Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa
File: C2AB1A10B64411E89321A417C4F9AE02.roa (raw, json)
Hash identifier: sQZhVCqGnQgPNsHomc/Him+uzpF3a8NDcj08KMyeCpg=
Subject key identifier: 8D:B4:61:40:BB:73:39:2F:F8:25:19:AC:C5:79:76:BF:23:11:BA:9D
Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
Certificate serial: 1317
Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa
Signing time: Wed 10 Jul 2024 17:34:56 +0000
ROA not before: Wed 10 Jul 2024 17:34:56 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 137952
IP address blocks: 103.118.44.0/22 maxlen: 22
103.118.44.0/24 maxlen: 24
103.118.45.0/24 maxlen: 24
103.118.46.0/24 maxlen: 24
103.118.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4887 (0x1317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
Validity
Not Before: Jul 10 17:34:56 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=668ec63f-8578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:04:eb:e2:2a:41:24:a8:6e:78:e2:2b:73:
03:6e:6b:72:15:ab:8f:4f:48:8a:ad:e9:74:0c:a3:
3d:a3:30:7a:74:f6:15:63:34:e7:95:8f:79:3b:30:
1a:46:18:5f:d2:44:e6:57:42:f8:66:a9:96:ab:9e:
e9:dd:5c:92:75:ce:77:da:72:ea:54:37:1c:c2:f7:
5b:04:4a:47:d0:2a:d8:8e:de:5c:9e:60:52:f9:6e:
1c:e4:6a:00:07:0e:3e:e9:08:b6:98:f1:e2:91:17:
b7:d3:b0:7b:fc:33:34:fe:cb:98:40:d6:97:0d:6e:
ee:73:ac:b1:39:ae:fb:36:d0:e5:17:c2:47:57:59:
3b:00:6a:3b:16:40:6d:1d:b7:0c:f4:7b:df:08:d2:
3b:ce:4a:83:76:78:22:9d:ba:50:91:23:59:44:bc:
36:69:e9:30:7e:85:e4:62:7a:d7:1c:43:3d:60:28:
cc:b4:5e:86:31:95:cf:64:c3:5d:62:9f:c9:d9:b9:
c6:53:54:0b:66:e7:02:c2:4c:35:6f:3e:25:2d:44:
1c:20:46:ec:33:d7:40:92:ba:ef:98:23:be:0a:20:
01:62:9f:2c:47:a7:d8:94:9e:b8:48:15:3d:ae:41:
32:01:28:d4:e6:aa:bd:58:dd:6e:16:8b:ec:ba:6c:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:61:40:BB:73:39:2F:F8:25:19:AC:C5:79:76:BF:23:11:BA:9D
X509v3 Authority Key Identifier:
keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.44.0/22
Signature Algorithm: sha256WithRSAEncryption
93:5f:03:75:21:a6:87:74:09:3e:16:a6:61:8f:6a:dc:b2:1e:
98:1e:18:50:11:00:d6:54:59:96:93:42:2f:6a:5b:43:78:44:
ef:77:2c:fd:29:b1:78:a8:6f:bf:1f:70:54:17:38:bf:6d:7e:
e2:d4:a7:65:5c:dd:80:bd:4e:c7:62:cb:43:12:d7:00:2a:0a:
43:94:cc:fd:5f:40:bd:31:d7:e0:e1:57:66:ae:9b:13:32:2a:
fd:ba:71:7b:e2:4b:87:7d:4d:dc:d8:c0:fa:6f:d3:5a:8d:e3:
fd:25:6a:67:91:bf:35:5f:9d:38:77:a4:46:0f:21:cb:a0:37:
b0:a4:a6:00:9c:d0:17:bf:f2:99:2b:13:6b:5b:9c:b2:ff:4e:
da:2f:c1:20:d9:9a:65:5e:77:03:e2:ca:d5:fc:99:3a:fc:55:
19:e6:8c:e9:7b:a4:ee:be:cf:4e:8a:55:4e:fe:3e:4a:bf:40:
72:10:da:44:f2:cc:f3:f2:1e:df:60:c7:73:0e:92:9d:01:06:
ad:55:23:a1:30:ef:f3:00:ef:e3:a3:4c:2a:ed:52:a9:23:66:
16:ff:73:e1:2b:50:f4:44:1e:c2:f5:42:ef:d4:c3:af:08:11:
41:0a:14:d2:b2:9e:5f:02:1b:2f:c3:41:3a:4d:af:23:be:ea:
5c:44:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:33:37 2025 by rpki-client