Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/3D83702E66CB11EFA2A66984C4F9AE02.roa
File: 3D83702E66CB11EFA2A66984C4F9AE02.roa (raw, json)
Hash identifier: lUgZ45NhNVzRaDmFfEX8lN0zDz9HpfoRqK2qSylb5c0=
Subject key identifier: F3:82:2C:96:EF:B4:F6:9A:4C:94:07:0B:3A:D0:D9:77:21:1B:A1:45
Certificate issuer: /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial: 0588
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/3D83702E66CB11EFA2A66984C4F9AE02.roa
Signing time: Fri 30 Aug 2024 12:27:37 +0000
ROA not before: Fri 30 Aug 2024 12:27:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142028
IP address blocks: 103.166.89.0/24 maxlen: 24
2001:df6:8580::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1416 (0x588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Validity
Not Before: Aug 30 12:27:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66d1bab9-35ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:b2:6b:95:4f:e9:c7:da:95:91:cc:0b:f6:
4c:bb:d9:1e:26:ff:0d:96:22:4d:29:5e:71:73:59:
da:36:20:a6:36:57:40:14:81:c1:7e:f4:81:d2:90:
e0:c0:74:af:fc:03:cb:97:71:52:6d:2b:51:01:ff:
77:5e:63:a6:0e:5d:52:a8:59:78:38:ca:7a:ed:44:
9e:80:4e:e3:eb:cf:76:11:92:92:e4:aa:5d:80:51:
21:98:d8:80:49:10:1c:36:35:cf:12:ba:5b:b6:d8:
c0:2d:47:bd:ff:98:c8:f2:e8:53:10:93:1a:2d:f0:
1d:fa:e1:bb:cb:97:81:19:0e:ee:3e:4e:ba:06:10:
41:0b:bd:66:4b:6e:a3:b9:63:b0:1f:aa:98:7b:36:
79:00:69:1f:a9:eb:34:68:68:a4:d2:e5:dc:25:4e:
58:7d:d7:66:f5:3c:6d:51:0d:ea:92:09:56:61:7f:
2e:a1:a2:d1:97:cc:dc:83:f3:70:84:b6:fb:5f:aa:
e5:a5:a5:bd:42:56:1b:26:a2:99:a5:10:88:e7:ca:
96:9a:74:c3:3c:df:33:c1:c7:79:0c:68:73:72:27:
85:d5:cc:ee:3d:81:96:be:6f:e6:97:b8:dc:a7:85:
39:7a:32:4b:94:d9:c0:79:22:79:0d:cc:13:81:14:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:82:2C:96:EF:B4:F6:9A:4C:94:07:0B:3A:D0:D9:77:21:1B:A1:45
X509v3 Authority Key Identifier:
keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/3D83702E66CB11EFA2A66984C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.89.0/24
IPv6:
2001:df6:8580::/48
Signature Algorithm: sha256WithRSAEncryption
c0:a2:06:19:7d:ac:fd:56:f5:03:f8:c1:05:16:d7:5e:9b:cc:
1c:44:37:3f:20:61:95:0c:9e:c7:61:0c:56:ff:40:79:99:55:
56:a1:c4:97:a3:23:81:f2:3e:7c:ad:4c:05:48:fa:2b:5c:c4:
5d:45:c7:38:0f:3b:57:c1:60:05:ec:69:5d:d1:1b:b3:41:4c:
ee:85:57:8d:87:d5:e7:8e:8c:f7:f9:fa:4d:e0:78:0b:0f:d3:
ce:77:80:01:77:b6:84:65:bd:cf:49:b4:d9:cb:60:f0:c4:3e:
32:a6:01:49:3f:f8:1e:03:f2:df:d0:fb:dd:55:2c:92:7e:b0:
42:4d:63:26:34:45:e4:37:26:24:cb:7e:16:eb:fd:71:39:31:
16:c6:c2:bb:62:68:77:51:62:60:57:0d:76:cf:35:01:13:23:
9f:49:ee:68:75:b4:bf:e9:58:63:61:b0:62:54:c2:1b:ee:9d:
1e:82:b9:bf:3e:eb:32:47:92:8a:ef:d8:42:53:f9:5d:73:24:
c1:47:04:ea:a4:15:60:78:a3:78:0d:f5:30:73:bd:c9:1d:a0:
80:b2:d6:61:41:de:b5:79:e6:1e:6b:30:f5:50:3c:ce:25:ac:
63:df:60:82:56:c1:02:33:1c:64:70:30:db:54:34:f8:cd:00:
b7:28:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:41:35 2025 by rpki-client