Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5839A70BBE911ED9835332EC4F9AE02.roa
File: F5839A70BBE911ED9835332EC4F9AE02.roa (raw, json)
Hash identifier: D/Q/wAPddBLQ0Zr6HMOIOR5msONneu7x2nk3tkrqALs=
Subject key identifier: 51:B7:44:1C:84:C3:78:F2:4B:53:0C:CE:1B:35:BF:17:6D:F7:C6:AE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8BA3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5839A70BBE911ED9835332EC4F9AE02.roa
Signing time: Thu 30 May 2024 16:08:02 +0000
ROA not before: Thu 30 May 2024 16:08:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137181
IP address blocks: 103.109.136.0/24 maxlen: 24
103.109.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35747 (0x8ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:08:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a461-46af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:ad:80:61:cb:0e:e4:23:0a:d4:a6:95:71:
d7:65:c8:7b:74:17:a5:fa:b4:70:f1:84:b5:54:53:
b4:b3:ca:01:12:4f:c6:83:0b:2c:55:a3:2f:45:7a:
ff:4c:9f:5f:51:ac:b8:ee:be:b1:55:41:13:88:6c:
b0:11:00:62:c7:2d:c1:31:bb:f8:2d:2c:56:98:1d:
46:9a:35:73:ad:d1:50:40:16:7c:e9:68:93:17:47:
ca:2a:34:8d:05:32:fc:06:9d:32:28:28:6b:38:e4:
af:dc:fe:b8:b9:ef:8f:2a:be:b9:dc:a7:4f:7e:c4:
72:c3:fb:51:4b:91:b7:ef:88:ac:66:90:89:ad:4a:
bd:60:53:94:2b:6d:99:9e:cc:2b:bd:d5:78:27:f3:
12:13:3e:d3:8c:f3:41:f8:4a:04:b7:7e:05:31:6e:
45:9e:ae:9f:23:03:90:d0:87:c7:01:b8:45:2d:61:
e5:33:c3:78:4f:88:5f:8a:af:5e:2f:6c:d0:99:9a:
0d:20:7d:e7:69:2a:53:17:c2:b1:05:76:ea:4f:bf:
50:02:4c:9e:34:7f:0e:51:31:5b:4b:ea:79:c7:62:
84:b7:2f:47:49:08:97:d6:a0:86:0a:fa:a0:c1:18:
89:dc:14:c7:3e:be:fd:29:f9:95:85:50:48:95:cc:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:44:1C:84:C3:78:F2:4B:53:0C:CE:1B:35:BF:17:6D:F7:C6:AE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5839A70BBE911ED9835332EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.136.0/24
103.109.139.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b5:97:0e:54:5e:e4:78:6f:03:51:54:a2:7e:5f:17:c5:7a:
00:0c:62:5a:9f:21:02:34:ef:30:ca:eb:fd:23:70:e1:8e:95:
76:ea:58:c1:3f:63:f2:3d:52:15:da:6b:d3:d3:7e:14:6d:f0:
ae:2e:3c:7f:fd:43:08:c8:a7:d8:19:33:fe:c5:68:e0:36:2a:
10:50:65:a4:81:4c:0f:e3:b2:40:3f:06:9c:57:01:f1:ac:e6:
26:07:8c:58:5a:61:d4:46:06:90:a6:c1:ec:b7:c9:f0:ca:37:
71:c3:fe:4c:77:84:59:a4:07:9e:d3:98:2e:4c:0a:8e:6f:11:
78:85:64:75:1c:99:51:39:18:31:29:f1:94:6b:ae:20:98:f9:
d0:b2:7b:b1:21:c8:79:88:9f:c1:ac:49:27:7c:3d:5f:3d:e1:
46:e3:7d:46:5b:4a:a4:db:88:2e:84:d8:a6:ee:3e:e7:9f:60:
7e:fb:90:de:dd:f5:3e:7d:67:b9:59:32:cf:c1:48:0a:3e:fe:
ef:19:48:e4:e3:a8:d1:b1:2f:72:fe:3d:07:ac:83:44:9c:97:
48:29:11:0e:88:34:cd:3a:4c:3d:60:02:47:ab:22:01:85:9e:
01:eb:23:26:14:ab:50:71:73:6b:ba:c8:61:ec:f5:66:eb:dc:
d4:9b:ad:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:11 2025 by rpki-client