Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8CC3298243C11EDB970A574C4F9AE02.roa
File: C8CC3298243C11EDB970A574C4F9AE02.roa (raw, json)
Hash identifier: 5kTZk0Dwo6TiPSTM890nLwAomXZDvBCNWxPE7XuBTdg=
Subject key identifier: 21:54:30:85:B7:40:39:85:29:F0:AD:67:8F:3A:B7:87:CD:0C:74:FB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8F72
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8CC3298243C11EDB970A574C4F9AE02.roa
Signing time: Thu 30 May 2024 16:23:50 +0000
ROA not before: Thu 30 May 2024 16:23:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150034
IP address blocks: 103.190.144.0/23 maxlen: 24
2400:9160::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36722 (0x8f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:23:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a816-ee91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:5e:b0:04:b2:0f:5f:4e:2b:91:1c:c4:5f:
81:e4:df:2a:39:13:4f:7f:78:16:57:02:2a:d6:f9:
92:91:c3:12:02:ff:cc:75:cc:19:7d:e4:da:07:eb:
b7:2e:b8:b6:55:ef:cb:7a:bf:c6:3a:56:4e:0d:a4:
29:e4:a8:1a:cf:20:0d:fa:17:ee:a5:67:7b:32:92:
e6:44:88:ba:a2:d0:fa:2f:c4:ed:9d:1b:74:d3:21:
cc:f0:82:16:bd:b2:1d:e2:bd:58:35:61:0b:fd:2e:
a8:33:ea:1f:80:c1:c1:70:92:2b:a5:15:2b:2e:91:
5c:35:0f:35:5a:b0:5d:7e:de:f9:48:7d:76:54:25:
c9:c4:31:73:b9:a7:f4:81:44:e5:20:ad:ff:d1:7e:
8a:9a:7b:02:b1:23:0b:bc:82:e8:e0:54:e9:9b:02:
63:a8:2c:38:dd:2d:ec:98:5c:3e:9b:a2:b6:87:31:
de:a3:3e:8f:fd:7f:a4:76:46:94:3a:a4:d6:36:6c:
a8:b3:6b:ce:a7:d8:8c:46:11:86:a9:f8:e0:c2:fc:
58:87:ac:2c:7d:4b:d4:06:7d:f5:3f:0d:13:47:c4:
30:4d:b2:9e:8c:ed:2b:4f:31:38:7b:70:12:69:b7:
57:d9:6e:f2:7e:97:2f:89:6f:4b:3d:0f:b3:05:25:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:54:30:85:B7:40:39:85:29:F0:AD:67:8F:3A:B7:87:CD:0C:74:FB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8CC3298243C11EDB970A574C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.144.0/23
IPv6:
2400:9160::/32
Signature Algorithm: sha256WithRSAEncryption
95:1d:2f:ac:f8:85:c2:df:0b:8f:9d:b1:fb:dc:0d:67:7b:cb:
5a:d3:d5:64:0c:f4:18:c9:97:1c:0e:7b:0b:60:94:25:5d:97:
f9:47:46:65:42:13:ea:dc:83:1f:d4:49:61:e7:ce:4d:16:53:
de:46:91:0b:93:90:9d:cc:22:a4:6c:5c:57:d7:4f:f0:2e:70:
b9:ff:37:a3:95:c7:61:a7:cd:30:46:55:a3:9d:9e:e3:29:ea:
48:01:ac:01:d1:cd:8c:dd:d1:a7:83:3d:82:1f:04:2a:35:53:
bd:e0:6a:22:6f:41:1f:2d:aa:ee:56:cc:40:40:6c:bb:04:ac:
7e:df:c2:a2:81:13:aa:66:eb:8a:12:ef:ab:19:26:6e:4d:c1:
ad:30:0f:fd:b8:6d:8f:87:4f:89:7a:13:14:67:4f:97:06:ac:
aa:01:63:08:32:b5:a0:48:2e:68:d4:5f:37:9d:af:6a:d6:72:
8c:7a:7b:1e:72:d0:45:2a:ad:14:5b:63:0d:48:ee:22:0a:e2:
13:51:23:f4:e2:ba:a8:cf:f0:09:8d:f2:32:40:c5:65:f3:a9:
20:df:5d:07:63:7c:bc:3d:27:f4:4e:c6:ae:b0:1d:5a:28:3d:
a3:89:f1:f5:97:d4:bd:e1:72:8a:05:52:82:b2:e2:fa:1e:ae:
06:a5:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:38 2025 by rpki-client