Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE6359B6A8AB11EF81B8B880C4F9AE02.roa
File: CE6359B6A8AB11EF81B8B880C4F9AE02.roa (raw, json)
Hash identifier: Fk2Q4dL7v7vdw9z6hwFHdVxUSwCUseTZoNvSV56k5Pg=
Subject key identifier: 7D:E2:EB:27:F8:CB:62:12:1A:76:7A:79:20:3A:D6:61:BB:77:D6:FD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9D98
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE6359B6A8AB11EF81B8B880C4F9AE02.roa
Signing time: Fri 22 Nov 2024 08:28:53 +0000
ROA not before: Fri 22 Nov 2024 08:28:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138749
IP address blocks: 103.137.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40344 (0x9d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 22 08:28:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674040c4-73bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:26:15:a4:c4:f5:bc:03:03:81:a3:90:75:
18:5e:95:54:65:db:5c:cd:87:6e:a2:ed:ba:6d:3e:
4b:60:f9:e3:39:0f:3e:3b:25:25:b7:a2:4f:15:07:
44:d0:81:0a:5b:00:ca:fe:4c:54:f4:fc:cf:51:60:
b7:f3:a1:d7:7d:c6:35:ef:82:28:12:10:4b:66:0d:
90:98:d7:dc:14:48:8a:18:93:1a:f4:55:1f:4b:2d:
48:01:c7:26:e2:04:21:31:12:9b:6d:7b:93:73:6e:
10:45:19:41:82:ca:fd:03:7e:09:50:5a:fe:b1:6a:
59:5d:8d:a1:9f:f4:58:88:9d:22:9a:c2:2c:bc:49:
6b:e3:a1:b7:64:d1:f6:0e:d2:c7:50:48:31:56:a6:
63:f5:56:7f:e7:84:13:7b:ca:ec:29:62:7e:64:77:
f2:14:b0:7d:4b:9a:b9:82:ff:7b:e9:b2:af:42:bc:
38:9d:79:e6:a6:98:cc:fd:24:81:2c:ca:70:c4:81:
1c:38:aa:6a:9f:af:cd:3d:e7:90:58:d0:b9:d2:40:
3b:ba:ab:51:fd:e9:89:74:c9:44:c5:47:30:94:03:
91:77:ea:f9:5f:1f:34:61:e0:39:47:6d:a8:30:d4:
e2:a8:76:20:21:8d:e8:c9:c1:60:52:2d:f1:f8:cb:
85:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E2:EB:27:F8:CB:62:12:1A:76:7A:79:20:3A:D6:61:BB:77:D6:FD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE6359B6A8AB11EF81B8B880C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.172.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5f:06:6e:0e:45:d8:e3:57:2f:f9:bc:fe:27:45:a7:62:1d:
13:99:62:f8:91:34:82:3d:bb:63:35:43:e2:96:14:7f:d6:01:
74:f8:37:ca:cc:bd:05:51:1d:ab:2b:6b:27:5c:fc:88:09:5c:
af:e3:00:4d:ff:a9:14:31:ea:9e:74:0b:ba:26:8b:56:b5:23:
b9:83:2d:df:6e:06:ab:6c:76:5e:a2:d9:30:ae:18:2e:3e:8b:
1e:69:1a:5c:c2:3b:12:e0:c9:f9:7c:cb:f9:9a:37:d2:e3:31:
12:94:08:ff:86:e9:a3:69:93:38:b8:d5:df:f5:d5:0e:90:ec:
42:6d:e1:f4:66:dd:87:43:f0:84:88:df:b5:ac:58:c7:e3:80:
5d:3d:b6:a6:50:03:c7:4b:d0:69:2d:22:3d:a7:ea:95:4d:ab:
a0:b8:a1:c2:cb:ce:be:5c:a2:bc:80:cd:e2:22:b0:9d:e5:f9:
57:fc:db:17:a9:8e:27:b5:d5:cb:16:3e:8a:c8:47:14:c9:c7:
67:30:c9:b2:fc:bd:dc:43:91:1b:3f:9c:8a:a4:d5:ac:1d:03:
89:fb:f7:e6:4f:f0:f3:0b:69:a7:50:0f:ad:04:ec:ed:1d:d0:
f9:d6:17:64:42:e1:6d:c2:a9:4d:e6:5f:b0:30:92:a3:c4:6f:
dc:22:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:27 2025 by rpki-client