Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9B64D5BC5BD311ECAB122945C4F9AE02.roa
File: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (raw, json)
Hash identifier: O75ak5g3Sd3oJTig8KK/2ICaXFxfuZ2760QEleY1kic=
Subject key identifier: 68:36:99:6A:E1:32:AD:D1:96:AA:E7:0E:89:3E:0A:BA:B0:33:6C:B8
Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4
Certificate serial: 0F00
Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9B64D5BC5BD311ECAB122945C4F9AE02.roa
Signing time: Wed 28 Feb 2024 18:26:37 +0000
ROA not before: Wed 28 Feb 2024 18:26:37 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 58521
IP address blocks: 103.247.204.0/22 maxlen: 22
103.247.205.0/24 maxlen: 24
103.247.206.0/23 maxlen: 23
103.247.206.0/24 maxlen: 24
103.247.207.0/24 maxlen: 24
202.81.96.0/19 maxlen: 24
202.181.64.0/20 maxlen: 24
2403:b00::/32 maxlen: 32
2403:b00::/48 maxlen: 48
2403:b00:1::/48 maxlen: 48
2403:b00:2::/48 maxlen: 48
2403:b00:3::/48 maxlen: 48
2403:b00:4::/48 maxlen: 48
2403:b00:5::/48 maxlen: 48
2403:b00:6::/48 maxlen: 48
2403:b00:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3840 (0xf00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4
Validity
Not Before: Feb 28 18:26:37 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65df7add-2c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:0c:14:94:1e:c4:07:a1:0e:8d:a6:f1:9e:
40:e2:70:14:6a:08:c3:2d:24:b6:ff:7e:bf:4d:84:
1e:75:76:0b:f3:ca:1a:ad:58:b2:a4:33:2f:7e:f1:
cb:66:96:63:69:48:15:d2:f6:f8:64:84:dd:d7:bd:
43:9d:0c:50:d7:3d:f2:36:f8:01:05:32:72:16:12:
1b:7a:31:2d:0c:10:44:af:50:bd:ed:ad:da:72:5d:
43:1f:a4:92:d0:b6:12:95:54:88:49:09:40:0a:3c:
57:a6:12:c7:71:ad:db:e0:bb:ac:7c:8b:3a:05:c8:
e0:63:c6:6b:a9:e5:89:3f:e8:1d:d1:ee:18:72:05:
6c:8a:5b:68:ec:5b:65:1f:7c:92:07:d9:40:a0:06:
76:39:b8:51:49:63:d1:c3:1d:bb:44:93:37:24:10:
c3:d2:b5:bb:d5:41:be:a5:eb:35:b6:9a:ec:6a:29:
8f:b7:01:2e:fc:82:91:a3:f8:e9:ed:85:80:a0:bf:
e8:a7:ed:6e:bb:a0:90:ad:0d:52:56:17:24:b5:ca:
af:4c:75:15:af:53:0e:c7:97:32:51:c1:92:cf:8c:
1a:04:0e:83:31:fe:ea:df:e2:a2:b0:84:d7:82:8a:
e3:b1:44:18:81:f1:01:65:47:cc:44:e7:1a:24:f9:
f3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:36:99:6A:E1:32:AD:D1:96:AA:E7:0E:89:3E:0A:BA:B0:33:6C:B8
X509v3 Authority Key Identifier:
keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9B64D5BC5BD311ECAB122945C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.204.0/22
202.81.96.0/19
202.181.64.0/20
IPv6:
2403:b00::/32
Signature Algorithm: sha256WithRSAEncryption
5b:b9:b1:7a:93:a9:70:3c:2e:5c:56:55:ca:2b:9a:a9:2d:90:
ee:bb:b5:65:62:c3:6e:67:93:60:e8:3f:17:29:30:c8:b3:c2:
c7:20:07:9b:40:5b:62:b4:3e:2a:53:fd:61:a4:7b:45:50:a4:
fe:17:05:76:6a:2d:9c:2f:6c:1d:49:12:43:27:43:a1:cf:47:
ae:9f:1f:d3:11:3b:bd:92:c2:f3:eb:70:4e:3e:0a:f4:91:14:
83:14:e2:bb:0d:08:b1:c4:ef:6e:e0:d0:f7:b0:b1:ac:b5:d6:
7a:ef:00:ce:f3:d8:9c:6e:55:69:c8:a1:ba:ad:3d:c1:e2:f4:
10:87:ca:37:d7:e2:ed:9d:ad:56:95:87:ae:b5:6a:aa:90:1c:
24:15:0d:02:22:04:71:4a:1c:ed:fe:21:63:5b:51:5b:ed:e4:
d3:28:91:bc:58:bf:e6:1e:1c:46:4a:81:83:d2:d0:62:89:a1:
ec:61:a4:06:b0:52:25:33:a1:06:95:4c:62:b1:89:82:89:1c:
ba:cf:9b:80:4a:9e:ee:2e:65:1a:95:c4:16:ed:bf:53:1f:43:
ac:bb:e2:3c:13:42:f5:49:03:b0:47:10:42:cd:da:b4:e9:9f:
59:e9:34:0a:95:ac:10:69:3e:32:fb:43:9e:b5:81:a8:6d:cb:
0b:00:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:45:40 2025 by rpki-client