Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/260D3330758A11EFAE7A8A39C4F9AE02.roa
File: 260D3330758A11EFAE7A8A39C4F9AE02.roa (raw, json)
Hash identifier: 8be0KD35jIvGdXDMYzDTqhbhRPMsZm5zv5unHRRc5ak=
Subject key identifier: 8C:3B:A1:99:C8:DE:02:1E:53:17:D1:63:CB:26:38:E1:44:36:7D:FD
Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial: 0384
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/260D3330758A11EFAE7A8A39C4F9AE02.roa
Signing time: Wed 09 Oct 2024 01:14:51 +0000
ROA not before: Wed 09 Oct 2024 01:14:51 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 136787
IP address blocks: 103.86.96.0/24 maxlen: 24
103.86.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Validity
Not Before: Oct 9 01:14:51 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6705d90b-3d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:0a:1e:1c:29:f3:ee:8c:d1:10:ec:b0:2a:
44:f2:fb:41:35:2f:b7:e2:e2:da:1f:94:bd:38:fb:
ef:35:08:81:e6:aa:8b:a4:37:31:5a:62:59:19:5c:
5c:50:ed:c7:7f:c3:3b:6b:73:6a:9a:19:27:95:cd:
1c:47:28:03:ea:dd:56:88:50:83:70:3f:a3:71:a2:
8c:af:31:33:32:ac:43:e3:58:aa:4d:7b:21:2c:4d:
e4:a6:f4:e0:36:fc:67:fc:ac:99:a8:1d:b8:e1:24:
b4:cb:8b:f4:e5:66:3c:a6:8f:40:9d:28:de:9a:43:
23:7a:ab:71:b6:fe:13:2d:05:de:a1:9a:85:60:1f:
10:72:4f:c1:06:67:03:c3:c5:3a:53:c5:21:81:a0:
55:a3:65:02:4c:76:67:c7:b4:c4:ed:f2:af:02:20:
0b:92:ca:27:ff:13:17:cf:70:49:5b:26:6e:3c:31:
fb:b8:de:3e:d8:8b:85:fb:10:41:84:d2:09:e9:9c:
98:88:b7:94:c3:1c:8e:7a:5b:80:85:7b:ce:8e:53:
0c:f6:f2:27:1f:c6:76:c9:5e:98:7a:51:df:7a:33:
dc:1f:25:bd:ed:89:76:2b:20:24:90:23:c7:10:41:
48:c0:ed:bf:7b:9e:0d:95:32:f4:d2:05:86:70:01:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:A1:99:C8:DE:02:1E:53:17:D1:63:CB:26:38:E1:44:36:7D:FD
X509v3 Authority Key Identifier:
keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/260D3330758A11EFAE7A8A39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.96.0/24
103.86.99.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9b:b8:81:e2:ea:9f:26:5a:e3:7b:22:97:0a:ff:45:42:63:
11:a8:b8:57:bb:5e:8b:a7:ee:84:ef:12:e7:32:04:12:eb:25:
b1:94:63:aa:f5:01:2c:34:0a:3b:9e:a8:ef:f0:20:2e:c6:fe:
64:97:a5:33:76:67:2c:cc:61:d5:eb:49:60:95:48:a6:64:89:
ca:22:22:a5:0d:78:b8:32:0f:eb:5d:75:ce:d1:d1:5c:29:2c:
bf:c7:41:54:03:fc:43:28:2a:97:76:e4:53:5d:18:43:c2:93:
9c:a5:63:eb:f2:45:da:76:53:e7:bf:e3:df:18:88:66:3c:47:
56:08:cf:86:4e:a7:98:72:b4:83:42:ea:f1:2f:18:39:6f:85:
56:3d:63:e2:f7:36:6b:a0:c5:19:05:ec:9c:7d:9f:4b:c5:14:
4c:94:7e:73:51:58:2c:da:72:06:98:45:ce:1b:07:df:6b:80:
70:ad:cb:99:c6:af:99:90:3e:66:3c:aa:fe:1a:97:a4:09:29:
40:e1:4a:3e:9b:92:2e:35:28:79:3e:10:ea:a6:72:bb:a3:7e:
d5:25:01:28:62:2d:1d:cc:9b:13:e9:9e:fc:d6:c9:c2:80:e5:
44:3b:3b:ae:9c:7a:96:fd:a9:3f:f7:b6:3f:37:18:98:e5:bf:
f9:b9:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:18 2025 by rpki-client