Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C892F92C780F11EBA1552785C4F9AE02.roa
File: C892F92C780F11EBA1552785C4F9AE02.roa (raw, json)
Hash identifier: AtouNsLGYg3tTBjCcy3g65inhtH+eMYcyfUHel9xlD0=
Subject key identifier: B7:45:FF:40:C7:18:8F:74:43:FD:D7:AB:2B:AF:29:09:56:BE:59:94
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 88AB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C892F92C780F11EBA1552785C4F9AE02.roa
Signing time: Thu 30 May 2024 15:55:33 +0000
ROA not before: Thu 30 May 2024 15:55:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132987
IP address blocks: 103.160.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34987 (0x88ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:55:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a175-5a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:17:07:b3:c1:24:0a:ab:0d:b4:ee:bb:33:
98:fe:9e:f0:75:d5:3f:61:82:8e:db:93:1c:8a:b6:
4d:cf:17:d3:1d:25:be:0b:d6:43:a4:19:b1:1d:7f:
88:3e:d7:28:d1:db:9c:0a:d0:27:07:1b:ad:65:ea:
3c:b3:b5:07:ca:c3:0a:52:a5:7d:86:1a:59:c0:71:
54:ce:bf:82:1c:d5:be:60:f6:96:39:f0:64:b3:a1:
b7:ac:f2:46:1b:b8:4e:ed:49:f7:64:03:b4:ed:45:
91:97:ac:e2:df:59:7e:e5:f6:ea:c7:96:cb:c8:dd:
5c:65:11:1b:7c:09:de:43:2b:bc:8e:db:92:c7:ed:
4e:95:39:a0:e3:b7:1d:95:0f:7f:5c:22:71:59:3a:
5b:4c:04:bf:df:83:a0:15:f2:dd:fd:b4:eb:67:4c:
04:4a:45:ac:e7:ad:cf:51:61:19:e4:7d:96:6a:b2:
e1:6a:bb:46:87:ff:0f:cb:5c:c3:38:50:be:db:21:
59:82:64:ef:56:55:83:84:8c:dc:b4:1e:7c:80:f4:
a9:86:bf:eb:1b:ee:1a:ba:e3:7b:f2:4b:d0:a7:1d:
1f:51:ce:62:35:9a:81:d5:f8:99:de:ec:61:10:d4:
05:0f:4d:8d:c0:57:ae:e7:07:78:2b:79:13:6b:77:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:45:FF:40:C7:18:8F:74:43:FD:D7:AB:2B:AF:29:09:56:BE:59:94
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C892F92C780F11EBA1552785C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.134.0/23
Signature Algorithm: sha256WithRSAEncryption
60:64:eb:68:21:6e:7e:d0:bd:f5:3d:0a:d1:d2:05:e8:c0:ac:
03:b8:09:1d:70:e3:0c:14:e0:b6:fd:90:fe:7e:eb:75:bf:0e:
42:d4:0d:e6:d5:a9:1a:1e:0d:d5:17:5f:c3:c9:fd:1b:2b:43:
29:6b:26:08:e7:62:4f:f9:23:4e:3b:d5:d3:e6:fa:57:d7:b0:
3a:d3:b0:c3:8a:08:07:ac:e0:71:2c:01:00:69:2d:8d:69:b2:
25:ce:a3:81:78:76:45:e6:bf:60:91:e7:0e:e2:d9:1f:c5:f8:
89:70:f7:56:c9:3e:e4:3e:16:0a:42:ee:37:05:43:b9:97:b3:
9f:9e:16:48:67:fe:80:cb:25:5d:35:53:1c:d5:59:de:57:21:
2e:21:fd:1e:d3:03:6f:c9:35:39:63:5b:e3:c4:4b:fb:7f:1c:
5d:89:75:3c:d6:de:7b:8b:41:8d:5b:c3:70:59:61:ac:3f:d0:
dd:d1:3f:95:a4:dd:33:06:60:3f:38:f2:ed:bc:d1:ad:d7:ce:
88:fe:ce:88:51:b4:55:98:62:88:33:6a:a4:b6:7d:91:8d:d0:
25:f7:9a:b7:15:c8:a0:7d:94:ff:01:3e:60:36:50:49:d0:39:
36:28:83:29:3f:1c:f0:1c:eb:14:c8:ed:6f:da:04:23:a3:35:
4e:f6:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:43 2025 by rpki-client