Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C906DE4BE7A11E99ADDFD75C4F9AE02.roa
File: 6C906DE4BE7A11E99ADDFD75C4F9AE02.roa (raw, json)
Hash identifier: AcBpX+mvudevZxRHrFr2+gPNpS9AeBUJGg4GNiQw8SI=
Subject key identifier: 8C:05:43:2C:C3:16:94:72:06:AA:92:22:BE:5F:41:9B:35:B0:35:10
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 34D3
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C906DE4BE7A11E99ADDFD75C4F9AE02.roa
Signing time: Fri 24 Jan 2025 16:02:41 +0000
ROA not before: Fri 24 Jan 2025 16:02:41 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 55654
IP address blocks: 103.209.98.0/24 maxlen: 24
2001:df1:2980::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13523 (0x34d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 24 16:02:41 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6793b9a1-8b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:a8:71:fc:d0:ae:b7:bf:38:52:bd:b9:37:
f8:ea:31:ad:14:cb:8f:28:4a:14:52:84:99:a1:82:
4d:21:13:1b:81:48:96:5e:d5:48:7b:4a:94:8f:a9:
c2:c2:98:a8:ad:25:d9:c2:18:9a:5b:74:9d:dd:4f:
56:02:81:c4:e6:bb:8e:5f:7f:86:0f:00:19:4f:e3:
d7:e9:27:5c:e7:1c:db:f9:ee:1f:73:45:92:71:14:
f8:05:f0:7a:3c:0a:7e:24:86:94:d1:ce:67:0a:e3:
b9:b9:e2:ce:59:02:3e:a6:a0:b8:13:cc:b3:62:75:
80:86:ce:b6:11:8e:7d:4e:53:4b:8f:7c:ba:00:6f:
ec:67:3b:55:aa:71:33:5c:a8:0a:e0:fa:fb:b5:d9:
bb:1b:d1:64:25:7c:fd:1d:09:8b:4b:8e:4b:2e:22:
31:f7:40:70:10:e5:35:49:ea:1d:f0:09:7d:19:39:
1e:49:41:5e:14:2b:2f:48:3a:ee:3a:73:d2:02:3c:
88:cc:1e:a8:d7:fe:e9:72:5e:e8:99:5e:12:fc:44:
4e:32:81:b1:a0:21:c3:d0:0c:76:98:d5:ec:02:4c:
d6:cf:a2:35:62:00:49:cd:64:89:90:31:71:e6:51:
d8:cd:e8:ac:58:8d:d4:c6:08:6f:9c:8e:8b:f2:8f:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:05:43:2C:C3:16:94:72:06:AA:92:22:BE:5F:41:9B:35:B0:35:10
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C906DE4BE7A11E99ADDFD75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.98.0/24
IPv6:
2001:df1:2980::/48
Signature Algorithm: sha256WithRSAEncryption
5e:27:ee:5e:84:93:df:47:ad:48:6f:0c:cb:41:90:be:88:6a:
f7:45:a6:42:ee:1e:2c:3e:ef:a0:29:70:3a:69:57:35:fa:76:
30:f4:a5:30:43:92:46:89:72:88:fd:0c:22:14:27:e2:18:7f:
e1:ee:29:ad:d8:fc:b8:58:bb:eb:60:1d:7e:60:3e:78:16:3b:
83:2d:e2:0d:1a:e0:d4:08:6d:a4:df:8d:d8:af:65:5f:7b:0b:
ac:25:13:59:47:e5:5c:1b:ec:79:f5:22:fc:0e:0f:b8:71:3d:
59:e2:19:d0:84:b1:d2:35:76:a6:0b:59:7e:0d:60:25:9c:d6:
5e:42:e3:60:a3:23:dc:80:4c:67:67:b8:6e:a3:e3:9d:e8:78:
92:54:e7:f9:79:5e:50:ed:3b:e3:97:cb:5e:1f:10:b6:49:c7:
77:45:83:d1:f2:f1:ad:58:cb:58:d9:c7:4e:d1:c7:a2:5b:15:
bc:b8:9a:45:28:97:ef:c2:94:90:1b:eb:b1:75:d0:3d:b7:09:
e2:05:2a:74:69:f3:7a:62:cc:0f:95:4c:82:37:21:06:e3:d4:
03:74:8c:4f:ed:a8:08:01:c4:a6:f9:2b:cc:a2:05:8d:29:24:
63:d3:b0:b5:f8:6d:cd:60:52:76:42:11:16:25:cb:5f:48:56:
a3:80:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:36:33 2025 by rpki-client