Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa
File: 9C594FD469A911EFBF66800FC4F9AE02.roa (raw, json)
Hash identifier: 7dymspRIbNYwH/8/oG9ZCKWg0/glOc+bAFGY7NTbhkY=
Subject key identifier: 6A:8D:05:7C:4F:84:EC:56:D7:50:73:D8:47:35:01:84:A5:3B:A0:B7
Certificate issuer: /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Certificate serial: 03
Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa
Signing time: Tue 03 Sep 2024 04:04:27 +0000
ROA not before: Tue 03 Sep 2024 04:04:27 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 137546
IP address blocks: 203.158.118.0/24 maxlen: 24
203.158.244.0/22 maxlen: 22
203.158.244.0/24 maxlen: 24
203.158.245.0/24 maxlen: 24
203.158.246.0/23 maxlen: 23
203.158.246.0/24 maxlen: 24
203.158.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Validity
Not Before: Sep 3 04:04:27 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66d68aca-ffd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:7b:fe:af:66:6f:1b:fb:4a:47:d1:b2:13:
6e:03:2c:49:22:fa:c7:7e:2f:8d:7d:4a:e7:95:30:
69:73:cb:40:f5:32:7f:db:c7:b3:0a:7c:a1:11:21:
75:36:e3:c5:2f:91:99:04:8b:82:c7:d7:44:36:76:
28:93:6d:6f:cb:ac:61:28:98:cf:2d:8c:27:91:27:
8a:13:2e:05:55:62:25:84:a1:81:17:2e:1e:28:95:
ab:e6:83:a2:34:ee:15:62:20:a8:6d:f7:a2:84:40:
10:53:19:f7:00:84:e1:c0:26:3f:01:4a:33:87:83:
90:1b:08:4b:08:56:cf:a9:b5:84:8f:81:f8:3d:6b:
5c:bb:22:de:17:a6:6e:9f:bc:b0:77:51:4a:dc:5e:
10:be:7e:bf:ad:08:2f:6a:a7:7c:fe:f4:8d:1d:d0:
b4:45:42:6c:85:18:5d:0b:e8:0e:dc:d5:ba:c2:d3:
31:90:68:6c:1d:7e:80:f9:01:10:1d:88:52:9d:36:
54:2a:83:1b:18:73:20:17:f0:71:21:8c:d0:df:07:
93:9e:1a:05:b1:90:58:f3:83:0d:e4:36:68:3d:3a:
43:c3:48:5f:0a:92:f3:87:52:be:69:c6:9f:ab:c3:
11:6b:03:08:61:e5:8b:02:94:a1:d6:f2:36:a4:bb:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8D:05:7C:4F:84:EC:56:D7:50:73:D8:47:35:01:84:A5:3B:A0:B7
X509v3 Authority Key Identifier:
keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.158.118.0/24
203.158.244.0/22
Signature Algorithm: sha256WithRSAEncryption
06:99:fc:bd:71:c4:6b:1e:98:fc:48:88:eb:12:f6:72:b8:48:
f2:2d:d4:88:6c:ef:81:43:22:13:a6:e2:b5:53:4b:1e:70:3b:
a7:ec:31:fc:c8:a8:ec:d4:ff:0d:c9:79:a8:40:2d:80:9f:fd:
5e:ce:a0:ec:ba:81:fe:3f:92:b7:0c:4b:ae:b4:f7:fd:16:0b:
c6:a1:c0:98:08:a3:a7:6c:b0:96:0d:a9:b7:1a:e0:11:67:9e:
ad:eb:d3:0b:a9:e8:cb:98:8e:13:1e:bb:71:2e:bd:45:9a:12:
c0:46:62:15:2c:8e:48:54:54:2c:24:a2:ba:49:7c:e4:09:02:
ba:29:52:cc:bb:34:c8:09:0b:c3:d5:2e:ac:4e:a9:38:bd:18:
cc:a1:66:d6:a2:59:cb:db:92:7a:17:85:9a:f0:f3:95:cf:c5:
5b:1f:77:c8:d9:ab:08:c8:91:f8:a9:db:ec:13:95:86:92:b3:
7d:68:51:58:09:a1:ae:db:d8:84:8f:98:ab:9e:4f:6e:16:18:
25:8e:23:8c:3a:8d:0d:ca:40:db:28:0e:e5:df:40:fa:f9:5a:
46:45:37:60:c8:46:5f:86:a1:b2:94:11:e0:7e:ea:e0:2b:8b:
ea:8c:a1:e9:4b:87:82:f5:a1:6e:30:76:b9:07:e2:d7:3a:6b:
87:93:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:16 2025 by rpki-client