Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
File: C9836F3A314C11EEB33F3686C4F9AE02.roa (raw, json)
Hash identifier: Nm3Cq0H330hcq1ka7PepkHLo38lsxcixtabz9iT0KA4=
Subject key identifier: 35:F9:D9:5D:4E:9D:4F:9E:B5:B1:BB:19:F7:6B:3C:A8:D8:DA:C8:75
Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Certificate serial: B9
Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
Signing time: Wed 03 Jul 2024 06:07:19 +0000
ROA not before: Wed 03 Jul 2024 06:07:19 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 142111
IP address blocks: 103.158.74.0/23 maxlen: 24
2401:1da0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C
Validity
Not Before: Jul 3 06:07:19 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6684ea97-77f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:3c:ae:66:09:08:74:cd:44:6f:cc:8a:3a:
f5:29:77:1c:b3:02:97:d7:b7:49:17:b6:a3:43:7b:
60:e9:fd:e3:6b:a0:82:01:40:07:5f:65:fe:c0:f3:
44:db:fc:bc:6b:45:16:18:29:2e:ef:41:4b:85:e7:
a8:e3:c4:79:b3:1f:39:96:85:97:b8:e5:a7:dd:e2:
b5:78:9f:4e:32:eb:c2:f9:57:f5:29:02:6a:f9:8f:
fb:d5:a8:d6:23:d2:e0:6c:40:0e:92:f9:2d:47:86:
27:71:76:f3:8c:ef:c0:62:55:1b:83:b2:ca:7f:13:
55:6e:40:43:2b:00:83:55:ce:22:d6:fa:b2:ae:e0:
5a:d9:00:93:6e:f3:9d:ae:95:50:3d:1e:b3:dc:57:
68:bb:c3:e8:f2:f9:1b:6c:7e:50:0c:94:20:88:30:
de:6e:26:49:7c:b3:a7:fb:14:57:03:e4:92:4a:c3:
a6:88:c3:27:0e:eb:bb:90:90:3d:03:46:54:3b:d4:
02:c1:94:92:0c:e5:ab:76:1a:02:0c:6f:24:02:f6:
df:84:1d:0c:0c:b4:8e:e9:9c:c6:64:83:24:a3:c3:
98:03:52:c2:90:40:d4:e2:25:2e:5b:5c:0f:c2:04:
06:64:f1:71:92:da:2f:af:0a:db:1a:c1:f0:31:05:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F9:D9:5D:4E:9D:4F:9E:B5:B1:BB:19:F7:6B:3C:A8:D8:DA:C8:75
X509v3 Authority Key Identifier:
keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/C9836F3A314C11EEB33F3686C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.74.0/23
IPv6:
2401:1da0::/32
Signature Algorithm: sha256WithRSAEncryption
1e:39:b4:de:fa:da:ab:7c:e5:88:c5:fa:53:a6:1f:f1:ec:5e:
a7:30:e4:f6:76:2c:1e:16:25:71:ea:6f:e9:04:14:72:96:5c:
a6:22:9b:c3:cb:67:1b:14:db:5d:93:94:bc:19:9b:87:8a:31:
ef:aa:d1:47:14:e4:67:84:ea:bc:d0:3a:07:1b:8c:f5:a2:30:
47:2d:9c:2c:c8:9c:19:55:a1:e8:47:11:01:0a:55:1c:e8:01:
a0:57:60:c5:b9:f2:d1:ea:da:84:9f:e4:66:3d:e4:fa:78:a9:
27:66:5d:79:be:9f:66:d6:a7:d6:bb:47:f9:85:fa:da:ca:39:
75:2c:1c:3f:5b:ce:2e:bb:4d:fd:eb:8f:43:aa:fa:1a:af:da:
99:fe:8f:fd:9a:c5:87:3c:bc:39:c7:67:3d:6f:bf:19:a6:ca:
99:ad:b7:13:4f:42:51:5c:b6:44:41:48:3f:7b:ba:9d:f4:e1:
29:3a:b3:04:87:b6:f3:a2:a4:ac:f8:c4:77:a4:ae:3a:99:df:
4d:a3:b5:c3:ba:86:cd:73:c1:af:c3:60:aa:6f:6c:77:b9:d4:
ff:31:02:59:c1:57:c7:1d:13:6e:f2:c0:e1:3a:97:9c:30:96:
31:12:c4:e0:1d:c0:a4:88:7c:a0:7c:bb:7e:d8:05:fd:a7:d4:
3b:4c:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:54 2025 by rpki-client