Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/C6766086579811EAA245BE5EC4F9AE02.roa
File: C6766086579811EAA245BE5EC4F9AE02.roa (raw, json)
Hash identifier: xCaFRLPGD9q69hJ0yZ+vFad3g0XuUKgpA3HR+sQMI6A=
Subject key identifier: 74:97:05:AD:6B:19:2B:8B:D2:A1:D9:FE:05:BD:B4:A1:74:FF:B1:82
Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial: 09E0
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/C6766086579811EAA245BE5EC4F9AE02.roa
Signing time: Wed 10 Apr 2024 20:59:20 +0000
ROA not before: Wed 10 Apr 2024 20:59:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136431
IP address blocks: 103.87.208.0/23 maxlen: 24
203.96.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2528 (0x9e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Validity
Not Before: Apr 10 20:59:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6616fda8-c2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:fb:bf:75:33:59:5e:8a:1e:a9:7a:e7:44:
12:3a:15:38:96:22:1d:07:fa:6f:98:dd:bb:bd:fe:
80:a1:60:ab:e7:06:2b:ba:d8:9e:ec:d7:52:2b:5e:
8c:5c:da:d2:83:2a:a7:9c:02:2c:3e:31:56:9c:ee:
c5:5d:4c:00:53:5e:89:f2:07:3d:dc:be:14:d1:9c:
8e:86:ff:cd:7c:f1:eb:6a:1a:0f:c3:94:ed:2c:43:
f0:41:f0:20:56:2f:bb:85:67:c9:4c:52:a4:a3:56:
19:27:72:aa:ee:fc:3c:9b:db:7c:98:70:18:ce:68:
cf:ed:36:13:b4:87:6c:d7:d2:87:1e:ae:57:f9:bb:
95:f5:23:fa:53:ce:e4:4b:90:58:04:6c:a4:da:47:
05:3e:d8:08:94:e6:58:2c:36:63:5c:ce:ac:0d:61:
7d:54:fa:b2:68:d7:8e:d6:24:8e:62:0a:47:f4:bb:
ad:a0:49:23:20:c6:e6:65:89:cf:e4:37:01:34:89:
d3:26:48:4c:a2:d4:cf:8f:97:cf:1d:0f:92:77:37:
6f:5a:cc:dd:5e:2b:47:bd:70:9a:ed:93:ad:b9:da:
4c:ec:21:6f:d2:45:9f:83:55:04:43:da:ad:f6:a5:
d7:f4:f8:9f:7b:2c:82:c0:4d:4f:a5:f8:d8:12:9a:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:05:AD:6B:19:2B:8B:D2:A1:D9:FE:05:BD:B4:A1:74:FF:B1:82
X509v3 Authority Key Identifier:
keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/C6766086579811EAA245BE5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.208.0/23
203.96.172.0/22
Signature Algorithm: sha256WithRSAEncryption
47:3e:a6:d4:91:46:58:43:6c:d9:91:2e:cf:f9:fa:12:0d:fa:
08:f0:3d:d9:aa:8a:f5:48:54:7e:67:30:d6:49:6c:4d:a5:df:
9d:a1:e0:0c:56:0c:d9:07:9f:ac:ca:7d:97:68:22:d0:c9:dc:
59:a0:f5:b6:1d:64:2c:05:42:fb:08:3c:2d:4f:9d:94:2b:95:
74:b5:be:00:58:78:bf:08:d3:a9:31:f1:d6:a8:e2:d2:20:1c:
d3:38:15:c2:03:9c:a4:d6:36:ea:b2:ee:4b:f3:74:f3:7e:a1:
2c:80:3e:25:00:99:38:96:2c:73:04:07:fe:d5:1c:2f:1e:79:
cf:d5:99:56:38:e7:68:9c:9b:9b:47:b1:4b:d7:6a:90:b6:96:
b3:7b:b2:81:59:b0:79:5e:e4:78:d8:11:52:fd:19:5f:a8:dd:
f9:e0:de:63:a1:6a:f5:1c:6a:d1:fd:0b:5c:b7:98:1a:36:a1:
04:80:06:d7:62:ad:f7:7a:4c:a3:d5:07:43:cf:0b:d4:0e:93:
6c:87:0f:57:57:92:52:73:44:4b:9a:99:c2:fe:21:6b:bf:78:
b5:3f:f0:79:c6:6f:e3:98:6b:a0:d1:28:6b:db:4a:d2:61:03:
40:9a:d6:65:89:5d:f4:22:93:ac:46:5a:6e:e1:7b:fb:3d:5b:
b4:7c:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:20 2025 by rpki-client