Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/E9874B2A16D011EF90793868C4F9AE02.roa
File: E9874B2A16D011EF90793868C4F9AE02.roa (raw, json)
Hash identifier: ViBEiXsjPtwDWgjWAoRfyKQaAhEvEFxJcWrERgHGyz4=
Subject key identifier: DB:B3:54:E8:9E:9F:59:36:7D:D6:2F:01:F4:20:1E:2E:20:BE:5A:A7
Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial: C0
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/E9874B2A16D011EF90793868C4F9AE02.roa
Signing time: Wed 03 Jul 2024 06:07:35 +0000
ROA not before: Wed 03 Jul 2024 06:07:35 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 400619
IP address blocks: 103.112.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Validity
Not Before: Jul 3 06:07:35 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6684eaa7-db6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:e4:5d:e5:89:e9:1d:0c:b5:9d:f5:87:19:
20:2e:6c:b9:7d:d1:ba:7d:f7:42:cc:b5:20:78:97:
cd:48:18:18:0a:3f:7c:35:c9:69:d7:4d:b8:dd:2b:
a2:24:12:26:91:d0:1b:4b:85:ed:d5:3c:4b:e2:30:
36:e3:e6:17:01:8f:b3:7d:b1:c0:30:60:9e:2a:87:
f1:4c:86:95:27:ba:02:64:fc:ae:2a:e0:e8:a7:d8:
6d:13:38:ab:99:e9:0d:87:e3:db:6d:ab:7f:b9:7a:
89:5b:cd:5d:24:89:52:bb:38:bf:b2:97:04:3e:88:
15:74:55:99:04:70:a7:06:e2:06:eb:e7:9d:0e:55:
16:34:e2:ab:85:fc:3c:ea:a7:1d:c7:b3:0d:6c:3f:
49:dc:e1:40:45:a3:c7:66:f5:b9:d1:df:a0:9c:30:
1b:2c:b3:67:53:04:83:11:8c:d9:27:45:55:77:f5:
bb:d9:93:8d:86:b6:ea:78:8e:51:9c:92:aa:90:bf:
1e:1c:96:86:7d:e4:13:35:e3:98:bb:e6:8e:e4:98:
80:7e:f7:23:1f:ee:12:0e:c6:73:95:25:49:c1:be:
03:b6:29:21:db:11:11:ee:e3:42:fb:be:c8:c6:de:
9d:38:4d:d2:0c:08:76:8b:1d:cb:bc:3d:8c:b5:32:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B3:54:E8:9E:9F:59:36:7D:D6:2F:01:F4:20:1E:2E:20:BE:5A:A7
X509v3 Authority Key Identifier:
keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/E9874B2A16D011EF90793868C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:c9:6e:b0:66:f8:19:52:05:11:66:41:04:89:5a:2d:43:35:
e9:57:b9:b4:93:2f:a0:85:aa:a4:80:26:b5:e4:a2:8a:d7:c9:
ec:b4:ee:d8:36:60:3f:43:19:c5:c9:78:57:8a:0f:cb:3d:c9:
ef:80:66:b3:c1:3c:74:4f:3a:94:a5:03:18:1a:10:e5:f6:23:
d5:6b:a1:82:b6:92:a9:e8:48:c7:d4:c6:79:83:0a:47:e5:cc:
59:d3:02:06:7f:bc:8a:95:d1:41:48:81:93:93:05:c6:9f:a7:
c7:09:e8:c4:a5:5e:2e:65:df:79:5e:07:3f:36:72:98:13:18:
c8:54:d2:7f:60:ad:72:2e:0d:1e:f7:94:16:a3:8e:2e:53:ff:
7e:40:a2:c4:24:9e:e4:b7:80:bd:d9:99:d7:89:b7:14:fb:ce:
df:53:6c:5c:8d:34:4e:21:78:c1:71:d4:55:f3:95:71:84:b2:
73:cd:42:1f:ea:17:c1:26:35:3f:7f:9c:8d:16:80:e0:b5:e9:
9b:01:95:2d:fc:c2:b5:f4:ca:00:a3:d3:57:79:cd:8d:62:fc:
f9:97:a0:52:81:19:91:9a:dc:ea:18:ff:f6:0b:fe:62:94:ab:
0a:9d:0b:bc:16:6a:79:34:8f:10:3b:e0:2f:31:80:99:ae:67:
5c:2b:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:57:46 2025 by rpki-client