58:18:d9:e0:92:f1:1f:a7:da:09:
07:40:57:81:8c:04:f5:53:3e:14:50:c1:40:57:70:8c:ff:b1:
19:f3:54:60:a8:f2:f0:8e:1d:59:21:7e:a9:ea:e9:32:92:31:
69:50:36:c8:80:75:d3:73:c8:95:ec:47:e6:bb:fe:5b:3b:21:
50:9d:db:49:57:d0:8c:de:e1:a2:53:61:77:72:48:c8:88:17:
62:d1:df:00:5b:e5:33:1b:d8:5b:78:00:93:86:34:21:2f:4b:
10:92:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:02 2025 by rpki-client