Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CBA9007448B911EFB11C3E3BC4F9AE02.roa
File: CBA9007448B911EFB11C3E3BC4F9AE02.roa (raw, json)
Hash identifier: wg7/ZBSQP96wR7t9bRQAB/FEUSycMC0mnBtLH3GJJOk=
Subject key identifier: 28:20:0E:14:06:58:6A:E2:86:92:15:08:CE:83:A2:7E:F3:28:F5:29
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9F8F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CBA9007448B911EFB11C3E3BC4F9AE02.roa
Signing time: Wed 18 Dec 2024 10:02:57 +0000
ROA not before: Wed 18 Dec 2024 10:02:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151772
IP address blocks: 103.23.92.0/23 maxlen: 24
103.159.106.0/24 maxlen: 24
103.159.107.0/24 maxlen: 24
2001:df2:dac0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40847 (0x9f8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 18 10:02:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67629dd1-6311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:52:04:42:34:85:d9:de:f9:1d:77:b4:d8:
d4:7b:2c:43:1e:7e:44:69:d9:dd:e5:27:57:17:2f:
91:8c:e6:ac:c5:07:63:fa:db:c6:ba:70:cc:f0:8b:
ac:be:7c:56:66:7e:65:83:51:45:bb:f2:83:9f:ec:
2a:e9:ea:63:c5:90:f0:36:28:d2:8d:25:53:46:35:
9a:4a:85:cf:da:8b:4a:a6:7c:38:92:5b:12:c5:6e:
41:1e:e0:9c:83:83:cd:46:d1:e8:71:db:02:e8:11:
f0:6d:45:02:4d:ff:fa:72:22:f8:34:61:4a:73:fb:
92:91:69:ad:4c:21:23:59:e1:16:df:75:0f:c8:99:
6c:f1:54:12:ee:95:de:a1:2c:72:bd:6b:f4:30:3e:
f6:0f:4a:28:8d:dc:75:dc:73:cd:6b:c7:e1:48:b8:
9b:fd:99:1d:1f:43:5a:96:c7:33:ad:cf:0f:f5:44:
e9:e4:f6:58:64:31:b3:39:cb:1e:da:f1:86:57:26:
8b:3f:3f:c2:01:e9:08:57:d2:f9:70:46:c4:4d:d7:
d1:e0:cb:8f:1b:1f:75:64:65:57:23:88:c9:48:c1:
29:97:10:a2:db:de:6a:90:5d:a2:0c:c4:40:df:48:
c6:18:c1:02:e9:a0:a8:6b:82:38:b0:6e:c6:cf:11:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:0E:14:06:58:6A:E2:86:92:15:08:CE:83:A2:7E:F3:28:F5:29
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CBA9007448B911EFB11C3E3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.92.0/23
103.159.106.0/23
IPv6:
2001:df2:dac0::/48
Signature Algorithm: sha256WithRSAEncryption
1e:01:49:16:db:28:82:ef:83:8d:0f:b5:d8:fd:99:9b:b3:65:
f3:e6:5e:09:2b:4f:f9:d1:a0:d9:7e:6c:8d:56:f2:08:7f:7f:
58:81:d1:ea:ea:c2:64:16:66:bb:37:1e:f0:07:77:99:a4:1e:
2b:06:25:ad:f0:32:bf:65:4e:51:14:e1:c8:00:62:f0:6a:6a:
9a:bf:94:c8:d7:ca:cc:a2:e4:a0:87:bf:2f:5f:f4:c1:64:f1:
48:dc:b9:cb:53:2c:99:35:b6:ae:db:fc:58:b5:4d:9f:43:12:
87:f9:89:a0:09:83:f7:3c:cf:9c:2a:a9:34:b5:6e:17:fe:c7:
15:34:ee:1a:92:23:8a:c2:7a:ac:d0:51:c4:80:e2:a0:8d:e3:
2c:e5:ae:29:6f:32:32:b5:05:68:8f:bb:9e:45:44:c6:0f:1d:
b0:53:74:60:91:da:90:f0:17:d1:a0:ff:63:f2:33:b7:b6:15:
67:b8:67:03:b6:84:da:3a:34:ed:e6:db:a4:ec:81:14:f8:d7:
f5:ca:a9:bc:86:de:77:01:a7:0f:6f:6f:f8:cb:af:c6:86:1c:
6a:c6:9d:d6:80:b8:f5:46:ab:82:86:47:35:7c:4a:70:18:80:
66:6f:cf:a7:6a:7a:a9:18:85:c4:11:1d:6f:b1:78:28:f1:8a:
32:d4:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:36 2025 by rpki-client