Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E00B9C4E2C1E11EC8EB0E280C4F9AE02.roa
File: E00B9C4E2C1E11EC8EB0E280C4F9AE02.roa (raw, json)
Hash identifier: IQ7KlbUdHQKNjShNMTgE02nEpeFbllu1qW4WzXX+PhU=
Subject key identifier: 63:DE:61:1C:DC:10:75:9A:61:3E:DF:0C:11:DC:D5:59:8B:45:C4:C9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8EC0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E00B9C4E2C1E11EC8EB0E280C4F9AE02.roa
Signing time: Thu 30 May 2024 16:20:59 +0000
ROA not before: Thu 30 May 2024 16:20:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147289
IP address blocks: 103.172.132.0/24 maxlen: 24
2001:df1:d3c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36544 (0x8ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:20:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a76b-aebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:b2:fb:a4:be:fc:37:5e:14:66:7a:3a:eb:
47:04:7e:69:b2:ea:3a:b7:75:8c:0b:36:76:66:cf:
1d:b6:32:8e:3b:39:fc:2e:2e:15:d2:26:c2:ef:f6:
34:64:68:8f:a0:15:9d:fa:e1:d5:23:66:d2:d0:c1:
47:57:6a:ad:fa:c4:bf:29:13:20:a5:55:cd:9a:c2:
6e:37:8b:1a:ec:74:7b:27:9e:77:8d:a9:0e:27:5f:
48:2f:65:c2:42:31:1c:0c:f4:6a:bf:44:82:80:ed:
bf:9a:f3:ce:61:e0:34:45:72:7e:4a:88:bc:c9:54:
c2:37:fb:43:c8:af:e8:a1:fe:c4:c2:e4:c9:fa:da:
dd:7a:c0:78:22:c7:05:bb:e3:76:54:59:fc:b4:56:
82:fa:46:11:aa:7f:16:70:3b:6e:96:97:1b:f2:61:
f1:99:99:f6:c1:bc:ad:24:37:73:d9:62:15:75:60:
ab:ec:56:85:65:b5:c9:61:39:01:52:35:79:b1:8f:
62:6b:72:de:9d:bc:93:6d:3d:b1:90:44:c0:e7:06:
76:53:c2:f1:3a:24:f5:4d:0d:1f:04:70:7b:82:88:
fb:eb:f6:66:ed:37:95:17:43:eb:17:a2:07:84:71:
c3:2f:62:cc:59:41:42:f9:54:b1:f0:2e:09:97:af:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DE:61:1C:DC:10:75:9A:61:3E:DF:0C:11:DC:D5:59:8B:45:C4:C9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E00B9C4E2C1E11EC8EB0E280C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.132.0/24
IPv6:
2001:df1:d3c0::/48
Signature Algorithm: sha256WithRSAEncryption
7c:e5:e8:65:92:6b:e1:5d:4d:29:62:57:e0:97:3e:d7:e7:cc:
b6:2a:d1:15:e4:ec:5a:d4:a2:a9:3c:a0:f6:e4:61:ce:44:96:
8d:19:6c:77:ec:b1:16:dd:91:7d:35:7b:75:57:09:c0:07:ff:
5d:f7:ba:dd:10:5f:63:bc:96:cd:76:e0:06:ba:6d:14:65:4d:
ed:d8:2d:b9:64:3e:99:91:76:57:86:cc:27:ef:ce:2a:22:b5:
b4:67:f1:1f:08:5b:2f:2b:79:45:62:80:c2:9b:8d:d8:36:5a:
e3:e5:f6:9a:77:91:ed:c1:2f:9f:44:7f:bf:fc:8d:ba:11:9d:
3d:e3:95:37:38:4f:de:4f:bc:ec:5f:a4:33:ac:ee:38:17:0b:
22:21:89:5e:68:d0:15:6f:a8:63:59:a6:de:39:f2:25:36:cc:
f9:6e:bb:3a:6b:59:67:f4:0c:de:96:e8:c6:7b:73:9d:a3:b9:
f9:28:38:17:f5:8d:e4:b3:00:73:cf:54:d8:f6:c1:09:10:16:
e8:f9:0e:0a:5a:0a:9e:2e:f9:1b:42:4a:71:ad:3c:55:18:73:
77:54:bf:e4:fe:c0:70:1a:16:e9:75:bb:6d:5d:93:dd:9f:06:
95:8f:e0:d2:ee:b8:13:9b:29:56:71:65:22:45:aa:8c:76:a2:
02:2b:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:24 2025 by rpki-client