Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/96908C564E0C11EF9EAADA7EC4F9AE02.roa
File: 96908C564E0C11EF9EAADA7EC4F9AE02.roa (raw, json)
Hash identifier: hLvwEFk98bWRQGRyM9lagexFlMamyjjm31+1YE8+aHE=
Subject key identifier: 38:FF:49:F1:BE:C4:8C:A4:8B:14:59:31:58:64:0B:C7:C6:3A:2C:72
Certificate issuer: /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999
Certificate serial: 05
Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/96908C564E0C11EF9EAADA7EC4F9AE02.roa
Signing time: Tue 30 Jul 2024 00:42:24 +0000
ROA not before: Tue 30 Jul 2024 00:42:24 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 4686
IP address blocks: 103.9.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999
Validity
Not Before: Jul 30 00:42:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66a836f0-2bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:f4:9d:6e:90:96:c9:15:05:15:83:93:69:
6d:6b:ef:93:ed:45:ba:24:92:c2:7c:10:6b:4a:e8:
98:fd:a6:6b:80:a8:b9:4f:5e:a4:69:00:3c:2e:38:
02:29:89:aa:51:b9:f4:70:21:41:e0:60:35:72:ed:
03:3e:25:ac:37:7c:30:a7:30:e7:40:61:b0:59:6b:
dd:ab:d8:65:dc:cc:56:4c:34:9f:b6:df:31:fc:5e:
c1:df:af:aa:53:65:5c:29:21:cd:b9:5a:99:c7:e6:
58:5b:d1:40:cc:c4:d1:2c:55:83:38:a5:a8:d2:79:
f6:91:e7:6b:4b:36:96:9b:73:00:ff:69:99:97:e5:
66:71:63:95:50:97:a4:3f:aa:7d:ce:8a:29:16:49:
53:32:a0:d6:5a:e5:5a:ff:12:7a:fc:1b:dc:1f:c6:
55:f5:fb:35:53:64:06:69:73:b2:3d:4d:15:85:6e:
5d:1e:58:b0:d3:7e:a3:12:5e:bf:84:d5:1c:75:61:
e2:18:c4:b2:69:9f:6a:44:22:4c:51:f5:92:f1:d5:
46:ea:7d:57:e3:c2:0a:83:6d:11:3a:a2:dc:a0:92:
6d:c1:98:93:ff:b1:1a:37:79:12:b2:48:dc:3c:44:
ad:99:25:9c:28:16:e0:84:bb:2b:4a:34:15:78:f1:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FF:49:F1:BE:C4:8C:A4:8B:14:59:31:58:64:0B:C7:C6:3A:2C:72
X509v3 Authority Key Identifier:
keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/96908C564E0C11EF9EAADA7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.166.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6e:33:a6:64:42:df:49:32:f6:3b:ac:4e:22:96:e7:0f:64:
a2:6a:4c:00:34:9b:05:32:3b:cf:04:38:00:97:31:c0:d6:ac:
35:00:21:4d:9f:88:70:3d:8c:ac:c8:3b:d8:eb:1f:77:10:97:
af:7b:63:ea:1d:3c:be:f6:a3:81:e8:3e:bd:bf:67:f8:80:40:
28:57:01:04:54:ab:ec:87:ab:9b:a2:6f:de:e2:f7:26:6b:b2:
4c:a4:19:ee:86:aa:33:54:a9:01:8a:c2:54:03:6b:1c:e5:73:
68:2a:0c:32:be:b7:ee:75:1c:ad:53:0b:11:1c:22:4b:1f:dd:
20:9b:56:84:c7:13:7b:94:e2:82:23:a7:30:8c:b2:13:90:78:
57:55:cd:9c:f2:51:4d:fd:2b:d9:87:96:8c:97:2e:7d:e0:dc:
c1:08:72:11:0e:d2:00:2a:64:da:2b:24:da:eb:4a:4a:72:d3:
a0:93:f0:44:04:83:32:61:69:3a:ad:23:51:11:15:51:35:09:
d9:38:34:34:8a:7f:4d:35:bc:d9:b5:de:78:6c:7e:a1:81:ae:
a5:99:3f:58:89:86:30:75:ce:ff:53:33:e0:7c:98:93:19:75:
5f:57:07:ac:1d:0a:47:65:77:f9:80:45:4b:7e:d8:38:b6:bd:
4e:82:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:30:42 2025 by rpki-client