Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/9E5AF612533C11EAA9A27E3BC4F9AE02.roa
File: 9E5AF612533C11EAA9A27E3BC4F9AE02.roa (raw, json)
Hash identifier: 89nx6FtRGafpjrrGSCdK+2mjcNeSm3JlU4e4pH3725o=
Subject key identifier: 3F:82:3F:0E:1A:38:98:15:30:46:88:B9:4B:08:88:82:82:B0:2A:70
Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial: 0A88
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/9E5AF612533C11EAA9A27E3BC4F9AE02.roa
Signing time: Thu 05 Sep 2024 07:36:37 +0000
ROA not before: Thu 05 Sep 2024 07:36:37 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 140072
IP address blocks: 103.52.28.0/22 maxlen: 24
103.117.92.0/22 maxlen: 22
103.117.92.0/23 maxlen: 23
103.117.92.0/24 maxlen: 24
103.117.93.0/24 maxlen: 24
103.117.94.0/23 maxlen: 23
103.117.94.0/24 maxlen: 24
103.117.95.0/24 maxlen: 24
103.148.22.0/23 maxlen: 23
103.148.22.0/24 maxlen: 24
103.148.23.0/24 maxlen: 24
2405:c840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2696 (0xa88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Validity
Not Before: Sep 5 07:36:37 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66d95f84-1b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:2d:bc:70:93:46:83:3f:07:16:48:68:48:
71:88:4c:b5:c2:75:99:a9:2e:4c:bf:7b:f8:b3:fe:
81:8c:73:2a:03:43:27:d6:ee:12:f8:5d:66:09:d4:
36:fb:77:56:df:db:c1:af:e3:6a:32:79:ff:7e:d6:
a8:d8:5f:18:67:19:b1:ba:41:91:44:60:11:51:58:
92:5a:9b:0c:53:90:65:c7:d0:92:c5:9d:69:8a:42:
da:e6:f7:36:11:fe:50:2c:e4:d1:a7:56:a4:ac:b5:
ae:dd:65:5b:b7:11:f1:ab:a4:35:e2:41:1e:74:bb:
45:0e:bf:5e:3d:4c:03:ba:9a:ff:20:94:fa:f4:30:
5d:c3:d0:f5:b6:f7:1d:5e:e7:bb:5e:e5:f9:2b:2f:
dd:52:bd:06:bf:d8:c5:0b:ff:99:7e:fd:d3:eb:91:
20:e7:1c:ce:83:b8:bb:0b:51:19:99:6e:c4:80:f2:
ba:80:5b:49:fb:84:50:63:1a:c3:08:44:8a:80:d4:
0d:5d:36:ea:0c:df:89:a3:02:be:f2:b8:92:7a:7a:
54:e3:11:e4:cf:2e:e7:40:eb:76:67:b7:4a:07:db:
0b:db:0a:8b:68:58:53:d2:c6:e1:eb:7b:9f:da:e7:
00:f9:4f:c8:b8:f5:95:b2:f4:ce:d3:83:04:1f:27:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:82:3F:0E:1A:38:98:15:30:46:88:B9:4B:08:88:82:82:B0:2A:70
X509v3 Authority Key Identifier:
keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/9E5AF612533C11EAA9A27E3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.52.28.0/22
103.117.92.0/22
103.148.22.0/23
IPv6:
2405:c840::/32
Signature Algorithm: sha256WithRSAEncryption
bb:a1:bc:a3:a8:1d:ec:d3:0f:d7:2d:ce:7a:6e:01:61:f6:d9:
a4:a0:d3:59:75:b2:80:2a:43:a1:66:b3:97:5e:e0:c0:ae:41:
06:26:c3:21:ae:b5:07:5e:19:db:b7:64:4c:b4:36:6c:54:14:
1e:d5:a8:f2:1d:bd:4c:1d:3b:63:17:a3:ff:c5:46:12:71:65:
f4:52:6d:86:11:fe:89:bc:1f:23:5f:75:05:7e:85:84:31:4a:
3d:4f:b9:34:4a:e2:81:8e:9a:eb:02:b6:a3:b2:db:34:da:48:
4e:66:38:b3:c2:74:07:2a:cd:b0:26:f8:e3:70:d0:3a:88:42:
b4:7c:eb:c6:f5:9a:9e:5d:0f:60:3c:9c:63:23:7a:8e:0b:e9:
35:57:69:aa:2d:69:be:37:55:c0:63:53:35:a6:93:34:3e:e5:
d2:45:87:87:51:5e:69:4a:95:4d:d5:28:4f:31:a6:33:82:42:
fe:9a:ff:f7:35:f0:6c:02:61:80:d3:12:c3:99:de:14:54:a0:
53:95:49:c2:e1:e9:04:a5:e1:99:b3:27:a0:3f:86:4d:39:ea:
75:e0:c9:9c:96:01:f0:e0:bf:75:bf:42:e6:f6:1e:96:fa:5c:
fa:65:e3:f6:9e:b1:8c:3f:65:a2:04:bc:97:38:b7:ed:87:db:
d6:35:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:56 2025 by rpki-client