Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/8BE9B1A03C8B11EC8947D982C4F9AE02.roa
File: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (raw, json)
Hash identifier: FoYRsCuS7R3h5SKIzMxx0ziFPmPriW5U+D3CqE4wpEg=
Subject key identifier: CD:87:8A:5F:A2:ED:93:FF:93:EE:D6:2D:88:A4:09:40:CD:57:37:C6
Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
Certificate serial: 03B9
Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/8BE9B1A03C8B11EC8947D982C4F9AE02.roa
Signing time: Wed 17 Jan 2024 02:03:55 +0000
ROA not before: Wed 17 Jan 2024 02:03:55 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 9744
IP address blocks: 43.225.196.0/22 maxlen: 24
103.44.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5
Validity
Not Before: Jan 17 02:03:55 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65a7358b-3470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:1b:92:d2:94:44:51:bc:8a:e3:83:b9:54:
15:b4:20:29:44:9d:b8:8e:d6:f4:da:55:a0:a8:71:
a7:80:d0:9a:0c:08:4a:ec:25:0d:c6:d9:f1:cd:86:
2c:76:9a:79:0c:14:32:d3:bb:89:e0:fa:27:d6:3f:
04:d7:39:ba:cf:7f:7d:97:17:fb:77:9c:e3:77:6d:
cc:50:43:3e:bc:22:64:26:d8:ce:28:21:c9:4d:13:
8d:01:07:f7:e9:89:e2:19:74:cd:76:f2:8e:59:c0:
47:5e:19:0b:07:ee:4f:25:15:5e:e6:26:a1:d4:30:
7c:12:69:fa:6d:c2:32:95:5d:2e:7e:b3:66:9b:e4:
5f:59:ca:5e:99:23:5c:97:5c:6c:59:7c:e0:20:b9:
f7:b4:9c:c1:bd:b0:ad:5b:c9:d9:d1:0f:04:34:04:
3e:81:46:e8:75:21:96:64:f2:0c:e5:52:8d:fa:f7:
1a:ca:f5:7f:52:cb:9c:e7:aa:0c:40:fd:04:7a:55:
50:b8:48:67:f1:10:54:45:39:62:48:b2:9a:f7:b1:
1a:61:57:0b:85:14:36:51:95:cf:d5:9d:89:ce:3c:
7c:c8:31:60:a7:82:46:8a:8a:34:c8:0c:6b:36:80:
c1:16:e9:c5:ac:20:c4:21:ca:b5:d0:62:08:11:37:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:87:8A:5F:A2:ED:93:FF:93:EE:D6:2D:88:A4:09:40:CD:57:37:C6
X509v3 Authority Key Identifier:
keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/8BE9B1A03C8B11EC8947D982C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.196.0/22
103.44.160.0/22
Signature Algorithm: sha256WithRSAEncryption
60:e1:e8:bc:f4:09:26:7e:42:f9:ce:02:f0:bc:c2:6c:ea:7e:
f3:4e:a2:61:62:bf:33:fc:16:32:86:00:89:0d:2b:c1:20:4a:
b9:42:68:57:81:37:7d:0f:7e:e5:ff:fd:b1:7b:ff:66:36:aa:
cb:4e:cd:79:84:49:26:2b:9c:7b:6c:dc:ca:bd:db:19:3f:79:
e8:96:58:c8:83:2e:f9:66:5f:5a:ca:79:16:c7:40:65:f6:f0:
7e:ad:73:cc:3d:dd:b4:de:b1:54:11:15:e0:e1:43:c7:82:d8:
ef:24:2b:52:5e:01:24:7d:fc:bc:1c:f6:b8:2b:d8:7d:38:47:
bf:40:b2:dc:a4:c0:00:a6:b6:b7:ee:d3:cc:f5:c9:02:a0:83:
95:89:83:2f:ec:bd:31:0d:e4:fd:d2:0d:72:5b:2b:32:ae:65:
ed:31:53:50:ce:21:2a:20:35:a1:d9:8c:d0:b1:bd:78:6b:9a:
34:69:1e:e8:44:24:fd:af:a7:d5:96:88:81:fe:5c:83:c4:76:
1e:34:c6:14:d0:19:2b:99:00:c0:50:e8:a3:85:35:7c:50:c5:
47:bd:aa:7e:a2:77:2c:30:65:ba:d4:fd:cc:cd:84:15:a6:13:
6a:d8:cc:d3:77:6b:f0:43:69:ad:ea:c1:24:b7:37:7f:fd:66:
21:c8:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:26:27 2025 by rpki-client