Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/B92D2816064311EAAFD3B416C4F9AE02.roa
File: B92D2816064311EAAFD3B416C4F9AE02.roa (raw, json)
Hash identifier: snskZTPzgdK1oFEckPC5HgyDQRzXftf0PJQ8L4j0QcQ=
Subject key identifier: D0:FF:90:F6:F2:58:FD:3C:DF:D2:3A:56:84:DE:7E:77:25:E1:00:19
Certificate issuer: /CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E
Certificate serial: 33DC
Authority key identifier: DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/B92D2816064311EAAFD3B416C4F9AE02.roa
Signing time: Fri 14 Jun 2024 16:11:30 +0000
ROA not before: Fri 14 Jun 2024 16:11:30 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 58615
IP address blocks: 103.9.181.0/24 maxlen: 24
103.12.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13276 (0x33dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E
Validity
Not Before: Jun 14 16:11:30 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=666c6bb2-f6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:79:76:3f:21:67:26:83:45:cf:90:93:53:d9:
39:bf:50:ef:a1:ca:be:e7:9b:c4:15:f5:fb:ca:06:
ea:56:f4:ee:a0:e9:2a:11:4a:0d:1f:30:26:0e:ca:
27:3e:cd:c0:f3:c2:91:6b:c0:6d:3a:0c:b9:c6:b8:
82:2f:e4:1e:8a:26:7b:00:0c:92:ef:79:24:3a:bb:
7e:04:d0:68:71:72:0b:44:f9:a0:75:e0:07:fd:c1:
64:4b:54:c7:7f:17:c5:6f:83:1c:ac:16:85:0d:af:
9d:70:1f:f6:f8:a3:a5:d4:7b:0a:00:0f:18:a6:ac:
8c:4c:ea:2c:57:3a:88:f7:4b:f4:3b:42:61:96:ef:
f4:68:c1:b2:bd:3a:4a:fc:43:3d:b4:2c:10:8b:e5:
cb:21:63:00:e4:92:6c:98:a7:84:26:74:ce:14:31:
55:9a:83:8e:52:1c:2f:d0:9b:c1:1f:6e:14:0f:83:
9c:51:65:e9:e2:4a:10:6c:80:3a:32:70:bd:da:4f:
f0:f1:7c:75:8e:3b:f6:14:81:44:4f:bc:9e:f3:5d:
b6:33:88:7f:dd:78:e9:02:3a:5b:c3:5e:9c:91:e5:
cf:0e:ef:3c:66:d3:a3:59:1d:b5:ab:a4:ec:f0:3e:
ef:7a:06:ca:ac:de:68:ab:73:a1:8f:c7:f3:3d:7e:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FF:90:F6:F2:58:FD:3C:DF:D2:3A:56:84:DE:7E:77:25:E1:00:19
X509v3 Authority Key Identifier:
keyid:DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/B92D2816064311EAAFD3B416C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.181.0/24
103.12.82.0/23
Signature Algorithm: sha256WithRSAEncryption
69:c2:c1:e2:5d:83:47:b7:c9:c0:fd:f2:b3:7a:6e:b6:da:0d:
4b:91:27:b9:22:ee:39:2b:aa:7c:cf:17:49:45:61:d4:9a:a4:
aa:e4:86:a0:00:37:56:78:25:38:23:ae:73:26:f3:a6:7d:3e:
e9:db:5f:56:76:0e:ab:30:3a:15:79:9c:d2:6b:0e:67:6a:51:
ea:e7:3e:3d:ce:4c:98:c3:7b:32:f2:59:cb:f3:5e:3e:d6:09:
75:bf:ab:ca:44:4f:a6:e8:b9:d0:6e:c3:79:bf:f5:0f:12:eb:
aa:95:9e:67:2d:b2:14:c8:eb:59:c2:12:9c:bf:24:32:8a:f0:
14:19:93:e7:c9:55:66:cd:30:52:2d:a1:94:20:86:7b:81:17:
3b:15:db:6c:a0:29:c9:82:52:b8:cc:8e:36:c8:aa:83:fe:0a:
14:6e:5b:e0:ac:91:bb:38:1e:09:b3:b8:96:ba:82:2b:40:96:
5c:93:b3:cf:9a:dc:38:6b:61:10:ff:a5:47:ac:8a:2e:3a:c4:
22:fe:ba:94:31:5a:16:6f:de:e3:a7:21:3f:29:1c:1b:be:d6:
01:04:d4:c8:5d:e7:ac:e1:86:3e:1a:e2:71:40:be:13:5b:ce:
bf:f9:d5:dd:74:4f:9b:4f:9a:8c:b1:d3:ae:3c:83:f0:7f:bb:
fa:1b:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:54:16 2025 by rpki-client