Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/33CDE41E5A4711EFA5ED8487C4F9AE02.roa
File: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (raw, json)
Hash identifier: E+f0SdnPuYjXdcqeEk9/03VnnRNadS7Ituz6hla4mX0=
Subject key identifier: B1:65:6D:68:32:25:3F:FE:DA:65:11:0C:65:5A:B6:5A:22:7A:4C:2C
Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62
Certificate serial: 08A1
Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/33CDE41E5A4711EFA5ED8487C4F9AE02.roa
Signing time: Wed 14 Aug 2024 14:12:13 +0000
ROA not before: Wed 14 Aug 2024 14:12:13 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 38084
IP address blocks: 45.113.36.0/22 maxlen: 24
103.9.60.0/22 maxlen: 24
2402:6c40::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209 (0x8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62
Validity
Not Before: Aug 14 14:12:13 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66bcbb3d-1e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2b:71:77:97:cf:6e:e3:f5:88:29:68:1d:43:
00:eb:dd:05:d5:66:f9:1d:8d:78:8f:d5:a6:b5:64:
e9:b0:41:bc:58:46:04:94:89:85:c1:9e:66:c9:a6:
e1:75:59:9f:7e:66:e7:58:42:03:fc:7c:82:0d:0b:
61:4b:8e:c8:a4:e0:df:cc:fc:89:96:ea:a2:fb:1c:
35:f6:44:1b:0c:cf:90:6a:68:d2:ea:af:d1:c6:a5:
af:7c:8d:89:68:26:d8:04:0d:d9:36:3e:57:30:44:
c6:ea:5d:45:da:fb:f0:a8:9c:66:c7:30:4d:31:1f:
5a:af:39:a6:6b:9a:e0:46:70:81:e0:1e:16:7c:d5:
09:df:8c:3e:8b:35:9f:1b:b4:d5:dc:31:c9:45:ff:
fc:49:d1:8a:c5:16:e7:e4:05:f9:39:bb:c5:ea:8a:
85:1e:76:9a:4d:64:f2:9f:fb:af:18:93:8c:95:55:
7e:a1:f6:ae:04:12:98:ff:94:a9:bd:4f:67:19:e6:
34:11:ad:af:fd:89:ef:52:75:6f:e8:5c:b6:e5:cb:
f9:e0:55:ed:1c:5f:ca:9e:0a:a5:d0:e1:8e:48:c4:
5a:07:27:a7:7a:8b:32:e3:e5:22:32:6c:63:8a:15:
19:43:3e:33:1e:22:b7:c4:ed:0b:13:04:4f:69:14:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:6D:68:32:25:3F:FE:DA:65:11:0C:65:5A:B6:5A:22:7A:4C:2C
X509v3 Authority Key Identifier:
keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/33CDE41E5A4711EFA5ED8487C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.36.0/22
103.9.60.0/22
IPv6:
2402:6c40::/32
Signature Algorithm: sha256WithRSAEncryption
4b:c2:31:13:e4:0c:e3:ea:bd:9d:6a:00:cd:9d:73:91:6a:4d:
b7:58:e9:d2:bf:52:11:0c:ec:f6:da:8e:78:51:f2:07:fb:12:
35:a1:99:f3:1c:af:11:ac:b6:21:56:35:75:fe:62:a0:3f:99:
22:91:fb:f4:84:de:6f:a7:0c:93:34:76:4d:08:e3:7e:8d:bf:
cc:b0:bc:14:94:c7:82:94:a4:fa:c3:15:8d:42:ad:2a:f1:e9:
ea:ff:c2:5f:28:23:cb:42:ba:7b:a2:9e:5f:77:a2:2a:6f:21:
81:82:36:74:fd:aa:e4:d9:6f:9f:6c:c5:a6:63:48:fa:aa:1c:
20:a8:f1:86:d3:52:87:ae:d5:cb:75:8f:a5:53:2e:88:4b:d9:
c2:fe:3f:a1:19:51:08:f1:62:ae:6d:2a:b1:8c:91:b1:5f:77:
c4:35:5c:80:cf:1a:8c:94:7b:28:f2:49:1b:45:9d:d6:d7:eb:
4b:7f:38:f8:d9:b1:b2:09:0c:10:e6:64:36:27:fd:c3:d3:5a:
10:3b:4b:71:ae:b0:98:14:c9:ef:4e:f8:8c:7f:8a:3c:c1:17:
6e:11:c1:30:1e:07:e0:1e:ea:b2:20:4f:5e:08:08:ac:63:19:
4a:93:21:39:07:e7:3d:c0:70:ec:c4:1e:dc:00:7b:81:af:66:
bb:52:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:32:33 2025 by rpki-client