Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1A8E0448E0611EBA685BB7FC4F9AE02.roa
File: A1A8E0448E0611EBA685BB7FC4F9AE02.roa (raw, json)
Hash identifier: LMjYTYRomv7Ld/sYzBx0cYENS8pOnCLDNILMURgCYuo=
Subject key identifier: FD:9D:4B:B3:C1:A5:89:70:DF:F2:C7:48:FC:16:71:9B:3F:5A:CA:78
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8D8F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1A8E0448E0611EBA685BB7FC4F9AE02.roa
Signing time: Thu 30 May 2024 16:16:06 +0000
ROA not before: Thu 30 May 2024 16:16:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141561
IP address blocks: 103.163.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36239 (0x8d8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:16:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a646-06f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:83:63:0a:d2:2e:f6:56:30:5d:53:4f:44:
7e:bd:ba:41:ff:2d:98:40:81:13:98:64:ad:51:4e:
b5:75:5d:29:19:fc:58:06:97:1e:46:70:69:6e:9d:
7a:d6:8b:2e:b5:1b:7e:02:88:b1:c0:a0:2f:8f:7d:
39:e1:84:c1:13:e6:cf:f8:4f:38:35:9d:38:47:4b:
60:0b:df:16:33:f7:a2:f6:ca:9d:a0:22:be:eb:b5:
f3:05:04:62:51:d7:7d:d8:bb:a8:80:12:9d:72:46:
d9:1e:e2:64:38:22:80:7a:44:11:da:28:96:47:26:
49:9a:ef:8b:2f:d0:e1:c9:01:67:24:62:18:6c:7f:
2c:b0:73:30:55:0c:d8:ef:7f:67:e1:74:cd:a1:da:
0f:44:2e:db:fa:ba:af:85:92:91:90:d2:0b:2a:14:
83:a2:25:29:8d:e6:a3:1c:bf:29:88:f0:2f:37:ad:
b1:e6:af:46:d7:ac:ff:31:0f:1e:71:a6:0f:b5:30:
a4:c6:8b:d6:e8:5f:e4:30:c3:5d:45:9b:52:ab:9d:
89:80:42:1e:58:06:ae:dd:94:cc:17:87:50:b4:3a:
8f:d1:50:9e:5b:6a:e7:8a:9e:4e:e7:99:d1:e6:fa:
0e:58:16:26:e0:bc:66:ef:41:66:4e:0f:9a:9b:6b:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9D:4B:B3:C1:A5:89:70:DF:F2:C7:48:FC:16:71:9B:3F:5A:CA:78
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A1A8E0448E0611EBA685BB7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.242.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:c7:50:34:99:41:ce:fc:d4:d1:cd:df:6c:66:6e:1e:f9:78:
13:93:5d:b7:6b:4c:75:b0:05:3f:4f:a9:8c:85:48:31:84:02:
05:c5:65:ed:d4:ad:dc:d4:1f:7c:d7:26:ff:22:7f:68:5b:69:
4d:16:b1:e8:61:f4:46:c2:98:17:ba:35:14:9e:c1:49:8e:c9:
eb:64:da:0a:11:7e:e8:ef:e8:48:0c:77:17:3b:c3:71:2f:fc:
bb:d6:8b:3a:1e:31:14:0b:33:28:78:23:40:99:fd:d7:47:b7:
eb:a5:5b:00:c0:0f:84:8a:18:d5:cf:00:7c:0c:7c:4b:71:6a:
1e:cf:9c:8d:62:2c:88:5c:ff:88:c4:44:26:f1:4b:f2:c2:6a:
01:08:a4:48:09:d6:1f:51:f8:81:43:ce:64:b9:e8:37:c2:a2:
7d:40:eb:f9:5e:bb:73:51:53:05:09:cf:04:26:ea:e5:ca:21:
0a:01:ea:a8:46:b4:13:c1:4c:e9:b3:bd:d6:71:5a:73:70:fe:
28:25:32:1f:76:f4:03:59:53:20:70:61:19:63:e6:ed:89:c1:
f5:60:18:db:6b:10:81:6b:68:a6:f6:e5:58:ff:5f:0e:dd:e5:
1d:e2:33:0b:4c:bb:f8:89:05:91:11:72:31:37:5f:58:45:43:
f7:9a:49:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:46:32 2025 by rpki-client