Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE18C4EEAE1511EEB9D55E46C4F9AE02.roa
File: EE18C4EEAE1511EEB9D55E46C4F9AE02.roa (raw, json)
Hash identifier: VBsFRzP/XDNUyzgXCU5RaXheNKFZ5cv6oHBU/khH968=
Subject key identifier: 95:B0:1A:DA:AE:4D:39:99:F1:22:F6:10:E2:D7:C8:72:B8:44:DE:7A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8BF4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE18C4EEAE1511EEB9D55E46C4F9AE02.roa
Signing time: Thu 30 May 2024 16:09:20 +0000
ROA not before: Thu 30 May 2024 16:09:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138238
IP address blocks: 103.126.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35828 (0x8bf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:09:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a4b0-ac79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:27:ec:0e:7c:32:96:47:66:d8:35:3a:c0:
91:29:ca:51:fa:c1:f4:7b:62:4d:5d:02:03:4d:4e:
78:55:d8:54:b7:01:44:66:31:69:48:a4:3f:cc:11:
09:89:da:39:57:55:fe:e9:a5:76:2c:5e:f6:02:28:
99:e9:a5:35:42:57:78:9e:65:74:24:79:54:e8:73:
6f:0a:5e:10:63:b3:3a:80:11:10:4e:fc:a5:02:cf:
26:2d:5f:89:f7:e0:3c:07:4b:c0:fc:a0:00:ff:28:
0e:43:f6:8e:3e:a5:dc:ef:54:54:d0:c8:e6:47:41:
8c:23:cd:2c:0d:04:f8:4c:04:54:f2:9e:6b:79:2a:
21:ba:12:04:72:9c:71:4b:8e:c8:3e:1b:1f:c0:49:
a1:8c:92:8b:9f:57:b6:9d:2e:e3:5a:e5:dc:02:2b:
7c:e3:2d:4d:53:e2:04:47:76:2b:94:6c:e4:bc:a7:
3b:fb:d2:9b:74:67:6f:38:03:39:08:98:05:49:16:
03:32:d6:2d:a5:0b:72:cd:3c:bf:84:55:4d:15:77:
eb:d5:cf:08:07:7c:52:4e:f9:cc:58:60:41:33:3a:
1c:d7:cd:06:d7:1c:b6:12:49:cd:34:25:27:ad:78:
3a:22:6c:01:1c:58:80:a4:3f:b0:20:12:48:b8:65:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:1A:DA:AE:4D:39:99:F1:22:F6:10:E2:D7:C8:72:B8:44:DE:7A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE18C4EEAE1511EEB9D55E46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.196.0/22
Signature Algorithm: sha256WithRSAEncryption
00:f8:95:9d:5e:f5:e8:99:dd:35:cc:e8:4d:50:76:09:fe:98:
07:a4:eb:ab:b9:04:64:64:54:02:4d:cd:cb:8f:fe:2c:2a:24:
ed:c1:ae:fe:02:8c:c4:6d:94:5e:3a:10:53:a0:88:ed:8f:f4:
4d:6f:c3:2f:30:81:67:66:6c:9f:91:42:57:15:e6:f4:1f:73:
de:8c:22:11:01:65:ca:6f:e0:84:8c:a6:ed:b8:bd:0a:28:27:
13:33:a0:6e:65:5c:56:1e:86:5f:fa:9e:f3:d3:4c:c8:96:65:
4d:20:2a:48:7f:60:a8:77:91:7e:a5:00:9b:15:06:66:d4:ec:
b2:5e:65:3a:49:0d:51:7e:cf:bd:60:35:4c:da:fb:25:af:43:
cb:2d:20:01:f6:65:fe:cd:a4:0d:03:78:2b:fd:fa:5f:cf:9f:
d1:7b:98:71:49:98:05:60:fe:68:7f:85:0d:a4:fa:0b:72:6e:
51:97:cd:7c:07:f4:19:6d:38:0f:c2:53:0e:1b:06:12:50:48:
9c:00:ec:26:81:ef:3a:19:aa:53:9b:fb:a0:e6:ac:f8:c8:e4:
eb:1d:8a:bb:26:0a:28:e1:37:c9:e8:03:ed:41:5b:a9:9b:04:
cb:bd:4a:4e:e3:7a:6d:9b:e8:75:bf:b7:e8:7e:78:5d:a4:30:
ea:29:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:41 2025 by rpki-client