Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa
File: ED31D84EC81D11EBA4C0E321C4F9AE02.roa (raw, json)
Hash identifier: jhR9QDlVyj8BS8+j4iE/uh7zPevk6Wzm1xP+iEk0Yvg=
Subject key identifier: 80:CB:99:BD:CE:40:3D:DF:13:7C:F5:58:32:06:22:31:40:D1:71:D4
Certificate issuer: /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
Certificate serial: 04E2
Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa
Signing time: Fri 05 Apr 2024 01:34:56 +0000
ROA not before: Fri 05 Apr 2024 01:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134693
IP address blocks: 103.164.162.0/23 maxlen: 24
2407:3d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
Validity
Not Before: Apr 5 01:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660f5540-b49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:ac:3f:d9:3f:24:ea:a3:a6:5c:97:82:b6:
54:2e:65:3f:0e:9a:90:bf:62:97:37:eb:9a:07:12:
0d:9e:29:8c:9e:fe:4c:f0:24:73:a4:47:34:82:d0:
70:74:71:be:33:fa:b0:50:f9:2d:fd:7b:e4:b0:7a:
90:da:e2:35:2c:02:5f:68:07:97:71:cc:ca:06:ad:
63:24:b7:c8:99:3f:09:53:a8:2d:b3:d6:b3:ac:6c:
e6:c7:35:ae:b9:0b:07:46:9a:d7:f9:39:a8:54:fc:
9a:bf:93:ee:eb:72:f3:ef:85:28:55:bd:97:e3:67:
5d:3c:46:85:04:00:ae:8a:aa:93:0d:d8:05:8b:ea:
be:ff:f1:64:3d:f7:20:03:05:be:fa:d5:a5:c2:e6:
1b:90:3e:90:76:a4:48:6f:1a:bc:94:34:03:3c:93:
5e:2b:57:21:66:a4:88:d8:79:f9:37:fc:50:59:62:
a4:46:b7:20:77:91:9f:13:5b:5d:f6:2e:9b:43:10:
97:e4:88:00:6f:ac:de:e6:7a:91:e4:fe:e0:c4:5d:
5f:50:77:34:93:19:0e:a5:3f:1f:70:6e:5d:b3:66:
e4:f2:56:77:5e:77:4c:39:15:92:51:0d:25:6c:a3:
a2:82:97:29:c8:f8:0f:3f:8a:82:f2:b6:1e:c1:db:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CB:99:BD:CE:40:3D:DF:13:7C:F5:58:32:06:22:31:40:D1:71:D4
X509v3 Authority Key Identifier:
keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/ED31D84EC81D11EBA4C0E321C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.164.162.0/23
IPv6:
2407:3d40::/32
Signature Algorithm: sha256WithRSAEncryption
3c:0a:33:60:46:cc:8b:ec:9d:dd:46:26:17:b3:fe:a3:d7:46:
6b:25:aa:15:33:3b:dc:05:7f:ef:a6:46:7e:ce:d1:8a:f6:d4:
a2:47:c7:17:2e:f6:54:c7:f0:36:7a:03:1b:60:72:44:9f:82:
d4:e3:c9:6f:f5:59:2d:ba:70:4f:89:d5:f4:23:6b:9e:65:7d:
86:82:93:0a:a9:0d:4a:36:17:56:bb:82:70:ba:ed:81:89:17:
8d:27:f7:56:4c:cb:59:25:fc:0e:84:d5:68:1b:dd:da:56:78:
84:2b:68:83:37:b4:ba:5f:34:d5:e5:19:14:53:db:52:e7:37:
7e:38:79:ee:58:9e:f9:c0:47:79:14:32:3d:49:93:4b:50:53:
2d:86:06:ef:e5:b4:1c:47:f2:0a:c8:f7:bc:d7:76:50:e8:5d:
98:a1:8a:db:2a:1d:e6:35:87:f0:07:04:ed:0d:83:bb:c7:1e:
fe:2a:60:2e:df:f3:4d:69:41:31:c5:1e:94:ef:ee:2f:18:14:
a9:c3:77:f3:1e:c7:17:76:67:7e:33:ad:4a:28:9a:a4:c7:73:
31:de:ba:6b:08:7a:58:fe:36:41:d7:c8:cf:b8:a4:62:7a:8b:
88:b1:ba:aa:28:18:40:e7:eb:6f:41:d3:a2:f3:d2:83:4e:b0:
20:f1:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:57 2025 by rpki-client