Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa
File: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (raw, json)
Hash identifier: 3Wqu6xOv+Yqgn98imVoKo0C/3S3sn8xVZaKt7qUGL5g=
Subject key identifier: C3:E2:7B:D8:47:38:7F:65:16:3A:C9:B3:E7:77:5D:9C:FA:46:49:29
Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
Certificate serial: 10AD
Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa
Signing time: Mon 02 Sep 2024 17:55:24 +0000
ROA not before: Mon 02 Sep 2024 17:55:24 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 132372
IP address blocks: 103.28.90.0/24 maxlen: 24
103.28.91.0/24 maxlen: 24
103.72.162.0/23 maxlen: 24
103.117.20.0/24 maxlen: 24
103.122.164.0/24 maxlen: 24
2403:fd40:1001::/48 maxlen: 48
2403:fd40:1002::/48 maxlen: 48
2403:fd40:1003::/48 maxlen: 48
2403:fd40:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4269 (0x10ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE
Validity
Not Before: Sep 2 17:55:24 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d5fc0c-96ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:10:99:2f:b1:f8:e7:cd:16:d8:ce:e5:ce:
12:ec:b8:22:36:17:66:e3:71:8d:28:98:a9:e1:5c:
9f:c9:39:7a:75:13:93:de:4e:a4:eb:0b:2f:ff:16:
32:62:f0:49:a0:ea:21:10:d6:63:21:f1:c3:0a:ff:
c1:11:00:79:1d:2c:aa:37:29:8b:e6:fb:62:60:c5:
af:82:d1:f2:5d:1f:aa:cb:6f:a3:b7:5c:a3:e6:cb:
1a:c9:d5:ad:44:48:fc:fb:2c:ac:f4:ab:2f:a4:92:
39:28:c7:fa:a8:46:28:f1:c8:d7:5e:2d:76:32:8d:
51:b5:4f:e4:68:11:30:22:03:7f:da:b1:28:90:36:
69:22:4d:ab:6a:e3:ff:c7:66:a4:b3:e4:8e:25:fc:
c2:1d:66:aa:72:d1:d2:ce:8d:c8:7f:44:01:e3:c1:
8d:09:62:2e:39:4c:47:bc:6c:6e:12:74:62:fe:3f:
85:11:46:61:5e:e8:84:64:ab:ba:07:13:e7:f1:09:
26:f4:b4:d4:b0:4e:3d:25:25:d3:1c:0b:60:45:2c:
9a:fb:3d:a1:b9:82:76:f7:7b:8b:1d:32:8d:65:61:
80:3b:d1:c4:08:e6:49:97:64:60:dc:bc:25:b3:40:
f4:8e:64:1b:98:e2:af:35:5d:8e:40:f6:92:33:d5:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:7B:D8:47:38:7F:65:16:3A:C9:B3:E7:77:5D:9C:FA:46:49:29
X509v3 Authority Key Identifier:
keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.90.0/23
103.72.162.0/23
103.117.20.0/24
103.122.164.0/24
IPv6:
2403:fd40:1001::-2403:fd40:1003:ffff:ffff:ffff:ffff:ffff
2403:fd40:a000::/48
Signature Algorithm: sha256WithRSAEncryption
71:3c:60:07:62:ee:4b:c4:ec:bb:a1:63:a6:ef:ff:f1:04:41:
70:e6:ad:ff:2e:a0:cb:87:d1:ee:56:a6:6c:f3:76:e9:14:e3:
77:49:5d:07:10:a3:9c:53:f2:1c:50:6d:7b:c1:c0:f1:51:b9:
92:11:53:fd:d1:10:eb:5f:fb:0f:29:ae:6a:39:e9:2f:81:c3:
9b:5a:83:c0:de:b0:c2:a6:e9:5d:93:d7:b2:5a:03:e8:5a:d0:
15:e8:aa:b3:c1:a3:a7:fd:98:1b:2c:b3:a1:21:8d:49:4c:62:
58:3d:af:29:cd:a9:46:a2:f3:c6:7e:2d:00:fc:98:95:1e:50:
fd:be:b9:4b:c6:29:f0:ca:ec:cb:b3:ba:e5:0a:56:14:0b:17:
40:69:e5:27:e3:ba:ce:a7:a5:fa:cf:c4:bc:05:36:a0:aa:fe:
e8:1a:15:f9:8a:ed:b0:2b:25:56:d7:d0:33:0e:47:12:01:b0:
27:d7:41:51:54:b9:b6:33:21:76:34:67:f4:8e:c2:49:27:83:
e7:ea:0b:21:d7:8c:81:a1:ef:7a:0c:a2:dd:2c:82:83:c4:ae:
2a:ff:aa:57:a0:8f:56:97:e8:fc:73:f4:94:4d:2a:5e:bf:f9:
b4:59:e1:28:ab:43:92:27:2d:75:22:0e:a8:4b:e4:7f:c6:3d:
a5:cc:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:03 2025 by rpki-client