Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/9DE3DEAEAC9E11EFBAC6A027C4F9AE02.roa
File: 9DE3DEAEAC9E11EFBAC6A027C4F9AE02.roa (raw, json)
Hash identifier: TvtT1Oa3KekcpLOO3lB33TtpOxnVn3h062NADWWRlOE=
Subject key identifier: 4E:78:4F:73:DE:B4:44:B6:B1:BF:E1:A7:8A:5E:C9:6C:CF:13:FF:E3
Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Certificate serial: 017C
Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/9DE3DEAEAC9E11EFBAC6A027C4F9AE02.roa
Signing time: Wed 27 Nov 2024 09:21:59 +0000
ROA not before: Wed 27 Nov 2024 09:21:59 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 150681
IP address blocks: 103.53.160.0/23 maxlen: 24
2400:cae0::/32 maxlen: 32
2400:cae0::/36 maxlen: 36
2400:cae0::/48 maxlen: 48
2400:cae0:1::/48 maxlen: 48
2400:cae0:2::/48 maxlen: 48
2400:cae0:3::/48 maxlen: 48
2400:cae0:4::/48 maxlen: 48
2400:cae0:5::/48 maxlen: 48
2400:cae0:6::/48 maxlen: 48
2400:cae0:7::/48 maxlen: 48
2400:cae0:8::/48 maxlen: 48
2400:cae0:9::/48 maxlen: 48
2400:cae0:a::/48 maxlen: 48
2400:cae0:b::/48 maxlen: 48
2400:cae0:c::/48 maxlen: 48
2400:cae0:d::/48 maxlen: 48
2400:cae0:e::/48 maxlen: 48
2400:cae0:f::/48 maxlen: 48
2400:cae0:1000::/36 maxlen: 36
2400:cae0:2000::/36 maxlen: 36
2400:cae0:3000::/36 maxlen: 36
2400:cae0:4000::/36 maxlen: 36
2400:cae0:5000::/36 maxlen: 36
2400:cae0:6000::/36 maxlen: 36
2400:cae0:7000::/36 maxlen: 36
2400:cae0:8000::/36 maxlen: 36
2400:cae0:9000::/36 maxlen: 36
2400:cae0:a000::/36 maxlen: 36
2400:cae0:b000::/36 maxlen: 36
2400:cae0:c000::/34 maxlen: 34
2400:cae0:c000::/36 maxlen: 36
2400:cae0:d000::/36 maxlen: 36
2400:cae0:e000::/36 maxlen: 36
2400:cae0:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116907
Validity
Not Before: Nov 27 09:21:59 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6746e4b7-92c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:e5:04:9b:94:07:32:f1:78:dd:eb:36:a7:
4a:e1:38:b3:12:b3:e3:06:99:97:04:df:d3:78:ea:
ab:b1:9a:2e:ef:3d:5a:63:0a:83:6b:26:5e:7c:67:
a2:04:53:b1:42:7e:ca:e9:fe:12:fb:05:fe:bf:b4:
96:51:70:bc:53:5e:e0:b9:a3:77:b2:e1:b1:34:9c:
2b:bd:fb:76:73:b7:06:c7:79:ab:89:6d:42:e6:4f:
19:6a:05:c6:97:d3:71:3c:ec:7e:07:e3:d5:24:b2:
94:29:92:a0:c6:83:b7:9d:8b:bb:99:e9:23:80:3a:
fc:97:70:2b:6e:40:35:93:a7:94:38:a8:cb:1b:ee:
7d:70:30:2b:b6:9e:4b:53:14:f7:bc:09:ce:0e:93:
fd:27:eb:30:8a:76:2e:96:65:80:b6:09:f1:89:c9:
e8:82:66:b5:c6:fb:7c:b3:6c:31:bd:05:75:fb:2e:
d5:80:81:49:f4:55:17:f6:ba:18:a1:7a:5b:e2:ed:
97:c4:3e:f3:bc:e4:59:b1:2f:d8:69:64:97:72:04:
a2:e9:c7:d0:66:f0:9d:30:ca:03:f2:35:a3:05:b3:
78:95:28:ce:6d:3c:c3:bf:8d:67:8a:05:ad:33:32:
95:97:17:04:c9:da:4f:0d:f7:05:87:17:41:3c:13:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:4F:73:DE:B4:44:B6:B1:BF:E1:A7:8A:5E:C9:6C:CF:13:FF:E3
X509v3 Authority Key Identifier:
keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/9DE3DEAEAC9E11EFBAC6A027C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.53.160.0/23
IPv6:
2400:cae0::/32
Signature Algorithm: sha256WithRSAEncryption
58:8a:34:1d:86:a3:58:f1:2c:d7:96:29:da:cb:35:1a:a0:ac:
72:8c:7e:7e:4b:85:6c:82:e1:c2:4d:96:b8:d9:ca:b4:79:41:
5a:00:49:66:2e:5c:55:b6:8a:a5:13:8c:8e:72:c0:f2:52:03:
f3:1f:67:99:d4:d7:39:4a:f7:bb:89:26:d4:65:1b:f1:c5:8c:
88:40:84:d7:75:06:2a:32:21:3c:1d:30:2e:14:98:43:44:5c:
0f:f9:68:3b:84:ad:c3:2c:ff:e8:89:bf:90:a7:fa:2f:cb:a0:
44:cb:b5:b5:f7:49:ee:8d:2c:ed:82:fd:a1:81:d5:ec:dc:d0:
be:16:5f:32:30:ec:33:3e:c6:22:1f:c3:83:9d:77:94:07:d4:
2c:6c:71:5e:71:d6:d5:f5:57:7c:5e:08:ba:17:68:ac:bc:a9:
17:1f:89:cc:63:ab:e8:95:27:72:e1:90:7a:f6:7b:48:c0:c0:
8a:52:48:b8:fe:55:27:5f:7a:f1:db:1a:b8:06:51:5f:90:03:
5e:73:9d:6d:b3:8b:90:b9:a6:b7:84:04:7d:a3:4c:38:e4:3e:
87:7d:43:b8:ea:c1:43:01:09:98:ea:e5:c4:40:c6:21:f2:d2:
65:63:2c:70:21:80:d1:ee:57:ca:5d:2a:69:22:51:a0:d9:2e:
41:cc:f7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:10:52 2025 by rpki-client