Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C581D314238C11EDA92A6284C4F9AE02.roa
File: C581D314238C11EDA92A6284C4F9AE02.roa (raw, json)
Hash identifier: LSLla8Z/xWAeRIcfuOzectymtUmuTNPrnlqur4kzI/A=
Subject key identifier: A0:1B:CB:55:95:A3:44:94:A1:6E:CE:81:7D:EC:37:9C:F2:F7:3C:AE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 891C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C581D314238C11EDA92A6284C4F9AE02.roa
Signing time: Thu 30 May 2024 15:57:28 +0000
ROA not before: Thu 30 May 2024 15:57:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133695
IP address blocks: 45.114.48.0/22 maxlen: 24
103.39.240.0/22 maxlen: 24
103.92.44.0/22 maxlen: 24
103.191.198.0/24 maxlen: 24
103.191.199.0/24 maxlen: 24
2001:df0:2d00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35100 (0x891c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:57:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a1e8-8145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:52:99:a5:73:9d:3a:25:b4:0a:38:2a:f3:
05:1c:b0:9c:c9:a1:2d:d3:ba:93:d4:a2:6e:87:84:
7f:37:12:9a:27:e9:3f:bc:8d:81:e9:d8:81:3e:30:
33:fb:99:8f:9d:13:5b:35:2a:b1:e0:16:0c:02:af:
27:db:e2:b5:40:5d:0c:48:3b:2d:40:5e:3a:4a:13:
2f:fe:42:01:44:1d:34:23:c2:77:f3:bb:fb:c4:87:
25:e9:4a:19:7c:b3:30:ad:03:58:fb:f6:55:00:ce:
62:47:ee:90:fb:a5:0c:37:ca:f9:c7:d3:b3:53:ad:
3c:63:86:e9:ab:da:a3:7f:64:d2:25:3a:7e:58:01:
33:41:52:ba:8e:6b:cc:71:e3:e4:55:ea:9b:ef:a1:
ed:f1:0e:03:62:24:cf:65:b4:2a:19:c4:6e:29:ff:
06:fb:e7:f3:37:ae:4c:ad:44:2a:41:2a:68:5b:80:
77:3d:26:8d:71:a9:4b:44:3b:04:b9:5e:ab:80:a8:
bb:cf:eb:bc:41:ac:b3:16:c4:8c:e4:75:41:97:46:
7a:d2:b2:2f:8b:e5:d6:14:91:fb:2a:6e:3b:e6:5e:
74:73:fd:4c:94:1a:69:56:f2:b6:4b:f9:af:1d:89:
a1:98:fe:4d:eb:d1:bd:ca:6e:3d:fa:9a:9e:49:0c:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1B:CB:55:95:A3:44:94:A1:6E:CE:81:7D:EC:37:9C:F2:F7:3C:AE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C581D314238C11EDA92A6284C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.48.0/22
103.39.240.0/22
103.92.44.0/22
103.191.198.0/23
IPv6:
2001:df0:2d00::/48
Signature Algorithm: sha256WithRSAEncryption
6f:0b:39:90:8c:eb:92:61:a7:0c:b3:49:f6:92:95:cd:eb:68:
ec:7a:53:85:0d:ca:00:93:6f:d3:f6:eb:2b:db:14:8d:14:80:
be:2c:a3:64:3b:5f:f8:75:1c:de:0d:c7:a1:fd:63:ab:19:28:
1b:06:16:a1:3b:38:f0:99:19:13:8d:0a:7b:3e:60:df:e5:ba:
c6:70:f7:3c:da:62:30:7e:d0:31:80:3e:fb:1f:ae:90:5e:ad:
b4:6c:75:be:69:3c:69:62:be:0a:48:ce:4f:0f:8b:e8:0f:ba:
8c:bd:77:bc:9e:41:d5:84:44:03:ea:a0:77:b1:dd:ee:18:6b:
0b:87:55:16:63:99:0d:0f:4c:66:a3:90:c8:c4:df:94:02:5d:
4c:d9:fe:e5:f9:db:14:e8:8a:18:a9:28:3a:48:82:cc:3c:7d:
3e:c9:df:16:1a:63:5f:a8:91:a0:1b:aa:0f:7c:67:30:c9:62:
bf:7f:55:9f:a4:d8:b2:48:ea:27:4f:f1:ba:f2:d5:f8:f0:87:
a8:17:9f:97:07:43:a7:9a:ab:b8:85:65:ed:27:e9:1d:2d:70:
fc:ca:90:b2:2d:14:52:9a:c7:b8:50:34:7c:4a:f0:3f:6e:6d:
a7:58:cf:cb:26:79:ca:85:ea:6b:4f:1a:34:88:1d:b2:18:db:
c9:54:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:15 2025 by rpki-client