Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/95CAE87C6BF311EDA6D4C167C4F9AE02.roa
File: 95CAE87C6BF311EDA6D4C167C4F9AE02.roa (raw, json)
Hash identifier: 3EzXcKLqkf+yvu5XSnwelAKqEi6m9pFTGpMryRUvc1c=
Subject key identifier: DD:BB:A4:E0:52:16:7A:80:63:E5:2A:5E:34:70:58:35:71:8B:35:DE
Certificate issuer: /CN=A9162439/serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F
Certificate serial: 074A
Authority key identifier: 4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/95CAE87C6BF311EDA6D4C167C4F9AE02.roa
Signing time: Sat 26 Oct 2024 21:32:31 +0000
ROA not before: Sat 26 Oct 2024 21:32:31 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 141225
IP address blocks: 103.156.196.0/23 maxlen: 24
2001:df4:f480::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1866 (0x74a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162439/serialNumber=4AF40F4378A2E98BEE6C784D8BDB9E82EDB66C9F
Validity
Not Before: Oct 26 21:32:31 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671d5fee-fe26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:27:9e:bc:b0:5f:4d:00:f5:1b:6c:c6:1f:
fc:d8:c6:6f:8b:2b:70:fd:15:d7:49:c9:94:27:92:
c5:1f:3d:1f:95:5e:df:4c:15:7e:4d:5f:aa:ab:4b:
a9:8f:88:19:9c:7d:d7:5f:90:ea:92:a8:4a:15:0d:
6d:06:bd:df:5b:b5:18:36:c0:b1:d3:eb:94:6b:b8:
ee:e2:a0:81:42:23:f6:d4:cc:13:d3:96:b7:47:41:
3c:5f:aa:1e:29:aa:bc:80:11:6e:aa:d1:af:5b:a8:
7f:5d:86:4e:f7:bc:d3:c3:d7:60:7e:bf:f8:0c:7f:
70:60:dc:63:cd:0d:19:f9:1d:e0:34:47:99:5f:c3:
87:8f:72:89:6b:b8:72:b8:9e:ed:08:50:80:90:74:
d5:2d:4b:40:98:bb:d0:76:0b:84:57:a2:29:83:29:
e5:c0:b4:5c:f3:b6:b7:fb:17:7c:e7:a9:03:39:0c:
a3:0e:ab:10:9f:5f:e6:35:2e:c9:e3:61:26:c0:fe:
2d:ad:b6:5e:54:94:3c:f1:60:dd:0c:ec:2b:72:15:
b6:db:d2:3b:a0:30:bc:bb:d1:2d:02:ca:4b:d0:aa:
bf:90:92:15:88:2b:1e:71:f4:38:fd:4f:71:0d:ed:
79:5b:99:19:ec:4d:d6:7d:25:90:ea:10:74:a0:27:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BB:A4:E0:52:16:7A:80:63:E5:2A:5E:34:70:58:35:71:8B:35:DE
X509v3 Authority Key Identifier:
keyid:4A:F4:0F:43:78:A2:E9:8B:EE:6C:78:4D:8B:DB:9E:82:ED:B6:6C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/SvQPQ3ii6YvubHhNi9uegu22bJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SvQPQ3ii6YvubHhNi9uegu22bJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162439/30D9B77A02E311EB86D28736C4F9AE02/95CAE87C6BF311EDA6D4C167C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.196.0/23
IPv6:
2001:df4:f480::/47
Signature Algorithm: sha256WithRSAEncryption
18:25:7b:45:52:f2:08:4d:f7:4d:b9:23:7e:d3:cd:ff:69:17:
d6:d0:6e:9e:96:ff:b4:11:74:e2:6c:1a:25:1b:b9:eb:e3:ce:
0f:d8:4a:90:6d:4e:83:c2:05:67:fd:16:12:4f:7a:7c:83:4f:
fd:ff:84:58:79:12:27:0f:91:a9:3f:e4:6e:40:3c:a8:c9:14:
d2:12:d6:13:aa:2c:da:1d:c9:aa:98:77:7a:36:aa:f4:62:d0:
63:1c:c3:be:64:e6:3d:7f:2b:18:9c:3c:f4:c6:84:94:ab:35:
ed:96:31:ea:cd:c6:52:9b:fd:ea:60:ef:d1:0d:1c:7b:c3:c4:
33:08:f2:ac:fb:45:c0:be:7f:97:04:ab:fc:0d:0f:53:47:53:
58:93:61:8b:5f:49:9e:df:4e:39:fa:aa:c8:0e:59:e5:72:26:
23:a8:eb:b0:46:23:e6:37:ee:c3:30:cd:82:bf:4c:58:99:c4:
e4:ea:1a:7d:d6:3b:9e:0a:1f:49:30:58:e2:50:0c:39:94:8f:
9d:12:cb:04:27:bb:f1:8b:eb:e8:65:c3:d6:7c:74:59:59:2b:
64:c7:f7:c1:9c:69:c4:04:c0:cb:e2:d9:21:64:8f:b2:7e:70:
23:be:f8:97:5d:12:66:da:1d:d4:03:52:ea:6d:46:69:fe:ed:
07:38:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:58:56 2025 by rpki-client