Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D52A0C8AF42E11EA9B1EE087C4F9AE02.roa
File: D52A0C8AF42E11EA9B1EE087C4F9AE02.roa (raw, json)
Hash identifier: 677XC7EXBl1Atsxhry5MrLUMtErQl/vrfky4co2Kphg=
Subject key identifier: 33:98:73:9F:6A:A5:D3:25:29:C6:1B:EA:F2:0C:29:3F:E1:98:A3:F4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8CCB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D52A0C8AF42E11EA9B1EE087C4F9AE02.roa
Signing time: Thu 30 May 2024 16:12:51 +0000
ROA not before: Thu 30 May 2024 16:12:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140148
IP address blocks: 103.155.54.0/24 maxlen: 24
103.159.90.0/24 maxlen: 24
2001:df2:3240::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36043 (0x8ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:12:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a582-1bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:ec:19:95:ca:3a:2f:23:06:dd:01:78:ab:
9d:8b:4e:41:10:03:c6:fc:73:25:2c:e1:6e:96:0e:
37:f2:d4:65:bf:a5:3e:83:5b:5a:07:29:95:7a:28:
4f:83:07:29:61:78:36:7a:88:0e:3a:18:f6:05:cb:
b9:40:05:f6:07:92:25:74:ac:7c:2c:75:c0:f9:83:
86:52:a9:70:eb:16:06:9e:2a:33:af:b2:2e:2e:3c:
6c:a6:d6:48:6b:f8:52:ce:37:2c:e0:84:56:43:9d:
4d:66:ce:ad:10:cf:cc:9a:fe:49:61:fa:f8:9e:c7:
e2:55:c5:15:88:69:b2:25:39:3a:c1:97:ba:78:2f:
4b:23:68:c1:48:23:26:a1:e3:ea:1a:07:18:15:a4:
9a:42:c1:c4:3a:73:12:71:9b:ad:4c:72:74:48:4f:
87:07:57:b6:4b:bc:62:75:01:67:47:87:48:dc:17:
cf:ff:07:2a:ba:f4:27:f5:2d:22:37:15:7a:f6:3a:
ce:eb:8f:cf:2d:fb:e5:df:1c:0d:4b:0a:0e:86:a0:
53:e5:6b:3c:00:32:1d:3e:fb:f1:32:83:77:ab:bd:
eb:8b:f6:b3:af:3c:2f:d3:88:c6:78:9d:03:18:e6:
11:18:5d:21:84:1a:9a:37:2f:e5:5b:d6:a1:93:70:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:98:73:9F:6A:A5:D3:25:29:C6:1B:EA:F2:0C:29:3F:E1:98:A3:F4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D52A0C8AF42E11EA9B1EE087C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.54.0/24
103.159.90.0/24
IPv6:
2001:df2:3240::/48
Signature Algorithm: sha256WithRSAEncryption
89:82:57:ff:c1:39:72:aa:1f:da:e7:19:db:fb:a4:0d:ff:3a:
e5:db:d6:d0:8c:aa:7e:55:6a:d8:2c:37:b1:02:90:c4:9b:e4:
03:88:b3:d4:cc:cc:31:b4:18:04:95:39:34:1a:f3:00:33:d5:
d8:1d:e3:d3:71:38:1b:77:29:d3:93:9c:5b:dd:59:6b:9f:ec:
ee:72:4d:f7:d6:71:18:11:b4:94:0c:3b:dc:e0:f0:9f:77:d0:
b6:e0:cc:a5:bb:4f:57:5d:97:bd:fd:27:3e:de:aa:32:30:72:
6f:54:f7:e7:1f:ff:88:35:04:9a:da:cd:1d:cd:b9:65:d5:04:
15:3d:50:0a:1a:60:81:65:9b:97:e7:00:03:da:89:94:6a:de:
23:52:2d:66:74:43:d9:e6:66:75:88:5e:35:df:ab:4e:eb:e0:
9d:a2:b2:df:f9:a4:3c:ef:8c:16:ef:7a:79:4a:ef:ff:48:d0:
d8:86:f7:10:55:29:5f:50:19:c1:59:5f:65:52:2b:d4:9e:85:
37:db:2c:09:6f:6b:bf:39:af:a0:9d:36:cf:62:35:b9:9e:94:
53:70:b1:de:05:78:59:be:05:09:71:8a:f5:b4:4d:56:de:90:
70:e3:6c:b6:1b:ed:57:d3:ef:e9:8d:67:13:9b:be:85:0a:a8:
f0:51:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:42:57 2025 by rpki-client