Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E12FA43A1F3111EBA626C57BC4F9AE02.roa
File: E12FA43A1F3111EBA626C57BC4F9AE02.roa (raw, json)
Hash identifier: 9FVK4gVC84+8ijUrop2HbuwNLIrkoCcDTDnNecejNGs=
Subject key identifier: 45:5B:98:32:67:40:36:F6:23:E1:20:88:67:0F:27:DB:CD:BD:46:FF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8C22
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E12FA43A1F3111EBA626C57BC4F9AE02.roa
Signing time: Thu 30 May 2024 16:10:01 +0000
ROA not before: Thu 30 May 2024 16:10:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138316
IP address blocks: 103.132.152.0/24 maxlen: 24
103.141.247.0/24 maxlen: 24
2406:b1c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35874 (0x8c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:10:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a4d9-9101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:8a:2c:ed:1e:4c:ae:6f:3e:4e:c5:dd:e9:
69:e2:aa:44:63:b7:51:f2:de:cf:a3:42:a9:8d:d5:
98:57:2f:46:f4:91:94:6e:14:a7:22:01:ac:66:e0:
87:7f:ed:45:35:7b:34:7c:27:77:cf:1a:7f:62:d3:
fe:1c:45:79:20:e5:d5:63:2e:b5:55:30:af:36:e4:
db:49:10:70:5f:4a:bc:09:d7:87:32:14:5b:33:67:
f7:6e:98:22:72:6a:d0:07:85:9e:aa:a6:b0:a8:74:
69:e2:15:58:ff:69:77:e8:ac:68:83:36:d3:bf:3b:
f5:80:a4:de:83:1d:0a:3d:05:43:ea:e8:53:c2:ea:
c7:b1:f4:d0:d0:69:8c:ee:9c:9f:33:56:71:fc:15:
02:4e:5d:28:91:95:70:71:15:e4:17:c5:b9:b2:f1:
ee:fb:2f:36:a3:49:2f:8c:d3:80:ed:dc:07:0e:80:
b4:4d:6a:a8:32:13:93:8b:22:39:6f:85:81:c6:39:
4e:9f:7b:e1:96:56:fc:c3:00:81:d0:a0:de:08:8c:
c9:4a:71:91:d2:e2:8a:38:61:18:fd:19:25:42:13:
b2:1d:51:48:b0:49:7d:73:d6:bf:32:83:c8:f1:cd:
75:05:29:57:d7:71:10:ff:4b:a4:5b:97:88:85:58:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5B:98:32:67:40:36:F6:23:E1:20:88:67:0F:27:DB:CD:BD:46:FF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E12FA43A1F3111EBA626C57BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.152.0/24
103.141.247.0/24
IPv6:
2406:b1c0::/32
Signature Algorithm: sha256WithRSAEncryption
a7:c7:56:79:7b:6a:f8:ab:e8:e2:09:b7:86:d2:b1:92:34:05:
69:ec:f1:86:38:81:09:4e:00:43:03:5e:51:80:89:6b:c4:7b:
4b:62:f4:a1:65:10:2d:c9:d4:dc:86:7d:72:6d:68:54:bb:d0:
e6:40:81:1c:25:0d:29:f0:db:78:38:bc:8f:03:3e:44:3e:f7:
61:55:6a:83:0f:e7:99:b4:ad:b6:7d:3e:94:c5:83:59:64:7f:
f9:c6:03:4d:c2:98:a5:dc:e7:b6:e2:cf:6d:db:a3:05:08:10:
c8:2f:5f:a6:fd:7d:47:b8:79:44:c6:70:33:56:09:17:17:e4:
d3:a0:54:67:5b:8e:a5:69:bc:16:f7:d9:12:bb:c4:73:c0:0c:
bc:d3:a0:62:37:a7:46:7d:8a:14:2a:7c:b5:d2:92:8b:80:fd:
32:50:d7:a3:62:31:17:89:34:14:af:73:9c:ce:f1:d8:fe:56:
39:4d:c1:e8:8c:0c:e9:b4:9e:d0:b4:d6:40:44:df:c2:14:1f:
1b:97:7e:26:0b:f0:4d:2a:9d:f8:69:bc:ca:4b:00:c8:3a:1d:
ff:25:34:ce:15:22:d8:27:7a:93:6c:8b:e0:42:d3:af:2f:89:
d6:3e:49:0a:21:31:51:46:6c:d0:a6:4b:9c:87:d7:ff:ea:18:
9d:8d:fd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:31 2025 by rpki-client