Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A87FAC6E69D511EF9AA12F53C4F9AE02.roa
File: A87FAC6E69D511EF9AA12F53C4F9AE02.roa (raw, json)
Hash identifier: T2poUVzGGegmDWeZW/QUuMU/iAIJAKDwqIC+QrtSoZ4=
Subject key identifier: 01:E4:85:D4:1C:55:6E:49:26:88:04:F8:2C:E8:63:74:97:6D:07:1E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9A5B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A87FAC6E69D511EF9AA12F53C4F9AE02.roa
Signing time: Fri 27 Sep 2024 10:04:30 +0000
ROA not before: Fri 27 Sep 2024 10:04:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135799
IP address blocks: 103.68.28.0/22 maxlen: 24
103.82.125.0/24 maxlen: 24
103.83.127.0/24 maxlen: 24
103.83.148.0/23 maxlen: 24
103.163.124.0/23 maxlen: 24
103.243.5.0/24 maxlen: 24
103.243.6.0/24 maxlen: 24
2401:7dc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39515 (0x9a5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 27 10:04:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66f6832e-7f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:e6:b6:16:8a:aa:13:c7:12:94:f9:45:ac:
6b:71:b3:65:d1:09:32:5e:5b:e1:36:5f:8d:e3:c4:
e7:7c:32:35:0d:ec:ae:65:02:2f:b4:14:a6:fb:af:
fd:05:01:37:ce:0d:6c:2d:b8:be:86:6c:42:2d:74:
4b:4a:ac:72:d8:d9:16:5b:47:15:47:79:d6:1c:60:
18:96:1b:5b:91:9f:38:c5:12:dd:e3:a8:b9:a1:55:
d5:69:5c:14:ce:55:bc:1e:07:0a:70:d9:14:08:1e:
26:88:72:4f:a8:b1:a4:6c:b6:98:47:fc:96:a0:e4:
61:90:0a:06:bc:89:fd:9d:13:94:89:75:55:aa:4a:
73:a6:d5:42:1e:25:02:f7:8f:5a:a8:04:36:f5:4c:
b1:ee:00:7c:cc:c9:5f:ee:63:f0:19:d8:18:00:ba:
e3:49:34:b5:25:08:02:13:8c:15:6d:2e:cb:72:92:
d8:18:0b:eb:41:ae:88:ad:c8:03:a5:1e:47:cc:31:
d6:f4:2a:7c:a7:2e:d7:7d:49:48:94:e0:26:83:72:
da:2d:50:08:74:63:a5:a1:45:77:8e:ef:5d:aa:b0:
17:3a:1b:7d:e9:85:2a:53:71:94:1e:40:2c:d1:22:
3a:51:2e:e7:dd:a7:a8:fa:42:09:37:b0:4f:32:e2:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:85:D4:1C:55:6E:49:26:88:04:F8:2C:E8:63:74:97:6D:07:1E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A87FAC6E69D511EF9AA12F53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.28.0/22
103.82.125.0/24
103.83.127.0/24
103.83.148.0/23
103.163.124.0/23
103.243.5.0-103.243.6.255
IPv6:
2401:7dc0::/32
Signature Algorithm: sha256WithRSAEncryption
94:cb:a4:a8:0e:bf:c0:30:09:91:b3:fe:f8:98:56:e4:3c:35:
4f:53:02:36:bf:ab:b9:a4:78:9f:c8:df:67:f7:7b:87:7c:90:
7e:bd:a6:04:c2:b9:0d:24:35:78:8d:a8:8f:fa:22:2c:5b:4f:
11:1b:4a:08:2d:17:d9:e3:fa:ec:25:f2:34:03:9e:32:2f:4d:
f6:f7:5b:15:b2:7c:8a:df:30:2e:d2:a3:d2:d1:6a:73:51:46:
84:d7:fb:c9:c0:4b:65:8b:e7:4c:8b:57:8f:7c:fb:24:92:05:
49:36:ab:1d:fb:44:14:46:64:9d:55:ac:e4:1f:8e:a8:76:ea:
d6:fd:ae:5f:b1:d1:6e:20:f1:af:9a:16:67:84:91:e4:89:ad:
63:5b:b4:35:73:11:fe:2b:64:3b:32:80:c0:be:79:63:c5:d8:
d4:73:57:49:5e:96:8c:d3:ca:af:41:54:4c:71:d2:64:32:28:
94:0a:95:01:94:d7:1c:fd:65:27:46:1d:80:43:18:22:1b:6a:
2c:ae:2e:82:3a:94:de:2c:23:89:b9:14:6e:41:e7:af:d8:3b:
06:04:96:f1:53:c3:8c:83:3a:39:aa:93:b7:77:9a:2f:e5:50:
8e:95:33:f0:2b:ae:7c:99:a0:5e:5f:7b:25:de:0e:e8:3d:13:
c3:26:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:21 2025 by rpki-client