Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/F2AB2F288FE011EDA9919C57C4F9AE02.roa
File: F2AB2F288FE011EDA9919C57C4F9AE02.roa (raw, json)
Hash identifier: j2B/1YBlPE46G5yeDHdnDnb9mxYWTsPXU0v9hB2F54Q=
Subject key identifier: F6:BA:C1:3D:2C:40:65:97:FE:90:70:56:04:AB:10:C6:48:54:90:32
Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
Certificate serial: EA
Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/F2AB2F288FE011EDA9919C57C4F9AE02.roa
Signing time: Mon 01 Apr 2024 06:38:35 +0000
ROA not before: Mon 01 Apr 2024 06:38:35 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 136174
IP address blocks: 103.122.158.0/24 maxlen: 24
103.122.159.0/24 maxlen: 24
103.209.52.0/24 maxlen: 24
103.209.53.0/24 maxlen: 24
2404:c040::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
Validity
Not Before: Apr 1 06:38:35 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660a566a-3140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:ef:a7:a7:cd:da:2b:f4:aa:17:c3:9f:ac:
8a:49:27:f1:13:d0:0b:3e:50:37:d6:6a:6c:3a:53:
99:b7:15:df:f3:35:04:85:f1:fd:ef:96:ff:77:45:
cf:7d:d2:85:f6:8d:89:91:e4:f4:57:17:ae:4b:5e:
ee:3d:74:03:15:99:7d:d0:97:9c:2e:71:ac:f0:8a:
91:f8:3a:dd:15:be:7d:5e:d9:1e:37:36:5f:41:10:
a1:40:da:f8:75:a2:e1:10:85:8e:77:05:27:e3:4c:
40:6f:bb:cb:2c:b1:e3:39:f2:d9:4d:e0:95:54:0e:
3e:97:1c:c6:ed:ff:03:9e:f0:7d:5c:44:69:dc:09:
6c:67:81:54:9b:17:09:8b:c7:de:fd:b6:3d:cd:5b:
1e:b9:60:4a:a9:8f:d9:bf:1b:61:de:cf:06:6c:af:
d3:59:bd:37:ae:a2:31:23:47:79:d1:82:e6:03:58:
0f:28:b8:42:a9:fb:39:20:e0:f4:d0:c3:11:20:32:
7d:d6:04:25:7b:2b:e5:8e:c1:1a:b0:16:b7:42:3b:
4f:54:b7:67:12:2e:66:db:5b:c3:fd:30:16:e7:27:
8b:58:f8:90:22:15:d1:03:e5:c2:36:14:2a:7b:2e:
b1:3d:94:76:8b:e1:8e:bc:c2:74:71:56:d8:45:f8:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BA:C1:3D:2C:40:65:97:FE:90:70:56:04:AB:10:C6:48:54:90:32
X509v3 Authority Key Identifier:
keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/F2AB2F288FE011EDA9919C57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.158.0/23
103.209.52.0/23
IPv6:
2404:c040::/32
Signature Algorithm: sha256WithRSAEncryption
6e:c4:12:86:73:bd:a0:54:3a:dc:bf:b1:a0:76:c2:dc:68:c9:
0c:d6:bf:46:2f:c8:97:91:5b:02:0a:48:d9:6d:8d:04:eb:b9:
5a:98:19:a3:49:40:d2:5f:d8:87:d9:3d:25:b5:e0:f2:38:55:
3f:7f:ce:8d:73:5d:c0:02:9a:23:c1:3c:a4:25:a7:96:30:7c:
21:6b:3a:d1:dc:66:8f:ef:d8:a9:01:74:8b:d1:ce:23:bd:6b:
4a:15:09:c0:66:f9:ba:5c:fb:3d:1c:d0:8b:fe:b3:d7:e6:36:
35:9f:a0:4d:83:06:1a:13:33:fc:6d:cc:5e:c9:59:97:86:f6:
1b:4d:55:74:ba:2f:b9:5b:d9:b1:08:81:68:f3:80:cf:c8:89:
d0:2d:df:71:e2:6c:8d:b1:14:85:82:91:4a:3d:dd:bd:1d:30:
2f:58:6f:d7:5b:7b:5a:e7:5c:ac:82:81:2b:0d:91:0a:b6:85:
0b:1c:7b:45:56:b3:0f:3a:f1:0e:23:45:4f:b5:f2:df:10:b0:
d0:d5:d2:7f:9c:b2:07:2a:ff:47:de:e4:0e:75:45:c3:a2:9c:
f9:91:8b:cb:35:d5:0e:90:48:e0:e3:e6:1a:6d:af:15:09:dd:
55:f8:e4:d5:1a:0b:e5:d9:20:26:cb:a8:e7:41:11:b8:ef:e1:
04:e6:05:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:04:18 2025 by rpki-client