Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa
File: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (raw, json)
Hash identifier: g7W9G3ij02vVGRhQiw6Ym1yygIWGPWKSpCEET+ZTaHQ=
Subject key identifier: 1A:12:09:DC:7B:CC:8A:72:D9:32:0F:80:60:ED:79:0C:D2:A2:75:DB
Certificate issuer: /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
Certificate serial: 02
Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa
Signing time: Thu 22 Aug 2024 11:40:08 +0000
ROA not before: Thu 22 Aug 2024 11:40:08 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 136812
IP address blocks: 103.121.232.0/24 maxlen: 24
103.121.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
Validity
Not Before: Aug 22 11:40:08 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66c72398-52ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:56:34:55:0b:2b:38:45:23:a3:f3:c0:28:
4f:58:fd:ef:a4:27:25:b0:54:18:5a:2c:3b:3d:f9:
c5:62:79:bf:64:3f:19:46:50:cd:a2:76:77:6d:a2:
62:8f:06:76:6c:a5:f5:b6:67:93:e0:3c:0c:8d:48:
b9:42:85:a5:18:38:af:3a:88:f0:12:d1:3c:45:1e:
cc:1e:2d:fa:7f:f1:bb:1c:6f:7f:db:4e:f9:80:f6:
bc:af:6e:3c:46:3f:eb:70:4b:ad:d9:26:37:54:83:
6a:3d:7e:fd:5c:3f:8b:a2:3d:01:e6:eb:0f:00:90:
d1:71:a2:84:c3:f2:cc:60:4a:02:59:c1:ca:f9:a7:
f5:a9:40:6e:b7:77:eb:29:74:d2:3b:1c:ac:30:49:
09:e1:59:40:af:a1:47:85:9f:ca:3c:79:42:43:b0:
9f:8a:9d:55:1e:c0:60:9a:8e:07:76:94:30:53:fa:
47:76:58:61:56:4e:c8:e7:03:51:8c:bc:ae:90:4e:
34:3c:9d:de:32:62:9c:b2:2c:fa:b1:9c:cc:d3:54:
7e:b7:f0:bb:5f:1d:ee:9c:93:41:a1:f9:7b:cd:b5:
70:88:ca:c2:c8:97:f2:3a:7f:e4:ac:1b:f3:f0:58:
00:c3:35:78:0c:9b:06:ed:7d:62:44:18:03:e8:82:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:12:09:DC:7B:CC:8A:72:D9:32:0F:80:60:ED:79:0C:D2:A2:75:DB
X509v3 Authority Key Identifier:
keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.232.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:17:44:8f:59:f3:ba:d2:46:8f:30:1e:c0:31:1b:a0:62:c9:
7a:f6:52:b1:74:5d:da:ff:9a:7d:a9:7e:38:58:fc:8a:0b:9a:
34:7e:eb:d8:59:fa:98:eb:43:10:2a:ef:68:e2:cf:94:8a:b2:
eb:97:1c:4a:bd:55:bb:1e:8c:2a:27:fd:db:d8:9b:81:cb:73:
a1:ba:f9:ab:94:3b:da:4a:ac:f6:67:cb:a0:5b:2e:82:29:a9:
3b:da:85:ea:fd:53:3b:cb:54:5e:95:aa:dd:31:c0:22:22:b0:
68:e6:46:ac:5c:3d:9b:73:d0:7f:8e:5e:7f:76:ca:b3:f4:c6:
7f:d0:fb:e1:82:23:c2:35:e3:e5:b0:49:fe:9f:eb:ab:74:7d:
e9:2c:68:d2:91:1c:6b:26:9a:87:b1:24:b5:66:f3:7f:f7:b6:
eb:c0:cb:b1:a0:ca:6e:01:b8:9e:04:86:41:10:76:a4:ca:cf:
a0:18:43:af:a0:f9:c4:2a:cf:58:9f:fa:45:03:64:7a:77:60:
95:84:9b:4c:dd:ba:91:41:fd:31:d1:a4:79:be:8e:5d:46:9a:
a8:e8:9f:de:57:ea:bf:d0:77:b3:7f:a3:fa:36:6d:0c:9a:4f:
11:1d:c0:6c:13:10:63:6a:4a:ac:91:3a:ab:d3:d6:8f:fc:b6:
a6:c1:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:33 2025 by rpki-client