Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
File: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (raw, json)
Hash identifier: l9h/YYAjGjlzLvWP6nij0KuGfxuDVqvEm3iy7SoOZcE=
Subject key identifier: 86:A8:F8:30:0F:E2:EF:DE:AF:99:90:E5:C6:2D:83:1C:72:AD:01:15
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 0597
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
Signing time: Sat 28 Sep 2024 23:13:01 +0000
ROA not before: Sat 28 Sep 2024 23:13:00 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 135386
IP address blocks: 103.155.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1431 (0x597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Sep 28 23:13:00 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f88d7c-dba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:bb:0e:8e:7b:5e:b8:b0:79:14:7d:da:2e:
c4:51:2d:11:2f:13:7b:4b:9d:ee:f5:35:fb:4d:f5:
81:fd:0a:12:ed:3b:b8:e2:fa:0b:38:75:0e:e7:7a:
59:6e:14:10:a7:4f:24:21:f4:91:34:37:f3:52:d6:
4e:a8:24:5a:ce:f5:7d:73:a1:6e:60:fb:46:e0:58:
80:f2:c6:1f:23:4f:47:2f:fd:84:69:28:fa:01:61:
7d:55:05:c3:b4:c4:93:c2:35:69:4c:ec:d2:f8:71:
36:3a:5f:bf:47:29:60:f8:52:22:a3:c7:8d:32:b4:
64:e8:8a:ae:1e:6b:86:82:cd:04:86:c1:4f:b7:99:
86:7d:92:fb:d2:9e:1c:fb:e9:64:3d:ac:fb:07:0d:
32:4c:54:81:44:04:d9:d8:58:65:ba:bc:1e:34:30:
84:e2:35:45:d1:13:4f:29:b2:c1:39:54:60:34:18:
ac:f2:ff:53:68:af:87:b9:38:6f:37:91:ca:5c:d2:
6b:11:f4:e6:f1:f2:f3:4a:c3:5d:b5:5f:d0:eb:2b:
ac:1e:22:e9:94:db:9b:33:fb:ad:b3:ac:da:7e:a9:
9a:cc:71:cc:65:a6:dc:8d:66:76:61:9c:ab:a5:4d:
f5:36:37:4e:f1:0b:dd:95:99:ac:3b:f6:7a:b8:8f:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:F8:30:0F:E2:EF:DE:AF:99:90:E5:C6:2D:83:1C:72:AD:01:15
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.110.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:eb:f2:6a:12:f0:fb:0f:b8:4a:fd:5d:d5:ba:ea:09:24:a8:
37:37:b9:2f:0e:19:d7:f7:d3:0d:9e:49:f0:4e:08:a0:ac:e7:
d9:6b:fa:fc:85:06:01:b2:78:3d:28:49:40:ed:12:a9:5a:35:
05:a4:13:dc:a7:d4:f5:f8:e6:20:fc:9d:d1:ce:40:db:ea:76:
1f:e5:21:9a:ed:c7:29:88:13:09:92:0d:04:95:35:44:d9:62:
77:40:33:93:7f:3e:a4:e7:ec:71:59:40:28:22:9f:68:c3:3c:
31:a9:5f:1c:e7:07:0a:8a:6a:91:e9:ce:69:91:66:12:fd:68:
43:ae:58:74:1c:dc:99:ab:1b:73:0a:17:06:59:5b:76:f1:70:
96:a9:40:22:b8:a9:8e:07:7e:8e:35:01:d5:ea:0e:f9:4a:a1:
1f:aa:1e:f3:28:c3:1e:90:dd:32:0c:34:0d:38:e7:8f:2e:52:
ad:47:d4:0f:04:2d:d5:5a:58:3e:fe:01:8b:6b:ba:6f:6c:bd:
86:dc:e3:98:bd:61:45:a4:61:45:a0:db:0f:a0:43:c5:99:44:
7f:f7:57:4e:58:f4:21:90:01:53:1e:c5:9a:79:98:3a:bc:66:
21:79:d0:80:78:d7:cf:c5:cf:f9:6a:29:65:38:7b:8e:3a:35:
ef:bb:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:17 2025 by rpki-client