Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/D442A7A0BE2E11EEAFAF1934C4F9AE02.roa
File: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (raw, json)
Hash identifier: GqeiAvi13dSKvLM+fHPrB98afI5mQF/DJh5CG60rs0k=
Subject key identifier: D1:05:1A:E5:30:7D:29:9F:68:ED:69:FD:2D:0C:71:C9:56:F0:BE:26
Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Certificate serial: AA
Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/D442A7A0BE2E11EEAFAF1934C4F9AE02.roa
Signing time: Fri 29 Nov 2024 04:38:34 +0000
ROA not before: Fri 29 Nov 2024 04:38:34 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 58460
IP address blocks: 103.9.226.0/24 maxlen: 24
103.209.54.0/24 maxlen: 24
2404:f440::/32 maxlen: 32
2404:f440:1012::/48 maxlen: 48
2404:f440:2012::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Validity
Not Before: Nov 29 04:38:34 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67494549-733b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:dd:0b:d8:10:af:6a:e6:9d:79:f0:82:7c:
35:83:e1:de:c2:db:a0:5b:68:0c:c5:ba:d5:c8:1d:
47:e6:cf:79:fa:b8:0b:4a:b3:6d:71:42:13:65:f1:
aa:53:e3:72:97:5b:81:b9:ba:10:44:79:52:37:7a:
be:83:74:e2:c0:99:2a:a9:f0:c7:76:aa:32:d6:c8:
d1:72:d2:89:2e:bf:57:b8:8d:e9:ec:a0:a0:ca:b6:
11:b2:fe:34:7d:b5:96:bc:71:e5:c0:f9:cf:7f:49:
b5:71:7b:6b:b6:62:e6:d2:9c:b6:f0:e8:c7:7a:46:
9e:aa:ab:c9:5b:1f:01:89:dd:b9:28:a4:20:c6:d1:
2a:cc:53:ff:35:9f:d0:3b:b5:2f:05:af:b9:ea:2f:
79:20:12:45:de:d2:df:63:3c:43:37:b4:d4:14:68:
c1:01:0c:c0:df:73:fd:42:fb:8a:39:bb:6b:d5:ef:
92:52:b0:87:ad:c4:43:d1:00:e5:01:f8:f5:2c:ed:
6b:da:4f:bc:b4:b8:c8:24:ee:0c:99:cb:e7:0b:35:
35:e4:59:d0:e1:32:e5:ca:de:68:5f:d8:8d:9b:ea:
9b:ad:5b:e2:fc:a9:88:3d:b6:da:7a:5f:02:eb:c9:
f9:09:43:32:4a:83:9c:da:01:2b:07:52:38:a7:ae:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:05:1A:E5:30:7D:29:9F:68:ED:69:FD:2D:0C:71:C9:56:F0:BE:26
X509v3 Authority Key Identifier:
keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/D442A7A0BE2E11EEAFAF1934C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.226.0/24
103.209.54.0/24
IPv6:
2404:f440::/32
Signature Algorithm: sha256WithRSAEncryption
7c:74:3e:d4:03:c1:aa:fb:0a:a4:d7:95:d4:cf:92:b4:b0:0a:
e2:0c:16:93:71:1e:75:04:ef:5a:b7:d1:7f:d4:2e:25:6b:4b:
7c:1f:17:25:5c:3c:eb:ab:9e:1a:a5:37:dd:69:89:d1:de:99:
63:98:4d:63:52:c9:41:41:37:a7:89:b7:b6:52:de:cd:96:14:
87:39:4c:12:9c:df:f2:d6:14:1e:99:db:9f:c4:23:c4:61:4d:
63:23:c5:98:b4:24:2d:a6:7e:97:d4:bd:37:00:80:35:aa:1a:
c3:71:ff:2a:12:15:bc:4d:a3:77:98:33:d3:a8:65:7b:6c:36:
0f:b8:fa:50:5a:94:a8:53:52:0c:cf:89:8b:a1:36:8e:d3:53:
5b:4c:6a:07:eb:8d:3f:b0:40:fb:45:61:75:60:09:be:c6:68:
e1:2a:d1:cb:2e:f7:9c:72:a2:ee:c6:ca:83:e4:ee:f8:4f:9d:
80:87:80:66:2d:4c:83:82:bc:0f:95:dc:8b:01:ba:ba:f5:bd:
0d:51:71:e4:91:37:d4:27:a5:34:3d:f5:6e:75:83:64:23:80:
78:72:b8:98:18:7d:75:86:83:f6:d5:24:f1:4b:86:e5:42:9a:
b4:a0:85:1a:8a:5f:cd:c6:35:3e:62:be:82:11:af:7a:e0:84:
3a:e6:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:32:43 2025 by rpki-client