Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCCC35E46EDB11EC9178D238C4F9AE02.roa
File: CCCC35E46EDB11EC9178D238C4F9AE02.roa (raw, json)
Hash identifier: 6gjuwgLuxqJgzO5bAAcRd90zpe96aabMF2vuS4Z9TzU=
Subject key identifier: A1:48:BE:79:59:1B:0A:08:A8:E2:4C:D5:B5:1A:A7:63:8A:E4:63:C0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8ED4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCCC35E46EDB11EC9178D238C4F9AE02.roa
Signing time: Thu 30 May 2024 16:21:19 +0000
ROA not before: Thu 30 May 2024 16:21:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149204
IP address blocks: 103.178.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36564 (0x8ed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:21:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a77f-a7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:ba:cf:cd:ed:0b:6e:16:d1:68:dd:0c:4e:
2a:7e:c2:fd:84:74:41:b4:91:c4:11:4c:60:6e:60:
27:ad:23:93:b9:8c:58:3e:7b:29:a4:84:df:6a:58:
be:87:a8:26:38:2b:d5:d8:6e:e8:93:2e:17:c1:c7:
ae:30:94:80:af:c3:0c:2a:5c:9d:a8:a3:59:f0:d1:
31:64:5b:d5:b2:46:26:b3:84:e3:82:52:3e:70:dd:
f6:81:0f:9d:d7:28:1d:7e:7f:55:61:e3:d3:74:1d:
03:21:a3:6c:ac:6c:2b:c5:70:03:87:79:dc:ea:d4:
b5:ba:35:78:79:70:90:f0:4d:22:6c:e1:fe:cc:09:
eb:cd:e3:5f:0c:12:26:5f:15:4f:19:2d:c0:56:92:
2f:68:52:f0:8b:fa:ad:63:f6:7f:ab:68:e2:57:30:
56:ab:76:2b:58:ae:b9:88:1e:73:3e:64:a4:3d:c8:
5b:0d:33:44:00:3b:68:89:a0:ba:26:0d:75:8d:b3:
9e:4f:64:01:e8:ea:01:32:18:79:44:2b:6e:75:0e:
83:d3:e0:6d:07:ca:3e:be:42:0e:39:df:93:04:f8:
ad:8e:e8:b5:43:f0:bf:20:be:52:88:8e:eb:02:07:
5d:6e:f0:3a:e7:13:6f:23:2a:a2:69:8c:42:b5:86:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:BE:79:59:1B:0A:08:A8:E2:4C:D5:B5:1A:A7:63:8A:E4:63:C0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCCC35E46EDB11EC9178D238C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:a1:a7:2f:43:f7:76:7a:3e:8f:d3:17:3c:33:bf:90:85:70:
20:1f:80:cd:bb:1b:1b:07:5a:dd:71:fa:4e:14:14:ab:4c:17:
4c:6f:fb:72:49:80:9d:57:98:23:d7:03:4b:08:37:f5:04:50:
c9:06:06:b2:7e:cb:a1:ca:58:2b:f6:55:0d:11:20:ad:b7:1a:
be:53:e1:b3:5f:e0:17:aa:37:4d:5b:34:64:33:ee:82:ee:a0:
7e:8e:45:83:04:3e:93:0f:2e:4f:d1:68:01:6d:76:ba:6b:6f:
7a:42:0c:59:50:5d:27:45:8a:24:88:a8:b3:11:52:1e:7f:18:
8d:b8:83:3c:87:3b:90:f8:90:54:3f:ab:2b:2e:30:52:17:bc:
37:58:e6:b4:2a:57:f2:88:3c:90:92:08:85:0a:54:73:08:00:
a1:6e:24:6a:86:33:ba:cb:4b:64:9b:2e:88:e4:d5:d0:f5:fc:
70:f3:f9:9b:ee:4a:a0:cf:7f:4c:cc:f1:fd:86:57:1c:a1:70:
d4:a1:45:aa:42:f2:43:d0:69:d6:7b:ae:f3:88:ea:b7:c0:f5:
86:60:d8:47:32:36:ec:9f:e0:43:66:03:17:32:b4:8e:d7:3a:
52:ac:3c:c7:ae:ac:5c:9c:3c:6f:a7:5f:29:1d:81:06:b8:49:
e0:03:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:19:11 2025 by rpki-client