Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/5C9BC9D045C311EA9DE6F237C4F9AE02.roa
File: 5C9BC9D045C311EA9DE6F237C4F9AE02.roa (raw, json)
Hash identifier: ZtnYKrh+yDnEIQelTNQoTzDHev59ss72beEWQRcR3+8=
Subject key identifier: 1E:61:4A:53:83:F5:E4:C9:C8:7C:03:2E:52:5A:9B:36:75:FB:0C:55
Certificate issuer: /CN=A9171A26/serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Certificate serial: 0A90
Authority key identifier: D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/5C9BC9D045C311EA9DE6F237C4F9AE02.roa
Signing time: Mon 28 Oct 2024 19:49:57 +0000
ROA not before: Mon 28 Oct 2024 19:49:57 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 138198
IP address blocks: 103.122.28.0/22 maxlen: 22
103.122.28.0/23 maxlen: 23
103.122.28.0/24 maxlen: 24
103.122.29.0/24 maxlen: 24
103.122.30.0/23 maxlen: 23
103.122.30.0/24 maxlen: 24
103.122.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2704 (0xa90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A26/serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Validity
Not Before: Oct 28 19:49:57 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=671feae5-1da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ca:2f:06:ca:8f:05:5d:9b:52:5d:f1:cd:bf:
d7:05:6e:94:61:d8:e4:2b:ef:75:4e:72:a6:ce:0c:
04:0d:1d:c6:4d:5a:bc:1f:7f:56:dd:08:f5:d8:b9:
86:dd:b8:1f:1f:d3:24:74:cb:08:a2:46:fb:4e:3d:
e8:0a:49:0b:80:28:7a:38:96:09:d8:dc:60:87:87:
75:74:10:10:97:b9:ed:bc:1c:49:d2:33:13:b9:75:
5e:a2:94:be:e7:26:c6:7f:c4:56:18:7a:f7:96:d7:
2b:2e:e5:08:d7:8d:d2:0c:d1:c1:ec:55:09:34:4c:
a8:3e:54:ba:14:08:43:41:89:e3:46:0a:64:de:02:
47:2b:42:b0:71:36:76:11:b4:9a:ce:82:6e:61:73:
0b:04:83:09:d0:c3:9d:96:8e:c2:b7:05:5e:5b:ea:
ad:71:13:ce:fb:f6:2e:7b:8d:49:ca:43:9b:24:b8:
80:60:2d:e2:ea:b6:76:97:31:b9:02:98:a5:7b:52:
e2:c8:58:10:a1:6e:06:3e:54:c2:1a:f5:36:e1:be:
06:5e:a2:c0:5b:24:6c:3a:40:d3:70:7a:03:03:c2:
eb:99:da:43:1b:ac:7d:f7:c2:24:4c:e6:c6:4a:ae:
5f:28:ff:59:dd:06:74:97:ea:41:5a:5f:20:e5:3a:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:4A:53:83:F5:E4:C9:C8:7C:03:2E:52:5A:9B:36:75:FB:0C:55
X509v3 Authority Key Identifier:
keyid:D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/5C9BC9D045C311EA9DE6F237C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:6c:c4:7e:d5:4c:56:17:eb:fd:b8:39:fb:ae:7b:fb:c4:79:
61:38:07:ba:47:ff:e3:92:ba:ac:51:99:b3:0d:b4:ec:46:d1:
ab:3a:5c:20:6d:1c:73:33:8d:63:6f:5e:5d:0e:fa:f9:70:4f:
cb:1d:5d:16:41:d9:69:16:2c:87:0a:54:05:af:43:1f:74:2b:
9b:0b:48:11:81:58:1f:db:cb:db:7f:db:12:7f:c8:38:b4:81:
80:58:ab:87:e5:a9:2c:12:53:aa:03:34:34:d8:d5:48:48:0f:
22:d6:b8:48:cd:01:72:0a:49:fe:dc:b8:be:c9:12:ba:4a:94:
ce:a1:d8:00:9c:aa:5e:10:25:cd:88:33:16:aa:3c:2b:d8:e8:
6e:cf:32:bf:b2:e7:e3:e3:41:19:6e:46:bc:ae:84:24:e0:3f:
63:9f:92:e1:df:56:af:2b:b9:03:73:cc:96:ad:a0:34:40:a2:
ce:2e:78:c0:d9:a1:87:51:d9:8a:9e:cd:e9:bd:0a:7d:30:01:
b6:b9:68:85:1b:cd:0f:b0:ac:15:8d:f1:6f:21:06:19:3d:3f:
b7:1d:ae:83:7e:d7:5c:23:8f:5e:44:3f:5b:92:53:46:b2:ec:
ba:bf:8c:a3:1b:97:ca:4a:ed:e5:c4:42:d5:95:9b:db:ad:55:
1d:90:c9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:52:17 2025 by rpki-client