Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa
File: 9FD12146ED7211ED8A92041CC4F9AE02.roa (raw, json)
Hash identifier: oRm2blLyiJS/QAfKc6f3YExIUJkkRHUJrPUQp9W2Q+s=
Subject key identifier: F7:93:26:28:3D:6A:98:45:F5:28:4D:55:2A:AD:71:2D:DF:E0:7E:F2
Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2
Certificate serial: 0138
Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa
Signing time: Sun 08 Dec 2024 16:13:30 +0000
ROA not before: Sun 08 Dec 2024 16:13:30 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 133866
IP address blocks: 103.76.44.0/22 maxlen: 22
103.76.44.0/24 maxlen: 24
103.76.45.0/24 maxlen: 24
103.76.46.0/24 maxlen: 24
103.76.47.0/24 maxlen: 24
116.206.88.0/22 maxlen: 22
116.206.88.0/24 maxlen: 24
116.206.89.0/24 maxlen: 24
116.206.90.0/24 maxlen: 24
116.206.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2
Validity
Not Before: Dec 8 16:13:30 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6755c5a9-2fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:8e:f2:95:e3:ed:c1:1e:67:87:97:f5:e6:
e4:bb:1f:d9:df:61:e5:ac:ef:98:b2:2e:bb:c4:e2:
61:e6:76:39:ae:3a:82:9b:96:81:14:69:a9:29:7d:
4b:31:52:ee:cf:a4:52:ca:d3:b1:cc:e7:36:d7:2b:
67:54:cf:3c:8b:d5:d2:a4:dd:5a:0f:6b:9f:b4:a1:
3f:fe:8b:43:45:4b:e2:b9:98:58:17:55:60:e4:85:
19:aa:d4:3f:71:82:6c:cb:4d:81:92:bb:d7:20:a3:
1f:ba:32:55:54:d2:ae:ee:df:22:32:e0:33:83:03:
18:e7:38:7f:69:f0:77:be:93:bd:a9:dc:7a:f7:4f:
69:0e:83:25:ac:2d:9b:95:e0:a1:89:de:30:39:39:
42:82:fb:02:e0:53:dd:3e:c8:97:0d:dc:cc:13:61:
d7:37:f8:39:21:dc:fb:5f:82:91:84:e5:ea:00:5d:
e2:b9:f8:6e:23:3e:2a:8d:ac:68:20:40:a6:c9:ca:
97:d5:10:12:a6:58:11:f4:f4:c9:2f:2e:f6:15:43:
40:f1:60:10:9f:2a:32:72:4c:c6:45:88:fd:e6:b4:
54:6d:4b:4b:fd:6f:df:56:f6:fa:70:df:43:dc:5f:
e8:2c:33:64:18:05:48:ae:98:72:bb:dd:c4:92:7c:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:93:26:28:3D:6A:98:45:F5:28:4D:55:2A:AD:71:2D:DF:E0:7E:F2
X509v3 Authority Key Identifier:
keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.44.0/22
116.206.88.0/22
Signature Algorithm: sha256WithRSAEncryption
33:a6:fd:60:26:93:f7:54:d0:c6:d5:d2:eb:98:58:ac:03:49:
0a:8a:f1:6c:7c:4d:cb:0b:ca:61:2a:74:26:0f:c2:05:35:2e:
3a:a6:bf:29:ee:ca:e9:6d:c3:ec:0b:16:b9:5a:ac:4f:11:32:
83:64:76:8a:5e:79:be:7e:4d:e9:b3:36:7e:f7:a0:9d:24:65:
6a:47:19:8b:51:7a:e4:07:34:c1:b4:cd:2d:ff:b2:af:11:86:
db:47:87:81:64:cc:b0:a0:19:93:ed:01:aa:0e:c2:fd:1c:a4:
3b:62:2e:f2:99:26:6a:01:76:25:58:1b:67:e5:21:5c:c2:88:
f2:35:82:46:be:e4:47:05:3d:40:52:83:06:4c:2b:c8:a4:3c:
8e:a9:1f:3f:48:7b:ca:b5:c9:f2:f8:36:18:d6:db:e4:2c:9e:
e5:99:21:cb:4c:86:aa:f5:eb:c2:37:93:9b:ab:ca:f1:bc:5e:
4c:49:0a:7b:de:12:d8:e0:47:10:d0:f1:f4:b4:04:01:43:c6:
13:77:c5:de:52:7c:4b:ef:4f:e6:be:80:86:d4:f3:29:86:3a:
0d:6c:a2:0e:34:21:91:f2:ff:54:bc:9e:bc:2a:78:16:8f:ef:
27:02:15:46:9f:ff:4c:c7:47:b0:1d:c0:3f:a3:e7:78:85:1c:
73:44:2a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:57:38 2025 by rpki-client