Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE5A0DF8CE6011EF99225E79C4F9AE02.roa
File: DE5A0DF8CE6011EF99225E79C4F9AE02.roa (raw, json)
Hash identifier: idyKYFnREpRWGI52SIp81xi+6rS2qjHzuYXlEzRHqiY=
Subject key identifier: A6:0D:3A:2E:30:7C:44:D1:ED:27:ED:3B:32:96:13:A8:BB:4F:36:B2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A1DF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE5A0DF8CE6011EF99225E79C4F9AE02.roa
Signing time: Thu 09 Jan 2025 08:08:11 +0000
ROA not before: Thu 09 Jan 2025 08:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152544
IP address blocks: 103.171.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41439 (0xa1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 9 08:08:11 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677f83eb-daf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:f9:57:8e:d9:ad:80:ff:1f:6a:34:15:c5:
2a:9e:f1:d2:f7:3e:a0:1e:18:43:00:91:14:40:d4:
9d:81:1e:a5:87:da:53:4a:e8:25:42:22:b7:90:c6:
da:79:13:bb:2d:45:84:0b:de:f6:81:1d:cc:f3:91:
d5:a9:4a:e6:0f:62:ea:ea:f8:21:ec:18:6a:b2:c0:
d9:26:9e:ed:b2:b7:62:b3:0a:72:eb:e4:33:06:0e:
35:3a:31:fe:47:dd:e9:2f:05:d3:12:48:03:a4:34:
2d:8e:91:fd:8e:29:9b:0c:86:12:97:db:5f:ae:e2:
51:97:b5:91:71:cb:f8:1c:3b:bc:15:00:3f:21:a9:
af:5e:54:d3:94:b6:03:60:5f:6a:94:c0:e2:ab:26:
d1:4e:9e:b8:92:19:fc:7f:38:fb:9a:38:77:66:86:
08:8b:8d:10:e8:5d:c7:5e:76:72:d7:ec:cf:ad:5b:
7b:6a:95:8c:b8:52:ad:89:e7:39:de:d4:fd:8a:d3:
ea:f6:19:bf:a9:a8:b1:c8:94:6d:ea:56:39:0d:90:
7b:b5:3f:40:d7:56:c6:69:90:8c:a0:25:b1:0e:d8:
9a:b9:47:b5:e0:13:1f:97:88:d5:95:73:27:e4:6b:
be:e7:90:e7:c3:3a:a6:96:27:4d:c7:50:b8:55:b3:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0D:3A:2E:30:7C:44:D1:ED:27:ED:3B:32:96:13:A8:BB:4F:36:B2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE5A0DF8CE6011EF99225E79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.118.0/23
Signature Algorithm: sha256WithRSAEncryption
81:7d:e2:35:85:51:b2:9c:5a:f9:9d:6b:5a:29:2b:4d:01:eb:
42:2f:a1:21:24:9c:01:a7:0c:41:f7:81:7d:53:f7:85:c3:6f:
91:22:4e:66:8d:b1:ed:91:50:41:21:2c:5b:45:0d:0e:69:30:
6f:e3:dd:4e:7c:3f:11:39:68:2e:4a:eb:86:82:ae:99:d5:ab:
a7:25:70:46:a8:3c:93:23:11:4f:c9:e3:21:e1:e7:51:5c:d8:
84:f8:83:ee:37:43:d3:5e:31:77:3f:89:c1:8d:7f:14:29:ce:
71:45:7e:0b:e4:53:e0:f5:c8:b3:37:8e:e9:84:9f:81:82:17:
1a:a1:50:39:02:14:58:a1:82:0e:d3:62:f7:d7:21:17:0a:9a:
23:39:1d:0f:b5:ed:2c:84:88:07:1c:ee:4e:bf:50:a4:e4:92:
aa:fa:a9:dd:2b:4c:98:f3:19:a4:dc:83:7d:a2:22:1b:33:29:
b7:d4:3e:d0:28:c5:e6:7f:cf:50:96:37:67:a4:81:e3:ed:dc:
2d:4c:c9:d3:03:ba:91:08:b5:c5:37:f6:7b:d8:9a:cb:26:13:
9f:77:89:4f:2c:fb:ea:c3:c2:7e:45:7a:c7:8f:22:74:f4:db:
1f:e0:d6:48:37:c7:22:23:3d:02:27:c2:20:1a:c1:5a:09:8d:
fc:8d:4e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:10:56 2025 by rpki-client