Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/C9819D5E705711EFBDEF9265C4F9AE02.roa
File: C9819D5E705711EFBDEF9265C4F9AE02.roa (raw, json)
Hash identifier: 1McoUaNADtVmxnwjUYo0/yr8ZNju9sl8ZAS30i7LT7Y=
Subject key identifier: 23:16:AC:23:B9:8A:BB:ED:D7:0F:F9:99:9D:1D:46:C0:6F:38:69:90
Certificate issuer: /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Certificate serial: E0
Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/C9819D5E705711EFBDEF9265C4F9AE02.roa
Signing time: Wed 11 Sep 2024 16:06:22 +0000
ROA not before: Wed 11 Sep 2024 16:06:22 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 17823
IP address blocks: 103.155.66.0/24 maxlen: 24
2001:df4:b880::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Validity
Not Before: Sep 11 16:06:22 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e1bffe-a81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:de:a5:60:63:f2:31:14:a3:3a:4f:7f:09:
65:43:50:8b:5f:66:ba:09:b9:33:7b:e3:c2:b3:09:
10:11:93:df:59:10:8f:9d:16:6c:c4:d7:b7:bd:02:
16:b3:bc:0f:a1:e2:c5:ef:50:75:e8:b1:20:42:b6:
ba:71:01:5d:f0:89:91:84:24:5c:14:f6:9a:c5:81:
63:82:58:ec:1c:5d:ec:da:87:a2:9e:07:52:43:5c:
fe:b8:9b:0a:0b:85:cb:f9:49:90:a8:e6:20:b7:35:
da:f7:e1:37:01:3e:32:64:fb:06:bf:a6:03:ea:25:
e8:1e:97:23:42:0b:f8:e7:07:fa:c7:cf:25:a2:ea:
b9:52:9e:89:6b:92:cf:5a:1f:da:b3:ff:aa:4d:bf:
80:ee:b2:bc:7a:10:17:70:df:d1:19:3e:72:43:4b:
b7:29:75:23:be:58:44:82:ca:51:a6:87:93:20:88:
82:37:73:b2:36:4d:3f:2e:1c:f2:72:51:c5:01:2e:
9f:67:d7:95:a1:ee:8c:cc:65:ca:06:79:a6:a4:e9:
6d:68:79:85:d6:8b:3f:38:ab:b0:fa:cb:28:5b:99:
fd:22:01:80:4b:2f:f6:c3:0c:6b:59:1c:4a:7f:11:
37:45:55:8e:66:4a:cf:c5:2f:bc:7c:19:a0:3c:7a:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:16:AC:23:B9:8A:BB:ED:D7:0F:F9:99:9D:1D:46:C0:6F:38:69:90
X509v3 Authority Key Identifier:
keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/C9819D5E705711EFBDEF9265C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.66.0/24
IPv6:
2001:df4:b880::/48
Signature Algorithm: sha256WithRSAEncryption
0d:ac:cb:f0:96:85:de:dd:4a:15:47:e7:d9:54:4b:75:bb:63:
1e:1e:d1:79:fe:93:b0:f7:cb:5b:57:00:cf:75:2b:99:c7:8e:
5f:6a:0a:8e:30:04:ce:bb:28:bc:25:ce:91:76:d2:0a:6c:37:
66:83:3c:2d:49:a5:ee:76:8a:6e:b1:f6:ec:4c:1c:42:4b:98:
d1:16:a2:25:90:66:c1:9f:ea:03:67:07:dd:07:c4:03:9f:b1:
92:18:26:c1:da:20:c7:1c:9a:ed:2e:27:b8:07:44:f7:0f:71:
23:79:d4:cb:d5:26:3a:d7:11:14:74:ac:fe:b3:ba:22:a1:19:
27:3d:c9:fb:1b:12:d8:03:04:75:7e:d1:07:72:8d:78:71:6e:
9d:b8:d8:2e:ab:b1:bd:25:23:cc:d6:20:aa:4f:3b:f0:2e:5e:
b8:9a:0c:8d:8b:05:07:15:61:55:86:e0:d1:b1:b4:35:ef:40:
65:ed:46:4a:ba:d1:e6:dc:43:6d:b2:c6:aa:bb:3c:62:7c:58:
0e:bc:89:4e:a7:82:70:34:ad:fc:3c:fe:f1:20:e2:35:db:d5:
0e:93:ca:07:f6:2d:f4:cd:6c:b2:a3:ce:40:dc:3c:e5:3d:31:
bc:18:85:21:e5:78:87:43:bc:fc:c7:fc:e5:0d:66:12:ff:0a:
12:89:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:15 2025 by rpki-client