Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/011F48EE2FF411E78B4D5566C4F9AE02.roa
File: 011F48EE2FF411E78B4D5566C4F9AE02.roa (raw, json)
Hash identifier: jdOuSxLCZnpT91YPdCxaOI+6MskPlS16Xo3cbB7dQ60=
Subject key identifier: 92:76:CE:FD:5E:CE:B9:43:EF:F7:90:AD:8F:9D:A2:7F:15:EC:DF:A2
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 34B7
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/011F48EE2FF411E78B4D5566C4F9AE02.roa
Signing time: Fri 24 Jan 2025 16:02:16 +0000
ROA not before: Fri 24 Jan 2025 16:02:16 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 133812
IP address blocks: 103.52.2.0/23 maxlen: 23
103.52.2.0/24 maxlen: 24
103.52.3.0/24 maxlen: 24
103.87.70.0/23 maxlen: 23
103.87.70.0/24 maxlen: 24
103.87.71.0/24 maxlen: 24
2001:df2:cc00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13495 (0x34b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 24 16:02:16 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6793b988-995b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:1a:b8:e2:43:73:75:e6:a0:43:fa:9b:30:
7e:72:7c:aa:bd:0d:3f:fe:69:6c:51:bd:ae:a6:3c:
a4:89:20:7f:fc:e3:01:18:3b:14:69:ee:89:24:39:
96:85:a9:ed:04:99:20:27:5b:a7:25:0c:0b:98:67:
a4:d5:f6:01:9a:20:6e:a6:c4:34:9f:7c:62:fd:9e:
61:d2:ff:71:b2:76:dc:33:b6:bf:3e:88:07:2f:30:
d8:54:86:f0:ed:1a:38:01:03:a3:ae:d7:85:e8:e3:
23:46:f6:44:bd:db:63:7d:2a:77:2b:ec:ec:27:c5:
78:2d:56:9e:7d:e4:52:17:5c:7b:42:1f:f6:6e:14:
08:a5:50:88:9e:59:60:44:0e:c6:f0:7b:25:bf:e1:
8c:d5:3d:64:84:00:8b:a3:99:32:72:bf:d3:b2:9a:
14:e8:8b:21:40:4d:83:5b:d4:e8:cb:c4:dd:19:30:
af:22:e6:83:26:e2:ad:2c:84:cb:c0:be:5a:3e:d9:
78:77:ef:89:87:f4:4b:4e:de:ea:96:34:93:51:e4:
81:1c:c8:4e:de:3c:a3:1a:fe:2f:49:38:1c:44:27:
c6:01:4b:ad:82:82:58:b9:4e:cb:a4:11:f6:70:79:
53:27:62:a0:1d:4f:ab:a3:5b:9f:91:89:39:95:6e:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:76:CE:FD:5E:CE:B9:43:EF:F7:90:AD:8F:9D:A2:7F:15:EC:DF:A2
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/011F48EE2FF411E78B4D5566C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.52.2.0/23
103.87.70.0/23
IPv6:
2001:df2:cc00::/48
Signature Algorithm: sha256WithRSAEncryption
31:66:97:93:64:9a:31:69:94:85:4c:0b:45:a1:c5:3b:f6:93:
97:d3:57:6b:42:56:32:d4:0d:c1:87:6d:2f:b6:ee:4c:cf:25:
22:0c:20:40:9f:2d:c0:12:a2:39:87:ad:ac:ca:5f:82:34:fc:
3d:7d:81:99:32:51:31:92:21:56:96:f9:d7:c6:07:2f:9e:3e:
e6:3e:5b:8e:87:fa:4f:20:7c:af:74:d1:07:37:e5:40:31:ef:
41:fd:62:a5:40:5b:be:0c:91:60:5d:1d:37:83:b0:55:0e:c0:
06:7a:20:28:9a:80:e2:fa:c5:ee:76:c6:8f:de:46:19:65:2e:
4b:45:b7:17:36:3e:d7:d4:2f:b4:e0:57:32:78:9a:1b:12:ae:
3b:ae:de:fb:22:b6:78:16:4f:dd:23:bf:aa:02:12:20:39:90:
82:46:b4:66:54:f9:1d:9b:32:5e:18:1c:77:6b:f5:77:4a:00:
82:fa:bd:9a:9f:89:f7:33:3a:41:c0:c2:53:e4:ab:4d:2b:c1:
37:69:29:17:b1:0a:67:b2:37:57:52:bf:7c:d7:e0:b3:8b:43:
29:af:d6:0a:b6:02:db:7e:44:cb:73:b9:f6:d8:74:4c:4b:b0:
5b:87:d4:b5:a7:ff:70:5e:c0:35:97:c9:d7:3c:3b:a1:54:37:
48:8f:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:56 2025 by rpki-client