Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa
File: E491F456D8A011EB8F5C1925C4F9AE02.roa (raw, json)
Hash identifier: 1fr41btoZqvSMPcbmOs6mSWfik+JI0KezwZ7i8w9/lc=
Subject key identifier: 67:F7:FB:AF:03:0E:DF:FC:74:FA:07:22:8E:05:6B:47:38:E1:98:57
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8BEE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa
Signing time: Thu 30 May 2024 16:09:14 +0000
ROA not before: Thu 30 May 2024 16:09:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138229
IP address blocks: 103.124.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35822 (0x8bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:09:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a4aa-bf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:5e:c2:26:4b:8c:03:49:2a:15:15:f9:f1:
a2:c5:d5:78:cf:53:11:e4:b8:b9:c7:65:01:7d:28:
e0:19:4a:18:44:9d:c0:0b:52:53:3d:18:b7:77:d7:
b1:ff:2c:6e:45:94:1c:db:1b:99:72:a5:09:05:17:
98:aa:d5:a0:39:ca:6e:43:82:af:72:b6:66:51:66:
37:3d:9f:11:c5:b0:6b:5c:02:91:98:17:eb:29:62:
54:06:87:d4:f6:f5:d4:45:64:85:03:ff:b1:fe:0b:
26:56:bd:b3:d6:a3:9e:ab:79:7b:0f:29:55:90:f4:
ba:01:b7:6b:ca:2f:ad:80:11:13:4d:75:f6:83:6e:
63:4c:49:ff:3c:e9:8b:93:c1:f2:00:d3:f2:c8:c0:
66:12:9c:03:f1:03:cd:87:4a:cc:d0:bc:a6:19:6a:
21:59:f6:99:96:34:60:41:8d:4e:31:4f:db:a3:ac:
ae:ea:ab:c9:56:03:6c:30:64:2d:eb:b9:55:4c:62:
b4:bb:e4:65:cb:c1:1e:2e:c9:ff:b9:44:a3:7d:6b:
47:24:81:3f:aa:d3:2e:d7:d6:65:91:09:35:9a:82:
61:36:16:7b:df:64:e3:5c:7a:dd:2e:c5:98:da:a6:
8a:a1:2e:e7:ae:dd:71:f3:6d:a8:2a:20:1a:8d:75:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F7:FB:AF:03:0E:DF:FC:74:FA:07:22:8E:05:6B:47:38:E1:98:57
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E491F456D8A011EB8F5C1925C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.80.0/22
Signature Algorithm: sha256WithRSAEncryption
63:de:28:b9:c8:d8:3c:26:c2:50:e2:0d:85:25:02:56:21:49:
fd:f2:10:1c:b7:e3:22:a7:8a:41:97:db:45:b4:a7:3d:b8:35:
70:66:0d:80:58:fd:81:81:9d:47:56:3a:d9:42:62:90:53:d5:
fd:c9:98:f7:06:14:77:59:c7:87:d7:03:24:98:ae:04:5c:e3:
3e:c6:50:01:8f:3e:33:c4:bf:ba:ab:ee:7f:a5:56:8b:d3:de:
f2:c7:f4:57:39:73:62:25:c2:65:aa:af:df:20:f4:d3:e9:a0:
e8:8c:bb:2e:38:5f:ff:ee:b0:bd:d1:b5:c2:a1:10:97:9a:8e:
e7:76:31:bb:6b:41:87:db:9e:03:c6:24:af:b1:13:c8:34:9a:
8e:15:00:b7:ef:07:f7:26:86:9c:ff:bf:28:84:ef:a8:fc:8d:
a1:37:df:57:4a:f1:94:9b:b1:4d:97:81:53:d0:f2:70:ba:eb:
ce:44:dd:08:af:68:e8:bf:6c:c0:ae:36:ce:91:83:7a:71:2e:
00:c2:3e:f7:6a:c9:8e:03:e3:38:a5:1e:49:24:d0:59:15:df:
7b:ee:f1:32:1e:ba:0b:d7:d5:e4:f0:ba:8c:bd:8e:8b:8d:63:
54:20:97:af:70:4a:c7:07:e8:b4:ca:e5:83:7e:03:bd:aa:84:
3d:cd:15:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:55 2025 by rpki-client