Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/3F7B6BA6759A11EF88710D30C4F9AE02.roa
File: 3F7B6BA6759A11EF88710D30C4F9AE02.roa (raw, json)
Hash identifier: oTI4/5J52N+CdGqh6V5SlwZzW8qZ2EAhotERjvLVwjM=
Subject key identifier: 14:DB:40:08:56:1A:7E:3A:AA:20:88:69:84:40:F4:BA:23:3F:98:38
Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial: 53
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/3F7B6BA6759A11EF88710D30C4F9AE02.roa
Signing time: Wed 18 Sep 2024 08:44:42 +0000
ROA not before: Wed 18 Sep 2024 08:44:42 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 133766
IP address blocks: 103.40.166.0/23 maxlen: 23
103.40.166.0/24 maxlen: 24
103.40.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Validity
Not Before: Sep 18 08:44:42 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66ea92fa-9df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c1:bd:e4:b9:6e:5f:79:6a:c7:5c:e5:6e:87:
33:98:0c:19:b4:20:09:df:85:02:9e:3c:1f:e9:69:
53:81:e7:a3:ef:63:23:e0:1c:5b:7d:d5:1b:4a:5a:
ac:4b:76:73:e3:0e:9c:a2:de:a3:61:87:a2:e4:5f:
ab:de:5b:71:74:3f:aa:bf:85:6b:01:75:11:3b:88:
db:67:12:e7:d6:d2:5e:86:43:c5:77:31:d4:92:26:
bc:53:25:ce:17:24:ee:24:d7:bc:2b:38:7f:8a:3d:
c8:bc:11:47:ef:fe:27:9a:29:8f:14:c7:48:f8:40:
ed:28:4a:c6:32:da:48:c8:c2:88:df:7d:90:ed:1a:
78:d4:74:bd:32:a2:4a:6c:c2:26:f0:f0:d1:52:8e:
d8:22:d5:76:aa:59:49:19:42:7f:26:f6:55:b1:50:
41:d2:1d:8c:c2:56:12:18:40:06:c9:e7:64:48:4f:
6c:b2:92:c1:ad:2c:25:6a:fb:a3:43:5c:ae:2a:06:
88:49:30:54:7f:a6:a6:6e:2e:71:f0:78:a2:10:92:
da:bd:de:c9:f9:5c:34:62:89:09:9d:74:e6:b6:9e:
2b:2d:ee:11:7e:34:1e:79:98:5b:05:45:ad:fb:07:
9b:aa:68:bb:dc:d7:93:fd:2e:28:37:c2:37:cd:88:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:40:08:56:1A:7E:3A:AA:20:88:69:84:40:F4:BA:23:3F:98:38
X509v3 Authority Key Identifier:
keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/3F7B6BA6759A11EF88710D30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.166.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:8e:ca:4f:f6:83:35:e2:d3:40:4f:3a:38:9b:09:2a:1c:dc:
a3:1d:07:e6:cf:c2:c3:47:bc:6b:3c:3b:1a:3f:e5:8b:e1:96:
76:fb:43:b0:76:b2:f2:ac:d5:4d:e4:2e:52:55:f2:6c:b8:8f:
46:0b:62:80:81:85:29:09:4e:77:58:7a:d7:3d:0b:69:28:a1:
eb:2d:a7:fc:64:25:f2:d3:5f:f8:95:aa:99:4c:c2:f8:87:a9:
a3:00:b0:e6:4b:d9:11:c8:98:e3:ce:50:7e:ce:67:7b:04:ce:
26:93:fb:e6:d3:91:21:b6:4d:f0:44:c7:35:40:76:d6:dd:9b:
e3:56:96:5c:a5:91:fc:97:0b:af:b7:59:e2:d1:de:ff:1e:5b:
70:37:90:c2:55:97:d1:df:3a:c9:b1:60:10:19:29:b8:c7:cd:
39:48:c6:12:94:21:49:b9:9b:8d:e0:cc:3a:67:91:22:73:43:
ce:69:7e:73:94:5d:f2:6e:28:d5:5c:ae:17:1d:aa:72:b3:88:
de:8a:cc:d5:17:88:24:61:8b:cc:d3:2b:e1:d4:9b:75:bd:13:
ec:d0:43:9c:1f:3b:b4:8e:e6:a9:db:12:69:28:6c:fd:ee:1b:
9b:bc:cf:86:fa:1c:a6:45:be:b9:cf:e5:1d:42:07:2a:6f:7a:
4a:25:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:15 2025 by rpki-client