Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa
File: EECBCEBE6E3511EABDE26D73C4F9AE02.roa (raw, json)
Hash identifier: LPVTnB/0GHrJCLpXZVzzn+Fi+J75+p11hdRea2Hs9CM=
Subject key identifier: E7:71:FA:8D:16:0E:C0:04:73:3F:A2:75:A4:20:44:2D:23:D4:1D:91
Certificate issuer: /CN=A9111A27/serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0
Certificate serial: 098E
Authority key identifier: CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa
Signing time: Tue 02 Jul 2024 20:47:42 +0000
ROA not before: Tue 02 Jul 2024 20:47:42 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 9268
IP address blocks: 103.110.176.0/22 maxlen: 22
202.9.16.0/20 maxlen: 20
202.9.26.0/24 maxlen: 24
202.9.27.0/24 maxlen: 24
2405:db00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446 (0x98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111A27
Validity
Not Before: Jul 2 20:47:42 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6684676d-23f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:d2:f1:de:af:4f:5f:35:48:64:41:b4:cb:
1d:2a:c6:af:f5:2d:99:57:0c:ba:0b:6b:86:09:a3:
80:fe:e3:31:cc:63:86:69:53:85:8a:d8:8b:b7:db:
ec:fb:d6:24:5e:f8:72:cb:94:9a:be:51:01:06:6f:
d9:5c:3f:18:98:02:42:65:00:68:40:31:d7:d3:a7:
a7:d9:f7:a4:61:59:f1:22:2a:c0:f7:fa:33:ff:09:
b2:f1:38:fc:e3:d9:ad:57:a5:ba:e9:7d:0f:81:60:
f0:7b:9e:3b:b0:9b:0a:a6:fc:14:51:1b:f8:53:99:
bb:e0:b5:e6:e7:2c:d8:5d:b4:20:cb:98:52:c7:a5:
70:8d:38:6c:9e:7b:d6:c7:0a:10:a7:94:47:1a:2c:
29:4c:2c:94:44:7c:b2:7a:7a:e6:b1:98:52:f8:ca:
76:4d:13:59:a1:a3:81:05:49:5f:84:cc:eb:5d:9c:
66:44:31:7a:b3:94:90:c4:5f:20:de:12:31:74:c2:
be:6c:e9:2c:8e:c3:43:ea:31:99:82:a0:80:7f:05:
b3:e1:bf:3d:6d:2e:21:95:da:11:a6:91:42:b7:54:
e0:2c:41:53:6e:01:bd:45:48:7c:47:6b:d9:45:a5:
0a:90:d2:fb:d6:af:f4:5b:11:db:06:2e:7a:74:61:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:71:FA:8D:16:0E:C0:04:73:3F:A2:75:A4:20:44:2D:23:D4:1D:91
X509v3 Authority Key Identifier:
keyid:CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/EECBCEBE6E3511EABDE26D73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.176.0/22
202.9.16.0/20
IPv6:
2405:db00::/32
Signature Algorithm: sha256WithRSAEncryption
ae:25:ec:f8:6d:f3:3c:09:05:a8:a9:8d:24:7c:d1:39:22:a1:
69:93:12:af:a9:80:e2:c6:83:72:45:3c:71:0c:0e:c2:c1:b0:
13:2a:e6:d8:a6:42:aa:56:0d:14:60:93:8d:29:a4:d3:0a:55:
17:ef:df:bb:b0:a7:47:0c:03:ec:f2:d8:1b:ab:78:30:9d:73:
67:05:34:c4:40:40:b6:97:f9:39:b5:46:00:66:dd:18:44:10:
de:ba:22:3f:1c:48:cf:5d:4e:dd:e7:85:34:bb:fd:ff:35:ef:
9a:c2:7d:ea:ee:a6:16:48:d8:42:51:0a:85:2b:8c:cf:30:a4:
e9:1c:ce:8d:c5:af:3a:34:4b:eb:97:ed:14:94:9d:0e:96:a9:
5c:6c:2f:c8:aa:a8:be:8f:66:a9:be:1d:50:d0:33:12:51:b8:
d7:32:b1:1c:2e:3d:85:5f:d7:a4:f4:04:71:8b:99:ae:90:55:
70:2d:65:f0:ff:36:98:d0:ca:2c:90:22:54:b2:ae:22:23:e5:
63:04:8c:34:35:4b:24:83:39:eb:a4:4d:95:53:da:35:3b:16:
47:c2:34:28:15:1f:80:a0:b4:1c:e5:4e:6c:fc:20:1c:f4:3e:
fb:45:c6:f0:cf:5b:e7:a5:ee:ec:20:1b:02:b8:48:b5:cc:2a:
ae:66:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:46 2025 by rpki-client