Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D820BA90A0D811EBAD27D873C4F9AE02.roa
File: D820BA90A0D811EBAD27D873C4F9AE02.roa (raw, json)
Hash identifier: GVeEnme9uoq2YS5vWYYvlAZrCHxmjElAaJmWp1x/W44=
Subject key identifier: B6:A8:C6:7A:7A:87:01:BD:E2:E4:09:B7:FC:D0:38:4F:FB:CA:D1:82
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8C01
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D820BA90A0D811EBAD27D873C4F9AE02.roa
Signing time: Thu 30 May 2024 16:09:32 +0000
ROA not before: Thu 30 May 2024 16:09:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138261
IP address blocks: 103.140.135.0/24 maxlen: 24
103.157.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35841 (0x8c01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:09:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a4bb-403b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:41:ed:81:da:11:fe:b1:d2:79:c8:7e:c6:
32:d6:ac:74:b2:58:7e:93:99:22:ac:55:cf:c8:36:
07:2c:ac:c7:a2:f2:43:e5:5b:1b:7e:7b:d7:12:19:
ac:05:aa:ab:93:0a:35:ba:cc:d4:b1:02:8a:f2:59:
5f:be:dd:16:09:13:2a:e4:13:38:52:ef:1f:e1:3e:
b0:0c:70:11:14:c7:45:b2:b6:3a:53:bf:2d:3b:c6:
fc:6a:3c:8d:95:21:6d:8a:ff:7b:23:54:46:ce:72:
15:4b:09:88:27:07:41:e4:ee:92:38:58:ae:48:7b:
89:81:1e:bb:37:e8:3a:4f:44:61:5b:3f:0b:7a:96:
f5:52:86:dc:95:2d:89:54:cb:9e:bc:cf:b1:83:8f:
a1:80:74:92:fe:66:ba:81:1a:f0:11:20:45:cb:92:
a2:91:e9:9c:ef:78:fd:bb:8b:bf:c9:f5:98:fc:d3:
45:c4:8c:39:7a:cf:0a:c4:f8:87:0e:6c:5b:5e:4a:
59:00:b2:36:e7:17:95:40:47:55:bb:f9:91:5a:3a:
b0:0b:21:0c:3e:e1:a8:7c:5b:b2:1d:6f:64:37:f9:
b7:8e:0f:48:f3:7b:80:db:a8:6a:9d:8a:5a:a1:c8:
60:fe:e4:86:b9:f3:a9:b2:12:9f:81:b4:85:b6:fa:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:C6:7A:7A:87:01:BD:E2:E4:09:B7:FC:D0:38:4F:FB:CA:D1:82
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D820BA90A0D811EBAD27D873C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.135.0/24
103.157.54.0/24
Signature Algorithm: sha256WithRSAEncryption
67:54:df:61:68:4f:ef:45:ec:55:07:26:fb:bb:6f:57:93:5c:
79:ec:2c:5a:c2:db:2a:12:6b:29:a7:04:c0:be:8f:0b:34:0e:
67:25:cc:ca:d5:37:a1:df:6f:1f:85:7f:d7:93:82:1e:b5:a2:
6b:81:0d:00:11:2c:16:8c:62:e7:cc:49:35:ee:d9:f5:c5:4b:
3a:ef:ca:88:bc:f7:b7:a3:0b:3b:fa:88:1f:cb:28:f0:af:83:
d3:5b:ae:b0:8e:fe:b8:9e:74:f7:26:03:d3:6d:a2:c1:ea:10:
88:e6:42:eb:b2:65:66:5d:42:f1:8b:01:60:df:92:eb:df:06:
aa:97:9d:48:1d:da:cd:8a:fb:89:d4:a6:fd:da:c8:83:eb:a2:
d8:41:79:83:4b:48:3c:2a:c9:04:f2:57:cf:8b:08:54:1f:aa:
57:56:b9:bc:12:30:28:b5:fc:39:f0:2a:4b:bf:8a:e4:04:b8:
71:a3:ee:d0:9b:78:8f:41:da:94:77:a7:f2:1d:f3:59:c0:05:
5d:48:3d:18:a1:11:55:d8:f4:8c:5d:72:68:34:f1:19:68:b3:
b4:ac:fc:27:2c:c6:5e:99:2a:3b:b7:9e:99:4d:33:45:11:13:
41:6f:97:d1:90:00:8b:d6:82:c0:a7:03:8b:f5:6a:fa:84:e5:
71:b6:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:20 2025 by rpki-client