Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/40F782C8B4AA11EEB330C137C4F9AE02.roa
File: 40F782C8B4AA11EEB330C137C4F9AE02.roa (raw, json)
Hash identifier: 6omCuuVUgdbnOuuOFxfXDIcF+rrSXl7KykbR3GM1b/w=
Subject key identifier: FE:BB:DA:D1:9C:9E:C0:A4:40:13:65:42:4B:E8:22:1B:44:0C:68:D0
Certificate issuer: /CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
Certificate serial: 7B
Authority key identifier: CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/40F782C8B4AA11EEB330C137C4F9AE02.roa
Signing time: Tue 03 Sep 2024 07:19:32 +0000
ROA not before: Tue 03 Sep 2024 07:19:32 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131296
IP address blocks: 103.68.228.0/22 maxlen: 24
180.222.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148526/serialNumber=CAE90F46C221D00B2DA0807AD4C4B06503374344
Validity
Not Before: Sep 3 07:19:32 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d6b884-1c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:ce:39:16:c7:27:47:95:49:99:7d:3a:4b:
a3:7e:87:c6:f5:40:13:40:1a:a8:8a:ef:06:f5:ad:
af:08:31:b3:ba:00:a4:d0:04:46:72:70:ac:32:44:
b4:58:d3:6e:41:57:64:7e:27:05:04:d7:8e:36:6e:
00:59:46:05:58:e5:64:20:41:5c:27:ee:77:4b:a4:
a4:e6:08:c8:db:f5:c5:1a:2e:17:17:2f:30:c7:14:
18:d5:8b:b3:81:24:2a:27:55:c9:3a:1e:42:45:3a:
ae:b3:e2:9e:5b:5e:a2:5e:3e:16:32:01:5b:9e:a4:
14:d8:d9:40:b1:72:51:d7:d9:f4:86:be:d0:df:b7:
cd:74:66:81:d8:df:6e:a3:17:b3:d2:e3:bb:ea:9b:
80:5a:a3:a7:45:8f:25:77:8c:c0:14:66:62:69:0f:
c8:77:b2:c4:4e:9f:23:b4:e6:3d:19:49:95:b3:42:
da:81:3a:a2:9a:1f:2f:91:0b:1c:81:76:5b:9e:56:
3f:d5:40:96:84:07:be:f2:4d:bb:55:5c:ed:0d:d1:
67:0d:92:8c:b0:f1:4e:cf:25:49:ff:d8:02:91:f4:
0e:97:79:4f:23:c5:ed:1d:cf:e5:d6:cc:a5:16:f7:
3c:2e:dc:b0:8e:ca:80:88:ca:26:cc:44:0c:28:56:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:DA:D1:9C:9E:C0:A4:40:13:65:42:4B:E8:22:1B:44:0C:68:D0
X509v3 Authority Key Identifier:
keyid:CA:E9:0F:46:C2:21:D0:0B:2D:A0:80:7A:D4:C4:B0:65:03:37:43:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/yukPRsIh0AstoIB61MSwZQM3Q0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yukPRsIh0AstoIB61MSwZQM3Q0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148526/C4C6D046B44A11EE90D46F0CC4F9AE02/40F782C8B4AA11EEB330C137C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.228.0/22
180.222.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:c5:57:d8:c5:50:4d:a6:80:4e:13:5f:a4:9d:d6:89:f7:88:
87:cf:7e:d6:ff:9a:6c:cd:50:a3:7d:e1:66:f6:93:a5:40:a0:
9d:02:f7:da:e3:20:9f:7b:1a:85:0f:c8:fb:4a:6c:3b:3e:62:
22:c5:e0:99:d2:1c:88:10:53:a7:94:35:64:99:2d:3b:a0:65:
8d:0c:d2:24:f9:c2:ba:bd:9b:a6:89:d5:1a:dc:41:dd:c4:42:
db:76:e1:9d:1f:bc:f0:5a:15:df:0b:cd:f2:63:ed:90:7e:44:
1c:47:2b:82:5a:f8:85:e5:db:14:4b:17:e7:67:ce:1a:b8:e3:
4c:1a:fb:1c:8a:78:af:14:d8:5b:fc:f8:9d:79:65:03:e4:7f:
7d:46:36:4b:ab:78:c5:d8:ba:a0:10:da:db:9b:6e:fe:73:be:
e0:bc:d1:6d:f3:db:5b:ea:fb:6e:3a:82:0a:43:ce:0d:cf:97:
fe:7d:fe:52:25:25:48:1d:07:fe:07:fb:2e:ab:09:2c:88:06:
ea:6b:d9:93:1d:0c:b3:ba:7e:36:c6:d6:e0:10:57:2a:41:39:
d0:ae:3c:05:3c:54:44:3e:43:61:d7:9c:40:7e:7b:a5:ab:eb:
a3:79:50:01:a2:ed:16:62:65:67:8f:21:07:4d:0f:95:73:1f:
5d:67:38:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:45 2025 by rpki-client