Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa
File: EF0F317E15FD11ECAF541012C4F9AE02.roa (raw, json)
Hash identifier: 6BBr7wENCzTsyoHocB/OtC2cOGw3s6VPThi+ebsJ+zQ=
Subject key identifier: 9A:15:D5:84:3B:AB:F9:0E:F2:DB:A2:15:25:46:EB:B9:73:B0:58:E3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8E22
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa
Signing time: Thu 30 May 2024 16:18:28 +0000
ROA not before: Thu 30 May 2024 16:18:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142513
IP address blocks: 103.170.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36386 (0x8e22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:18:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a6d4-1eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:df:fb:04:1f:0d:09:77:63:fc:53:07:a0:
be:c5:8b:26:69:ec:66:1d:81:52:1c:b8:5a:ec:46:
b1:84:4c:dc:d9:95:ed:17:64:b2:c6:fe:b8:8f:18:
49:18:ec:e6:6b:f4:af:cf:1c:89:e9:57:b1:8a:a1:
6b:cf:de:8b:4b:5b:8f:76:5f:f9:70:b8:71:2f:18:
6c:c3:24:da:c2:e4:be:e7:9a:03:d8:f5:94:bb:38:
26:d8:b7:1c:53:c2:81:cc:6d:16:85:1e:9a:a1:8c:
f2:88:a2:a1:f8:9e:7d:45:ca:31:15:7e:ed:7b:6c:
70:28:9e:9d:1b:03:a7:3e:fa:17:2c:27:49:e4:4f:
1d:02:ac:ac:d5:40:c5:5b:44:4b:2a:54:4f:6e:be:
8f:fb:29:71:05:4e:03:b0:e7:bd:5d:8a:5c:07:36:
f1:f4:58:aa:08:4b:74:f1:7b:53:bd:c6:43:80:dd:
2f:c4:e3:a5:e9:9a:93:05:f3:7f:cf:71:48:1e:b0:
64:a8:20:fa:f2:c6:7a:69:55:e6:67:fe:0a:58:aa:
29:86:35:51:7b:a8:44:c8:4e:6a:56:8a:f3:0d:a3:
bd:51:eb:d8:60:06:cb:02:55:4f:9c:b3:70:10:b0:
c4:f9:3d:f5:bd:2b:2b:b7:f1:86:22:98:5c:8d:38:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:15:D5:84:3B:AB:F9:0E:F2:DB:A2:15:25:46:EB:B9:73:B0:58:E3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.244.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:e1:00:c5:77:ef:cf:a0:a2:83:d2:bf:65:7d:76:47:ac:b3:
4f:ef:18:8b:b6:a1:e9:a2:45:7f:f4:98:52:31:3a:9d:62:78:
0a:2c:05:47:77:9b:2f:01:8a:88:ef:a9:f2:d4:2a:b7:78:20:
6f:d6:ad:f1:80:ae:93:98:e5:af:7f:af:95:fc:59:8a:c4:a7:
b9:c8:cd:52:2b:4e:0d:e6:69:49:78:cc:8a:20:7d:36:86:2e:
c3:9f:b5:09:83:36:ed:22:e6:00:11:d2:4c:18:69:f5:27:3d:
57:7e:68:5d:4f:d2:56:a6:8f:cb:82:a1:83:e0:68:65:00:2f:
6c:6f:c1:44:3f:5d:b2:49:dc:91:56:bd:0a:54:0c:c3:4a:55:
ca:74:a6:cc:56:2d:7c:72:fb:0a:34:ef:86:32:07:24:9f:25:
2e:62:63:63:ee:4f:85:2e:ae:dd:2e:68:f4:34:55:60:45:f9:
0f:9b:d3:7b:47:de:85:81:3c:41:67:d0:f7:d5:44:82:a4:8c:
56:1a:7c:19:d1:05:f6:47:13:ed:4e:91:bf:a6:34:72:69:62:
79:93:88:29:1f:57:9c:28:c0:c3:b1:4d:56:4e:d8:3b:94:30:
10:54:f5:01:70:80:78:16:21:98:be:a6:a9:9f:3e:c2:3c:94:
df:a6:b9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:15 2025 by rpki-client