Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C23A5982E81311ED8E3D6035C4F9AE02.roa
File: C23A5982E81311ED8E3D6035C4F9AE02.roa (raw, json)
Hash identifier: X2p1Bm6/trmOXuYUmOwFT2CoEdSmIU/HzikPsTgpoP8=
Subject key identifier: 34:05:3D:74:4B:EF:D0:83:54:CF:E8:31:DB:7E:37:3B:53:3A:A1:94
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 89B4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C23A5982E81311ED8E3D6035C4F9AE02.roa
Signing time: Thu 30 May 2024 15:59:55 +0000
ROA not before: Thu 30 May 2024 15:59:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134343
IP address blocks: 103.110.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35252 (0x89b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:59:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a27b-c0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:d2:b3:12:73:6d:44:25:28:c3:d6:de:ad:
8c:d9:d7:c2:7d:c4:d6:a0:8d:17:61:c2:91:d3:d9:
d1:5f:55:3c:59:c4:58:a0:3c:43:75:89:4b:8c:b9:
69:2b:d3:7f:64:63:9e:e8:42:ac:ae:a5:33:49:b8:
f7:b4:aa:5b:60:ee:7b:f6:7b:72:42:ef:ba:52:e5:
e5:67:de:e7:61:5b:2c:d3:ec:d5:1b:f7:7d:e1:95:
64:61:6b:8a:90:5a:19:d5:39:6b:73:b7:ff:63:ea:
b2:dd:63:b5:e7:23:27:2f:95:52:3b:88:d2:66:4f:
c4:39:8e:95:40:6c:4d:86:2a:83:75:a2:f7:29:ea:
a0:40:92:69:65:b4:f3:b7:d2:39:fa:ee:ef:b6:86:
a4:a0:79:67:a7:65:b6:30:d6:2f:52:08:f9:0a:12:
2a:7e:19:a7:86:44:4b:a7:af:a9:b5:a3:49:f8:7d:
77:3a:23:2a:f3:6d:e1:9a:27:19:60:4f:cc:a8:66:
b7:81:26:e9:93:11:39:94:78:5d:f1:7e:79:1b:2a:
60:32:de:d7:f3:a2:09:8b:58:0b:49:20:bc:59:32:
2c:55:2c:c3:ca:af:6c:8b:fa:9a:ae:01:20:fb:6e:
d2:90:d6:30:b2:1e:bf:f9:5d:bf:6b:48:40:e3:4d:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:05:3D:74:4B:EF:D0:83:54:CF:E8:31:DB:7E:37:3B:53:3A:A1:94
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C23A5982E81311ED8E3D6035C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.102.0/23
Signature Algorithm: sha256WithRSAEncryption
36:93:a0:31:e1:2d:d4:74:29:5a:f7:ab:c7:e6:d1:aa:04:4d:
93:a8:a0:40:a9:5d:f6:07:d0:4e:e0:c0:ab:e7:37:84:5f:5a:
07:bf:9c:1f:d8:2b:2c:a5:0b:a1:fa:28:49:d1:59:f8:52:e8:
78:88:ab:76:1e:69:5d:0c:f7:64:b1:05:4f:66:e7:95:4a:3f:
13:ec:79:51:cc:f1:b4:75:83:f3:ed:e4:1d:35:44:7e:c1:1f:
67:d8:3e:ae:f1:4c:8f:2d:68:c7:0f:a5:82:5e:36:ba:5d:fa:
b8:d6:5f:df:53:94:ef:c3:bb:0f:01:26:d9:dd:c1:30:c6:f5:
9f:f4:ea:13:7f:5c:68:99:f0:7b:6b:4e:43:14:39:83:3f:40:
98:7b:7e:d1:0f:89:38:e8:31:27:2e:dd:37:71:c2:98:bb:ef:
6c:56:c3:d2:14:4b:17:ac:81:b0:3b:75:23:9f:b1:b3:77:52:
01:77:23:a0:5a:99:05:dc:64:fd:7f:9c:c5:57:45:d3:c0:dc:
66:49:b0:b7:3f:db:62:ca:f3:b7:92:fd:59:67:a8:a7:b0:65:
6b:b3:95:2d:a7:7f:f7:1b:c9:ac:42:5a:de:44:e1:76:9d:9b:
3b:e0:e0:29:3f:bf:23:7c:01:3e:eb:fa:e6:53:c9:fb:c7:79:
d0:a5:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:06 2025 by rpki-client