Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F47561669C3B11EABC59DA11C4F9AE02.roa
File: F47561669C3B11EABC59DA11C4F9AE02.roa (raw, json)
Hash identifier: 4YobdsxDwRIrk/z/bKC20Bc3suxWt2VmXdAQxoroaO4=
Subject key identifier: 7E:62:36:37:45:63:7A:66:3D:BF:1C:24:A4:D5:D5:9B:E5:D5:9E:4C
Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial: 0F5A
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F47561669C3B11EABC59DA11C4F9AE02.roa
Signing time: Thu 08 Feb 2024 18:16:00 +0000
ROA not before: Thu 08 Feb 2024 18:16:00 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138576
IP address blocks: 103.136.184.0/24 maxlen: 24
103.136.185.0/24 maxlen: 24
103.136.186.0/24 maxlen: 24
103.136.187.0/24 maxlen: 24
2404:9ec0::/32 maxlen: 32
2404:9ec0:100::/48 maxlen: 48
2404:9ec0:101::/48 maxlen: 48
2404:9ec0:102::/48 maxlen: 48
2404:9ec0:103::/48 maxlen: 48
2404:9ec0:104::/48 maxlen: 48
2404:9ec0:105::/48 maxlen: 48
2404:9ec0:106::/48 maxlen: 48
2404:9ec0:107::/48 maxlen: 48
2404:9ec0:108::/48 maxlen: 48
2404:9ec0:109::/48 maxlen: 48
2404:9ec0:110::/48 maxlen: 48
2404:9ec0:111::/48 maxlen: 48
2404:9ec0:112::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3930 (0xf5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Validity
Not Before: Feb 8 18:16:00 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65c51a60-8162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:91:32:1a:39:02:0d:9c:b2:c1:5a:6e:ee:
01:b8:a0:45:05:75:00:34:5a:cf:f0:fe:bb:ce:c7:
6d:ab:83:17:00:78:f0:e5:5e:e4:e0:ee:d0:4e:97:
dc:c7:65:dc:9c:1e:70:6a:42:61:89:85:ce:49:60:
7c:f9:12:02:62:f9:9f:44:fc:4e:71:58:61:93:59:
b4:c8:59:38:23:8b:3a:fc:1a:26:d2:2c:e6:fb:e7:
51:e1:11:60:f0:3b:76:4e:b2:0d:0c:cb:4b:83:32:
94:ae:e7:32:fb:9f:cd:ef:ea:26:37:24:e4:9d:1e:
51:ce:cd:13:6c:3f:48:1c:73:32:29:62:2f:e4:65:
ca:60:0e:f3:e9:a2:3f:ae:33:38:1d:74:15:e4:4e:
44:4b:db:70:ab:57:10:3a:80:58:b2:85:2a:d7:19:
d3:de:e8:f2:83:01:df:83:09:16:86:54:5b:fe:54:
15:e6:28:d1:9a:ac:32:d3:9f:67:43:eb:98:40:14:
67:de:62:2d:c6:a5:77:5c:a0:b7:e3:99:71:b0:9e:
53:37:c6:88:18:37:fc:8a:be:07:78:5e:37:d6:86:
94:d9:4e:4b:46:b1:bd:02:91:98:6d:78:77:c0:35:
b9:20:82:62:40:f5:d1:a4:a2:d4:0c:81:66:1d:03:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:36:37:45:63:7A:66:3D:BF:1C:24:A4:D5:D5:9B:E5:D5:9E:4C
X509v3 Authority Key Identifier:
keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F47561669C3B11EABC59DA11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.184.0/22
IPv6:
2404:9ec0::/32
Signature Algorithm: sha256WithRSAEncryption
34:83:85:ec:b7:bd:14:88:53:4c:55:75:04:9a:10:fa:61:73:
40:64:64:56:44:da:72:36:ca:4c:42:33:70:0e:d2:d3:b5:fa:
d4:b7:fc:4e:f4:c1:fe:f7:cb:97:9d:05:f7:6e:1a:92:01:bd:
51:a4:2d:a1:5b:ac:01:3e:b8:b6:b4:0b:6b:53:28:b4:28:9b:
68:0b:e8:7d:13:c2:b3:81:92:ff:c3:f8:88:65:62:69:a3:5e:
1f:e9:3b:3e:07:ca:db:08:73:1a:6e:ea:41:80:ae:bd:cf:c6:
d1:b6:ab:98:57:e4:24:72:c4:0b:1f:15:dd:0d:70:ea:9f:13:
8f:ac:e1:b9:18:08:75:38:49:88:05:81:cf:d0:15:de:28:cf:
1f:fa:ec:e3:da:c5:35:8c:75:9d:a2:1b:87:4a:54:fa:68:90:
36:32:36:c2:69:2a:a4:b4:3a:01:7b:f7:0c:e2:c0:0e:f6:a9:
b1:ce:06:20:d8:1a:7e:3b:30:39:89:2b:f0:a3:bd:7d:19:fb:
1c:cd:94:3a:c2:1f:72:7c:44:e6:34:63:ee:ab:57:fe:fc:f1:
5a:b2:a6:a5:e6:ae:68:84:5d:60:de:4e:10:1b:9d:c3:39:bd:
83:d1:58:3a:a9:84:21:e8:da:8a:1a:35:8b:58:88:21:86:de:
43:85:5f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:59 2025 by rpki-client