Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/1313114A5B3D11E996E4A744C4F9AE02.roa
File: 1313114A5B3D11E996E4A744C4F9AE02.roa (raw, json)
Hash identifier: oIrl9BWKoF5yDRsF0RcL0nlEBDtMIcn28rtSOP6iY7Q=
Subject key identifier: 99:DF:F9:F8:7F:72:4C:6A:29:80:0F:D0:62:F5:81:BA:C4:33:20:B2
Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial: 0F51
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/1313114A5B3D11E996E4A744C4F9AE02.roa
Signing time: Thu 28 Nov 2024 17:36:12 +0000
ROA not before: Thu 28 Nov 2024 17:36:12 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 9910
IP address blocks: 103.131.232.0/22 maxlen: 24
2403:d3c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3921 (0xf51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Validity
Not Before: Nov 28 17:36:12 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6748aa0c-c036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:7a:49:88:06:95:8f:db:8b:87:e0:c5:c4:
27:e3:63:0a:4f:43:24:6e:18:99:d3:ee:16:68:ce:
72:59:35:17:e1:c2:9f:ee:d3:aa:a3:f0:57:2b:ba:
3b:87:c4:5b:5c:fb:1f:a8:1c:76:8c:65:be:c0:5e:
64:c5:96:54:c5:e0:bf:09:a7:bf:0b:04:4b:61:77:
60:97:dc:07:ec:11:ac:a8:21:25:c3:de:5c:82:6e:
c8:36:83:f7:78:8c:94:5f:f6:4f:4c:76:76:06:4c:
dc:5f:6d:75:24:a9:fe:49:f4:ad:f8:f4:af:a4:80:
23:3a:5e:d3:96:e2:9e:62:7e:37:cc:93:56:ed:d4:
c4:b3:6e:4d:96:2f:71:3e:ee:a9:65:73:7d:97:de:
10:48:4f:6c:71:1b:7e:0f:0c:0c:02:37:db:80:06:
80:1b:a6:2b:14:59:6b:f7:00:2a:c9:5c:69:cc:58:
ce:7f:79:33:55:b5:aa:2a:ce:b1:99:32:a9:99:ca:
1b:3a:a7:29:a6:89:1a:0b:19:c1:c1:80:dd:a0:e1:
49:69:51:0f:b1:70:da:3a:d4:42:ca:7f:aa:f9:55:
5d:3b:61:63:3e:72:d4:b2:6f:6a:08:b2:15:ae:84:
b5:cf:fd:eb:0b:b6:bb:46:c3:95:56:a7:0e:f9:d8:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DF:F9:F8:7F:72:4C:6A:29:80:0F:D0:62:F5:81:BA:C4:33:20:B2
X509v3 Authority Key Identifier:
keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/1313114A5B3D11E996E4A744C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.232.0/22
IPv6:
2403:d3c0::/32
Signature Algorithm: sha256WithRSAEncryption
a2:93:a0:21:f6:89:0b:07:f4:c8:f8:50:16:7e:30:c1:22:c8:
97:50:9f:c7:e9:fc:b3:7b:a4:6f:21:99:c7:b0:2f:e6:ad:ab:
04:90:f8:d5:39:3f:af:43:6b:0f:17:64:5f:35:64:2c:d3:48:
b9:19:f7:2e:ec:56:33:86:7d:d7:14:c5:a8:36:44:cb:d0:6c:
98:17:c7:20:c0:1c:0d:eb:06:39:17:bb:ed:b3:3f:d5:53:3b:
3d:35:97:30:a4:bd:3c:e6:4d:79:f2:a4:99:2f:d4:34:d0:4a:
5f:c0:92:23:2a:16:56:3e:18:6c:6f:e5:1a:94:5a:68:6c:17:
99:94:2d:57:2e:cd:fd:01:e2:7c:ac:49:ab:e6:8e:89:3f:77:
2b:c5:82:a9:0a:2f:5d:03:ef:c6:16:4c:38:17:6a:cb:70:51:
31:55:bd:3c:2c:70:f8:8c:cb:bc:72:ae:4b:8f:27:b7:fb:47:
1f:db:89:24:16:88:58:7f:9c:48:f4:1a:48:7d:27:7e:3c:e0:
5c:d4:57:cb:c6:9b:55:c1:e2:d6:b0:9a:1a:4e:ac:01:a5:d7:
2e:ae:2e:61:7a:8b:e7:66:68:ad:01:e9:b7:35:a4:06:79:42:
dc:0d:3d:36:09:96:35:cc:4c:63:86:b6:9a:f0:98:ee:c9:77:
12:de:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:02:21 2025 by rpki-client