Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa
File: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (raw, json)
Hash identifier: WK/JV9u6bxzN5pWyJs08YddvdU/3rwCasfFO2UjwIic=
Subject key identifier: F7:27:35:6E:01:1B:3F:F6:DB:4A:CA:E5:56:89:4D:6F:2A:12:BA:99
Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
Certificate serial: 0C08
Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa
Signing time: Sun 26 Jan 2025 18:36:50 +0000
ROA not before: Sun 26 Jan 2025 18:36:50 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 138534
IP address blocks: 103.132.88.0/22 maxlen: 22
103.132.88.0/23 maxlen: 23
103.132.88.0/24 maxlen: 24
103.132.89.0/24 maxlen: 24
103.132.90.0/23 maxlen: 23
103.132.90.0/24 maxlen: 24
103.132.91.0/24 maxlen: 24
2404:3440::/32 maxlen: 32
2404:3440::/36 maxlen: 36
2404:3440:1000::/36 maxlen: 36
2404:3440:2000::/36 maxlen: 36
2404:3440:3000::/36 maxlen: 36
2404:3440:4000::/36 maxlen: 36
2404:3440:5000::/36 maxlen: 36
2404:3440:6000::/36 maxlen: 36
2404:3440:7000::/36 maxlen: 36
2404:3440:8000::/36 maxlen: 36
2404:3440:9000::/36 maxlen: 36
2404:3440:a000::/36 maxlen: 36
2404:3440:b000::/36 maxlen: 36
2404:3440:c000::/36 maxlen: 36
2404:3440:d000::/36 maxlen: 36
2404:3440:e000::/36 maxlen: 36
2404:3440:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080 (0xc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
Validity
Not Before: Jan 26 18:36:50 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679680c1-830e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:41:7e:c2:1c:73:38:4f:b9:96:d1:dd:99:
11:6a:3b:f1:39:8a:00:92:91:77:24:cd:42:70:0c:
c9:42:79:e1:70:71:df:9a:f6:16:54:b0:91:ff:05:
0b:59:c6:a3:98:88:f4:58:32:01:77:b9:b8:f6:6a:
a5:58:20:f2:28:4f:16:bf:63:e8:21:ee:45:d7:25:
c5:11:84:7e:95:81:7d:a2:38:a4:37:8f:31:29:e1:
1c:3d:6e:ec:1e:55:bb:d6:5b:83:1d:24:bc:a2:f6:
a4:d7:c5:f7:45:84:4a:f1:c4:62:ed:3c:81:8d:02:
36:62:fd:88:60:6d:41:43:01:b0:c0:cd:ab:18:89:
95:fe:c9:6e:51:70:f4:30:1c:b3:4a:c5:26:da:72:
71:05:2b:fa:ca:e4:fd:8b:68:c1:f1:4e:f0:05:fc:
05:38:1b:30:09:88:3e:cc:6d:a9:00:86:dc:b0:0c:
58:a6:a9:85:72:41:cb:52:3b:3b:f3:4e:53:d9:6f:
fa:62:06:90:03:80:00:bd:57:11:a0:08:5c:8d:d3:
80:c9:0b:a0:29:00:86:23:05:67:a6:43:bd:e4:4a:
46:af:03:ee:a6:5e:53:74:40:1b:0e:03:59:35:59:
87:cb:db:ef:3c:a9:1c:cf:1e:fe:20:9b:da:8b:d6:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:27:35:6E:01:1B:3F:F6:DB:4A:CA:E5:56:89:4D:6F:2A:12:BA:99
X509v3 Authority Key Identifier:
keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.88.0/22
IPv6:
2404:3440::/32
Signature Algorithm: sha256WithRSAEncryption
20:8a:91:e9:f8:b5:47:df:f2:07:42:d4:8c:09:99:48:f7:22:
51:24:8a:24:f1:69:aa:ec:8a:b4:01:89:df:38:8d:2f:16:32:
be:ca:64:e6:01:e4:7a:c4:c1:01:a8:f7:ca:4f:3b:0b:c8:53:
e7:4b:dd:fb:bd:11:cd:1b:1e:4e:f8:05:2e:d7:5d:fb:65:02:
95:8a:c0:a1:28:1a:0b:18:aa:0d:4a:3c:06:ad:b5:95:8d:22:
e0:c6:c0:34:c7:9b:ec:83:81:99:a5:f9:b6:d6:8a:76:0d:5f:
c9:aa:27:89:19:c2:c2:d4:e8:f3:d2:00:13:30:39:c3:63:74:
c9:f1:e0:a1:67:b2:80:b7:e0:f8:81:8c:15:db:e2:8c:a2:55:
93:6c:20:cd:1f:da:48:aa:ef:23:29:4a:5a:1e:5c:ec:25:f9:
b1:95:f3:2a:86:b2:5c:47:5c:3a:75:35:03:0d:1e:04:3f:f4:
00:f0:33:9c:1c:f0:29:d6:fb:32:8f:5a:61:98:15:b0:eb:c0:
38:88:61:11:f9:a1:97:f2:95:9f:05:85:95:78:69:b5:b3:fd:
36:ae:ad:fc:90:8d:75:5e:76:78:0d:9b:d6:d5:69:ae:f6:9a:
3c:18:e8:06:99:62:6b:83:64:8e:5d:53:9f:e4:fe:1e:6f:ec:
50:d8:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:01:52 2025 by rpki-client