Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa
File: CE68E3FE803B11ECA8F12731C4F9AE02.roa (raw, json)
Hash identifier: p7znQKoHewXccf4w2/bcnEABDxzEvRNBMKQ1f0fLi/g=
Subject key identifier: F7:E6:E2:A1:B1:29:66:A4:02:FF:DF:99:9C:94:ED:AE:E1:22:3C:29
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8DB9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa
Signing time: Thu 30 May 2024 16:16:47 +0000
ROA not before: Thu 30 May 2024 16:16:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141820
IP address blocks: 103.164.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36281 (0x8db9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:16:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a66f-a80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:0f:e6:08:f0:de:02:c7:72:60:61:79:45:
6c:c4:7f:42:8b:d3:30:dd:7b:42:1f:3b:cf:dc:be:
ae:b2:f2:f4:d5:ee:8f:b6:78:1c:20:26:63:f4:d2:
dd:54:25:24:8c:2c:71:a7:fb:1f:78:38:04:56:19:
cc:b7:40:3a:39:36:91:fa:be:f7:e4:bf:53:a9:09:
c6:a2:41:8a:bb:04:76:7f:85:79:5c:4b:91:af:87:
e7:54:26:e9:c6:9f:47:ab:6d:9f:22:36:c6:b5:92:
7f:c6:6e:f4:f8:9c:91:32:06:ce:bc:e3:23:5a:59:
23:55:a0:ec:84:93:11:3c:01:63:83:0c:7a:ed:fe:
96:fd:19:23:03:9f:5d:d5:b3:ae:24:02:75:99:1f:
41:72:b3:68:11:83:49:42:46:6d:06:9f:0e:f1:85:
0b:7f:28:2f:1f:77:ab:b9:d5:7a:73:09:07:59:aa:
93:41:55:63:36:d4:9c:32:79:eb:63:77:dc:60:c8:
31:4f:70:67:81:b0:74:5e:f6:35:4e:e0:a2:fe:dc:
65:dc:19:9f:6d:b8:fb:7a:f0:d1:09:bb:57:58:f4:
f6:0b:9b:61:55:b1:9e:41:bb:91:bd:a7:7f:55:eb:
3b:a1:77:95:23:c1:e2:48:e7:dd:80:0b:94:7d:49:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E6:E2:A1:B1:29:66:A4:02:FF:DF:99:9C:94:ED:AE:E1:22:3C:29
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE68E3FE803B11ECA8F12731C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.164.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:31:0a:3c:49:c4:3d:49:60:a0:3b:2a:ac:13:db:b2:c9:63:
54:8f:8d:e2:53:57:64:4b:35:cf:f1:56:b9:99:da:e5:16:38:
37:c8:f7:f9:72:ae:56:49:66:30:9b:99:e9:7c:87:70:27:36:
f5:a7:a4:96:9d:a1:73:c4:3b:7a:09:9a:79:4b:0f:81:79:c7:
95:74:98:d0:77:34:83:49:72:4d:46:05:8d:8b:fd:80:83:e3:
27:95:7c:64:00:b4:da:49:69:23:f5:28:15:9d:84:40:ed:40:
6b:59:7b:df:ed:ba:c3:5f:d5:a3:aa:f6:3f:cd:cb:8f:35:a7:
7f:b6:12:47:83:5a:76:90:b3:26:83:e0:dd:c8:4b:cb:ed:bc:
48:69:62:87:69:22:20:1d:3a:39:0d:fd:47:d6:15:87:a4:fb:
ea:76:aa:1e:6b:a0:a9:2b:ff:ce:46:17:1c:e1:37:7b:09:cd:
d0:82:a6:54:e1:4c:d9:1b:3e:a2:91:db:da:a8:5a:ac:54:9d:
6e:08:76:ac:d3:e6:de:36:70:a9:17:5a:fc:a3:25:a0:22:7d:
19:10:69:d7:b9:c4:c9:7f:ea:8d:a4:3e:b0:ca:fa:b3:4d:34:
06:56:ea:8f:ca:1e:8c:21:a0:7f:a4:66:e9:82:d0:6b:fd:1f:
34:3d:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:43 2025 by rpki-client