Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C3A77BE8391F11EFBFAB6D66C4F9AE02.roa
File: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (raw, json)
Hash identifier: /2tjWIi0u7oNCgmiDrZKKU8I6bZFjH4t5+cXs2Pyels=
Subject key identifier: 92:D7:45:3B:BE:A3:D2:E2:39:07:5D:F9:FD:58:5C:9A:D6:6D:65:A5
Certificate issuer: /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial: 3A
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C3A77BE8391F11EFBFAB6D66C4F9AE02.roa
Signing time: Wed 03 Jul 2024 09:36:46 +0000
ROA not before: Wed 03 Jul 2024 09:36:46 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 16509
IP address blocks: 103.10.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Validity
Not Before: Jul 3 09:36:46 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66851bae-78ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:99:61:47:d1:33:0a:0b:0c:6b:2e:fa:37:
b6:c5:3d:92:da:8f:a6:7f:2c:69:5c:5b:1c:3d:c6:
22:a0:c3:9f:9d:60:ba:0c:a7:5a:7d:3b:d7:0a:28:
14:47:89:06:67:3c:98:b8:e2:cd:e8:95:4b:0c:90:
75:dd:7b:b3:fa:99:74:4c:a8:54:1a:64:d7:0b:42:
ca:45:d3:53:e0:81:7e:1e:fb:93:9f:aa:55:86:39:
3e:3a:6f:2f:b8:c3:31:90:48:ad:8c:d3:b7:78:bb:
55:f2:2b:ee:58:d1:e6:49:97:f4:91:1a:7a:2c:11:
75:73:a7:6f:2c:60:d9:34:05:a3:2a:56:97:8b:32:
ce:9f:5e:a9:26:ae:2e:5a:ba:c0:de:07:54:3d:a6:
08:b8:73:e6:97:ce:1e:50:ef:12:7e:b0:a2:71:04:
a3:f5:a6:48:f2:69:74:c2:e4:55:46:ad:7d:66:bc:
a1:55:ef:06:be:9b:ea:60:57:e0:3b:a5:e9:b5:a7:
67:f4:60:45:ab:0f:dc:64:47:f3:96:3c:af:72:28:
4d:7d:ea:28:2e:59:94:45:12:f1:06:b5:2d:28:f5:
7e:4f:cd:57:4c:16:30:93:62:a3:bb:96:45:0a:a0:
82:05:78:ec:95:ae:8e:89:3f:fc:2a:58:5b:2c:c0:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D7:45:3B:BE:A3:D2:E2:39:07:5D:F9:FD:58:5C:9A:D6:6D:65:A5
X509v3 Authority Key Identifier:
keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/C3A77BE8391F11EFBFAB6D66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.9.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9f:5e:40:d1:b0:95:d5:e0:8c:59:66:56:10:5f:b0:a4:1e:
f8:df:71:ca:ab:37:89:13:3c:09:9e:92:70:03:44:ed:68:f3:
7b:9e:a4:7e:49:4b:8f:d9:af:51:b0:f0:a3:48:5d:41:7f:33:
e4:e3:92:37:14:8b:58:a9:e9:f8:34:c6:f6:b8:d6:aa:ad:d1:
51:9d:a1:80:88:00:0b:87:0b:81:94:a8:4e:5a:31:1e:e8:8e:
94:dc:ee:f9:22:11:56:a0:6c:62:70:5e:3b:35:52:6f:be:98:
8a:c0:92:27:f1:a8:fa:fd:68:cc:a8:31:fa:be:55:11:5e:2d:
5a:4d:72:31:bb:da:48:1d:79:68:6f:24:c6:47:55:d9:ca:09:
bb:ff:3f:ec:59:3c:35:a5:62:6a:29:65:dd:9b:b9:78:95:cc:
62:da:25:cb:25:75:58:d5:0b:91:8a:bc:6a:f7:0f:d9:1c:52:
74:7f:7c:eb:4e:59:30:c1:5b:6f:08:2d:34:7e:27:c9:2b:04:
32:c8:93:9f:33:75:69:c6:86:22:fb:6f:1e:0c:10:3b:59:92:
78:d8:24:ad:16:e4:bd:68:b7:89:a0:26:59:43:59:8f:0c:d3:
29:48:3a:21:00:dc:a2:e7:38:1c:08:71:63:5d:2c:ba:ba:93:
a7:d1:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:49 2025 by rpki-client