Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa
File: A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa (raw, json)
Hash identifier: HRZJRpXvwHH7jh2kTttyzF4j9BQ6e7RIhOEbAMWqb0w=
Subject key identifier: 54:93:9D:BA:07:0D:1F:43:FC:16:CE:10:80:6B:B0:15:3B:CC:67:A9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8EE8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa
Signing time: Thu 30 May 2024 16:21:37 +0000
ROA not before: Thu 30 May 2024 16:21:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149232
IP address blocks: 103.181.232.0/23 maxlen: 24
2001:df3:8dc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36584 (0x8ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:21:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a791-6e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:46:de:e9:8b:83:0d:00:1f:ce:a7:45:50:
2a:88:32:89:13:3e:da:a0:88:e1:f3:69:c6:47:cd:
57:0a:bc:41:71:ec:e7:36:03:63:c3:ec:91:04:ac:
c7:35:6c:36:f1:ba:6f:c2:63:31:20:57:b5:96:0a:
ad:3e:bc:57:90:8f:df:9c:19:43:90:d1:ca:6e:d4:
22:91:2d:10:d8:d7:0e:20:84:c8:cd:be:e4:77:95:
24:9b:32:07:2f:1c:35:2f:60:60:a6:f3:11:46:db:
27:3f:51:ee:a4:24:67:fa:ac:69:17:55:57:57:ab:
da:d7:21:4a:7a:47:ca:d4:f1:41:fd:56:5b:b9:76:
62:c3:11:a2:f7:76:85:35:df:49:0e:34:3c:a1:1c:
2b:bd:54:44:ef:3b:ab:1c:e1:63:19:4d:2b:19:e9:
cf:3e:cf:aa:81:1e:98:77:81:cb:4a:6f:6f:a7:bb:
67:21:44:f3:3d:18:8e:c8:c8:c6:a9:7b:22:10:ec:
2d:ee:1e:22:a4:cc:20:8d:0e:45:63:b0:3d:b7:58:
6e:1d:da:1e:33:11:c5:79:f8:32:38:f0:e6:4c:fc:
92:89:b8:66:dd:0c:38:3d:96:bc:5c:57:0c:5d:8d:
6a:ca:42:6c:bb:35:77:0a:b9:20:6b:b7:24:4c:cf:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:93:9D:BA:07:0D:1F:43:FC:16:CE:10:80:6B:B0:15:3B:CC:67:A9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.232.0/23
IPv6:
2001:df3:8dc0::/48
Signature Algorithm: sha256WithRSAEncryption
9e:61:53:4a:77:94:4b:bd:30:af:8f:84:43:9f:96:dc:ec:8e:
c3:02:71:58:15:9d:23:95:10:51:b7:91:cb:03:1d:88:6f:6d:
76:f9:f8:02:00:ab:da:34:c7:b9:3b:24:f8:16:0f:5b:d5:7a:
01:c7:28:58:69:10:cb:56:ba:c9:56:e1:92:3c:5a:4e:fa:ab:
32:c0:48:6d:f0:26:8a:79:22:7b:48:18:f2:10:7c:c4:f5:2b:
f8:a2:73:b9:3f:f6:86:05:8f:ff:ab:30:e0:35:95:0e:aa:1e:
e6:c7:ff:24:7e:d7:83:aa:f2:9f:08:e8:ea:07:96:0d:fb:5c:
ed:5c:51:d0:f3:0c:c1:dd:90:4c:18:8f:2f:2d:65:1b:81:f8:
ad:cd:cf:0c:a2:07:6f:a9:c9:60:6b:32:e3:cc:72:ac:bf:68:
03:a9:6c:54:21:35:1b:45:5c:db:5f:c5:e0:3f:5e:6f:cd:b4:
06:55:3b:16:48:e8:95:07:1a:0c:1d:3c:7d:88:16:73:cf:28:
ac:63:b2:2d:ec:00:91:dd:0f:82:3d:5f:64:a2:fa:dc:05:72:
47:73:f4:80:1a:94:3c:21:e5:09:ab:a3:23:f4:bf:78:b8:48:
3b:c6:72:8f:c7:02:6d:01:11:e1:ba:5b:59:40:9d:e1:91:48:
ca:f3:f9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:47 2025 by rpki-client