Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/A8A940C6429811EDBB392C35C4F9AE02.roa
File: A8A940C6429811EDBB392C35C4F9AE02.roa (raw, json)
Hash identifier: us+hXVbT4+IxuDXf1t8Zy0IqvnZFy688N7EVgUtl4FA=
Subject key identifier: 39:8F:35:C5:E9:23:8F:9D:62:2E:52:C8:7B:DC:B6:FC:38:12:3E:43
Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial: 016C
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/A8A940C6429811EDBB392C35C4F9AE02.roa
Signing time: Sat 07 Sep 2024 04:16:51 +0000
ROA not before: Sat 07 Sep 2024 04:16:51 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 136797
IP address blocks: 103.96.110.0/24 maxlen: 24
103.141.226.0/24 maxlen: 24
2001:df1:d900::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Validity
Not Before: Sep 7 04:16:51 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66dbd3b3-89b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:93:24:c9:19:34:8a:93:0c:68:34:81:2b:
8d:2b:30:bb:81:e1:92:32:4e:09:10:f6:6e:54:af:
f9:52:72:00:cb:12:ac:68:0c:0f:8d:f2:2f:dc:b3:
28:ee:c1:0d:6a:e0:6f:3f:b4:6c:fc:65:0b:00:85:
11:ae:7e:ed:73:d3:ad:7e:be:bb:62:9c:9b:4e:89:
57:b8:06:37:84:06:22:7a:dc:3b:4c:d0:7c:23:4d:
c2:10:b5:09:c7:38:60:b8:a6:6b:ff:7b:e9:19:a7:
92:4f:f7:0c:63:89:29:da:89:56:bf:5b:32:f5:ad:
f9:19:2a:f5:47:bd:48:3f:bc:16:14:9b:0d:1b:d0:
60:6b:3f:99:15:f1:85:c6:6a:ed:72:57:0f:0b:ac:
8e:44:6b:cd:0e:da:f2:a7:eb:5d:29:15:e9:6e:54:
33:9b:51:7e:38:a4:96:50:88:10:b9:3f:09:98:bf:
7a:0b:55:12:39:2b:52:bc:6d:f0:07:e4:b0:b9:fd:
ed:41:ad:4d:38:91:e4:18:b2:ce:48:0b:19:5b:c7:
48:dd:17:d1:e7:90:cc:b8:a5:6e:49:1b:9f:80:76:
11:99:fe:71:4b:7d:f3:c7:bf:8f:38:cc:c9:c7:15:
87:35:e1:8a:a8:c8:8e:07:ac:f4:ca:ee:84:f2:c5:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:35:C5:E9:23:8F:9D:62:2E:52:C8:7B:DC:B6:FC:38:12:3E:43
X509v3 Authority Key Identifier:
keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/A8A940C6429811EDBB392C35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.110.0/24
103.141.226.0/24
IPv6:
2001:df1:d900::/48
Signature Algorithm: sha256WithRSAEncryption
57:e4:eb:c6:ce:8e:e6:75:6c:44:df:7b:58:3b:d4:e2:f9:a5:
56:86:30:c1:69:17:2e:51:84:3b:2c:4f:15:24:aa:4b:13:35:
fa:74:ee:ee:1b:9a:fa:31:ef:f3:39:65:b2:bc:41:67:c4:cb:
2c:e9:93:9e:35:f9:89:57:03:11:7d:59:7a:4c:2b:08:a5:3b:
1b:33:0d:e5:4a:03:c0:fc:60:ac:35:e8:e7:51:93:5f:37:ea:
66:91:fd:35:b9:82:a9:52:44:c1:a3:db:8c:8b:49:33:28:a0:
a3:2e:6e:3a:ff:6e:4a:dd:56:d4:2f:2a:c4:9c:37:6a:25:7a:
0c:6f:71:ae:9c:ea:0d:e7:5f:6c:ec:c1:dc:e6:d7:a9:42:67:
fb:6d:62:f5:58:a0:99:68:fc:22:45:df:5b:e7:5a:22:3d:39:
ae:9c:42:aa:e1:e5:bb:3c:64:ce:02:b2:c5:99:e4:dd:ad:03:
cf:6d:e9:8d:1c:8d:29:77:7e:c0:f0:ef:8e:13:92:50:bb:15:
e5:3a:7f:89:40:bf:22:a3:41:b1:7d:b1:90:ee:d0:d4:1e:50:
40:43:53:25:bf:3f:d8:20:57:de:36:e4:f1:d7:04:50:d7:05:
4f:31:0d:49:d9:da:24:f0:e3:de:50:17:b3:5c:cd:03:95:6a:
ed:d8:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:12:59 2025 by rpki-client