Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/E905CD5808F111EA8E4F1D51C4F9AE02.roa
File: E905CD5808F111EA8E4F1D51C4F9AE02.roa (raw, json)
Hash identifier: Ykh/ajdiEQ6UqJC1nIow2mRMlvxbjVdtujI4Th0ysiU=
Subject key identifier: D9:03:9F:04:76:49:36:22:1C:44:34:11:BE:7C:56:97:6C:2D:BD:B3
Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
Certificate serial: 0B7F
Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/E905CD5808F111EA8E4F1D51C4F9AE02.roa
Signing time: Thu 16 May 2024 19:58:26 +0000
ROA not before: Thu 16 May 2024 19:58:26 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 137467
IP address blocks: 103.244.184.0/22 maxlen: 22
103.244.184.0/24 maxlen: 24
103.244.185.0/24 maxlen: 24
103.244.186.0/24 maxlen: 24
103.244.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2943 (0xb7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
Validity
Not Before: May 16 19:58:26 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66466562-8af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:33:48:80:a6:d2:67:65:5a:7d:bd:3d:2d:
06:9f:da:4a:95:04:2d:bb:9c:31:2e:da:12:9a:a7:
f3:0b:6d:e1:e0:ca:92:34:65:af:c9:6b:54:15:2f:
de:43:14:2e:4b:68:5e:1a:73:24:2b:bc:a9:2a:9c:
76:10:98:c4:35:81:8f:ac:7f:0c:88:92:59:6e:21:
5e:67:b5:f6:dc:78:9d:21:13:b6:40:53:80:8b:4e:
bf:62:38:c3:11:ab:d6:7c:7a:98:fc:2b:53:4a:76:
7b:4a:b6:95:ee:c3:d2:b7:29:50:2e:cb:4e:8e:a0:
8f:bc:f4:5e:02:fb:15:05:6f:ed:53:82:d7:e0:af:
7e:ea:f0:85:2c:3b:e1:3b:38:54:f3:e8:c6:0b:d0:
4b:17:3b:82:78:9a:ed:f1:b9:9a:51:74:5e:7d:7b:
23:c6:71:97:82:18:7d:1a:38:de:22:b0:e4:5f:d6:
e2:3a:4d:e0:95:1d:63:dc:56:b9:a4:f6:70:ae:93:
c0:22:c9:9f:db:44:ac:7e:77:5f:4d:03:58:2e:1b:
a2:68:59:d2:85:4c:e5:20:9d:4c:22:4f:30:cc:2e:
78:dc:1c:9f:14:07:6a:eb:d1:3b:b5:07:f2:15:9d:
12:b0:29:40:b6:de:b2:c8:9f:ce:08:1f:e3:15:9a:
5f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:03:9F:04:76:49:36:22:1C:44:34:11:BE:7C:56:97:6C:2D:BD:B3
X509v3 Authority Key Identifier:
keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/E905CD5808F111EA8E4F1D51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.184.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:19:96:82:1c:17:b1:a2:a0:13:fd:b8:2a:fc:84:31:5e:9e:
ca:c0:83:65:6d:cb:56:2d:72:c7:25:b2:98:67:39:76:c7:8a:
2d:4a:e5:84:da:ff:77:90:e9:15:4f:23:c3:55:b9:b1:08:f8:
66:63:75:a3:63:c2:ac:0e:00:48:30:fc:73:26:bf:15:a0:48:
19:4f:2f:59:46:a4:16:dd:4e:fb:7d:81:7c:db:ad:af:aa:07:
7f:ca:86:52:0a:e6:9d:85:27:9b:e9:4b:93:bd:97:60:d4:33:
86:a0:eb:79:2c:27:6c:02:93:30:14:6c:6c:e9:a5:dd:53:ae:
71:bf:0e:a8:4a:6c:6e:48:f5:47:18:72:0f:f1:3a:75:a4:dd:
df:8f:6b:e4:8b:7c:be:28:a8:6f:0e:7f:6a:fc:19:2f:99:fe:
ff:10:8f:af:65:77:81:9c:45:6e:2e:6b:04:64:e9:c5:63:d2:
69:65:73:51:ef:65:bc:2e:78:bb:d8:ee:9a:18:46:ed:eb:78:
9a:2c:47:ab:62:40:63:b3:a4:ae:ce:a5:3d:f7:4c:fe:5b:ba:
5c:7f:3c:89:0a:82:78:23:41:3d:a9:13:2c:fa:73:00:a4:4a:
ee:47:a3:65:83:41:a7:c7:af:21:71:75:12:1f:9d:2b:97:0b:
9b:2e:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:17:52 2025 by rpki-client