Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/81DED04C065411EFAAF0D25DC4F9AE02.roa
File: 81DED04C065411EFAAF0D25DC4F9AE02.roa (raw, json)
Hash identifier: PM+dQHiuzPJ4TjqXf8laXn6T0B+DAOl9u0Z/i0Jm5/0=
Subject key identifier: D1:25:A9:77:A9:0A:7F:97:4D:78:1B:96:96:FD:DF:8C:0D:63:82:65
Certificate issuer: /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
Certificate serial: 02
Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/81DED04C065411EFAAF0D25DC4F9AE02.roa
Signing time: Mon 29 Apr 2024 18:15:50 +0000
ROA not before: Mon 29 Apr 2024 18:15:50 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138602
IP address blocks: 103.134.84.0/24 maxlen: 24
2001:df7:c100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
Validity
Not Before: Apr 29 18:15:50 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=662fe3d6-9752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:fa:5c:dd:d5:d8:4d:0b:6f:8b:1a:bd:99:
4f:f3:81:2a:aa:d3:4e:ba:2b:45:e2:c8:d1:e8:b7:
42:bc:c6:52:1f:3f:61:7a:0b:1f:48:30:6e:57:27:
3d:38:0e:4d:25:0b:a6:c5:8e:5b:70:da:f5:f9:b7:
2e:01:f9:23:25:b5:03:f1:e6:97:8f:5d:99:c8:5a:
d9:d6:80:f9:cb:d3:92:11:fd:0e:0b:01:6f:8f:21:
1c:fe:48:47:3d:14:61:82:b9:4f:14:1f:9a:f8:2a:
bb:ea:d7:c9:3d:1d:78:fa:e6:8a:fd:78:e1:72:8d:
60:f2:2d:0e:ee:7b:37:8c:99:3d:05:c5:34:ea:83:
ed:1f:61:18:3c:38:d0:72:85:44:d4:bf:fa:48:ad:
73:0c:95:ce:45:46:70:69:83:64:49:cd:09:b6:3a:
ea:f6:30:84:f6:0e:94:a4:89:15:94:fe:60:b8:6c:
fd:ad:99:6a:a9:ba:53:c0:26:02:53:ab:77:40:a5:
cb:a0:f5:f0:88:a2:0e:7f:e7:06:06:31:7f:d9:9e:
c2:da:7f:47:c0:ad:0f:47:52:0a:ac:1e:9a:57:cb:
60:07:25:63:91:67:ee:3b:0b:15:3b:a6:b5:2a:cf:
5a:97:47:8c:aa:f0:ce:9b:8d:20:f8:21:9a:b0:9e:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:25:A9:77:A9:0A:7F:97:4D:78:1B:96:96:FD:DF:8C:0D:63:82:65
X509v3 Authority Key Identifier:
keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/81DED04C065411EFAAF0D25DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.84.0/24
IPv6:
2001:df7:c100::/48
Signature Algorithm: sha256WithRSAEncryption
96:f9:03:99:f5:c1:a7:7e:e8:af:ff:14:30:2c:91:a6:8c:b2:
19:9f:5f:3a:16:a0:7a:7c:7d:21:95:dd:b2:6d:a8:f2:be:38:
f3:4f:ee:0c:52:df:9f:66:aa:7e:d3:3f:79:d3:7c:f3:89:c9:
b1:8d:32:50:af:36:d8:7d:6c:1e:0d:f7:93:6c:51:b9:bb:de:
57:7a:81:32:5e:90:21:3e:f6:18:4e:d2:91:dd:7e:87:fc:bd:
e4:31:e6:6f:b0:01:56:aa:a7:d7:34:45:f8:8f:b3:a1:ba:d8:
a9:c0:f5:5d:ec:66:98:ae:3f:8e:43:93:53:5a:9e:d5:2a:3e:
49:79:08:2d:eb:89:a1:0f:ee:01:cb:c7:f5:bc:5e:76:aa:03:
59:13:b0:64:68:16:23:3c:1c:f4:aa:84:a7:bc:6c:c0:b8:b3:
1f:63:bf:45:99:93:d6:fe:40:56:21:9c:ed:f5:8b:16:68:26:
08:a7:90:84:ae:91:f8:c0:ae:50:33:a2:56:cc:d6:63:92:5e:
55:9c:12:cc:03:d7:89:4d:08:88:9a:07:94:31:43:f3:77:1e:
f0:bd:85:3e:d4:84:bb:51:54:92:5c:b7:5d:06:6a:b4:05:70:
28:4b:ed:88:ee:97:ac:c1:17:dc:a8:55:7c:0c:f4:ca:51:1a:
4b:d6:80:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:07 2025 by rpki-client