Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa
File: FAD6E7AEB67411EDA32C9C33C4F9AE02.roa (raw, json)
Hash identifier: syczVlybgQjJKlN42nRmXVfIO80N9W7D/a3Q0AYbRPE=
Subject key identifier: 53:A2:8B:4E:F4:78:85:9C:AA:BD:27:73:A8:A2:B5:0A:62:72:FA:BF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8FE4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa
Signing time: Thu 30 May 2024 16:25:41 +0000
ROA not before: Thu 30 May 2024 16:25:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150633
IP address blocks: 103.83.28.0/23 maxlen: 24
2400:dba0::/32 maxlen: 32
2400:dba0::/40 maxlen: 40
2400:dba0:100::/40 maxlen: 40
2400:dba0:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36836 (0x8fe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:25:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a885-5617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:31:0c:88:91:4a:0e:97:2f:ec:89:ac:88:
9f:2b:3d:c6:1d:c8:e2:44:10:7e:af:f1:cb:7d:61:
34:64:0f:4c:d6:4f:09:db:b6:21:6d:36:cd:7b:5c:
3b:7a:b5:62:d7:31:63:7b:ef:8c:16:3a:e6:01:ef:
33:d6:63:ab:6f:b7:b0:1c:af:f3:61:78:59:14:43:
dd:e0:32:5f:60:21:33:73:7c:01:5c:cc:53:ad:2f:
dd:ef:3f:e1:46:4d:c4:56:b1:db:7c:17:1d:89:14:
07:21:82:ed:3b:70:0a:44:9f:98:01:60:69:34:7d:
87:e1:69:a2:66:82:d9:f6:c5:ff:ad:c3:c4:0f:ba:
89:2b:c8:97:2a:c3:34:1e:65:82:aa:c6:2b:d9:9c:
25:3b:03:e9:48:b8:03:87:e1:dd:32:18:a2:44:a9:
fd:40:08:2d:a2:b3:27:d3:9e:f2:d4:77:19:d6:c4:
54:94:9d:57:41:e0:6d:a2:10:41:61:ac:a3:01:48:
06:7d:ac:44:6b:35:66:5f:60:49:8c:ed:a7:76:f7:
3c:df:41:54:21:01:57:e4:44:14:17:dc:cf:da:f2:
e0:81:e1:8a:06:18:6a:a8:17:da:97:79:de:2c:81:
53:54:9f:b8:53:58:aa:88:31:6f:fb:89:e3:3c:f4:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A2:8B:4E:F4:78:85:9C:AA:BD:27:73:A8:A2:B5:0A:62:72:FA:BF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAD6E7AEB67411EDA32C9C33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.28.0/23
IPv6:
2400:dba0::/32
Signature Algorithm: sha256WithRSAEncryption
81:96:75:08:71:df:dd:0b:65:30:f6:d9:da:b0:11:3d:57:ec:
58:cb:8e:ee:b7:04:40:32:cc:7f:1d:45:9b:31:ac:cb:16:60:
b5:cb:c5:c9:40:9b:66:48:f3:c0:43:e1:46:c5:95:62:b7:07:
21:1a:ea:db:88:fb:d9:f0:83:95:ed:f2:c6:1e:db:92:05:73:
16:de:0f:2d:67:42:b2:9b:e4:b2:e7:d5:3d:21:97:41:a4:62:
19:e5:1b:39:e0:59:a0:be:16:34:a6:f9:c6:8b:27:a4:84:bb:
13:fb:32:a9:7f:b0:56:48:76:6d:de:ef:82:0b:66:c2:44:ec:
d7:04:91:09:43:13:d1:3a:67:ee:8c:d1:7e:64:6d:4a:76:7d:
b3:87:7d:72:74:db:b7:04:69:bb:52:83:f4:dc:3f:7e:86:56:
fd:46:46:d9:95:2c:b6:95:fa:03:e1:1d:d1:52:c5:89:ea:73:
20:6d:b9:95:f7:c3:a3:71:64:64:fd:ff:d5:dc:32:fe:11:b1:
f5:32:e0:43:58:43:34:4f:27:84:ba:ca:63:d2:52:5a:8b:5f:
ff:3b:0a:14:65:b8:7d:db:11:a0:b2:e7:e2:75:cf:ab:a1:c9:
97:11:7b:c1:1d:c4:c7:7c:94:32:17:2d:cc:87:6a:0b:b1:5a:
0c:d0:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:58 2025 by rpki-client