Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/9591475A4F6011EFAF26AF63C4F9AE02.roa
File: 9591475A4F6011EFAF26AF63C4F9AE02.roa (raw, json)
Hash identifier: jD0yN6uuFJ5mI/OZ4NsQia/Tm8YVXocqzyMVWBg9ukI=
Subject key identifier: D2:C0:01:08:37:4E:6C:48:A9:A3:BF:D0:48:2D:AD:4D:B4:B0:0E:B4
Certificate issuer: /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Certificate serial: 0BB0
Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/9591475A4F6011EFAF26AF63C4F9AE02.roa
Signing time: Wed 31 Jul 2024 17:16:12 +0000
ROA not before: Wed 31 Jul 2024 17:16:12 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 138614
IP address blocks: 103.134.168.0/24 maxlen: 24
103.134.169.0/24 maxlen: 24
103.134.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2992 (0xbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Validity
Not Before: Jul 31 17:16:12 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66aa715b-5143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:a9:8a:47:fc:cb:45:ed:32:a3:a5:dc:93:
27:33:88:94:ca:8b:80:f7:4e:98:c9:50:19:76:d3:
1d:6c:18:a1:e6:35:05:38:52:e6:9b:54:a0:a0:b6:
c7:bc:e4:16:06:c4:84:90:fc:73:67:a9:ac:e5:9b:
8a:53:9f:51:45:a9:12:9e:19:24:e6:a3:d3:9e:05:
90:f1:a8:f9:ad:ca:ef:79:96:d0:6b:fe:45:06:a4:
63:00:29:e3:40:81:66:98:6a:d6:04:fc:82:ca:44:
f5:37:be:73:4f:79:9f:1a:f2:54:90:29:26:e4:b5:
a1:ee:64:ff:12:bc:e1:42:84:09:ee:ad:9e:54:0b:
67:6f:10:df:23:9c:56:fc:a2:c7:22:63:a3:a8:ca:
4f:39:4b:00:20:6d:e1:44:4d:15:c5:66:52:09:b4:
08:60:6c:f4:74:97:80:84:3d:45:2d:e8:6b:c2:52:
f8:e4:4c:f6:85:0c:a9:72:5b:5e:5c:7a:c2:06:2e:
e5:67:fc:a6:a8:17:f9:88:3a:a6:a6:04:e1:23:91:
af:34:69:81:98:07:6f:5d:c8:1b:11:c6:bc:6f:f7:
27:7c:6d:8e:9e:23:38:1b:ed:dd:8a:04:ae:c8:98:
47:3c:01:6d:b4:ed:db:9a:f4:3a:a6:7c:33:a8:f8:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C0:01:08:37:4E:6C:48:A9:A3:BF:D0:48:2D:AD:4D:B4:B0:0E:B4
X509v3 Authority Key Identifier:
keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/9591475A4F6011EFAF26AF63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.168.0-103.134.170.255
Signature Algorithm: sha256WithRSAEncryption
27:74:50:cc:0a:04:fd:ab:53:bb:24:4d:43:f9:e5:d7:41:14:
f0:a7:5f:58:38:0b:53:64:81:c0:d1:e3:78:63:b5:6f:fb:6e:
ac:f4:bf:ee:05:e5:c4:21:78:74:3d:69:45:62:88:45:2c:ff:
67:d5:89:12:e6:7e:8b:44:da:6d:74:f1:4f:b0:d1:d5:39:59:
c2:d1:65:7e:9a:3d:7a:cc:c4:5f:87:0e:13:8d:5f:55:a5:47:
ea:29:85:22:a7:64:6c:c3:fe:bf:4b:40:1c:16:fa:43:11:49:
68:26:c5:38:33:21:dd:02:ee:e9:2d:9c:98:66:26:3b:1c:20:
08:b0:33:e5:09:5d:63:4b:b5:3a:79:40:6c:20:65:b5:97:a4:
3f:f2:73:03:48:00:22:b9:24:7e:99:d9:ad:36:33:a9:8b:bb:
8a:0a:23:89:82:97:7e:a1:22:2a:f7:4e:87:44:7e:22:c0:2e:
ce:9c:96:c2:85:d0:f4:ad:06:87:6b:f3:0c:20:9d:21:1b:a3:
45:95:58:3f:0f:6f:62:01:9f:c4:23:16:00:92:cb:97:40:c1:
91:9a:3b:c2:8e:55:d4:92:fb:bd:67:62:ea:84:bc:4e:a6:6c:
ab:81:7a:7e:38:0f:fb:9e:b8:8c:e0:a4:88:f5:41:87:56:ef:
28:55:b0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:45 2025 by rpki-client