Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/1D3589E875AF11EC866EEF53C4F9AE02.roa
File: 1D3589E875AF11EC866EEF53C4F9AE02.roa (raw, json)
Hash identifier: pJsd3auztkAG0ZglRxVSFOGCBnUaQsBNRyP6xIkzkvA=
Subject key identifier: C0:CB:49:1E:3E:E2:B7:00:65:A7:4C:68:76:4D:33:46:69:94:C2:9F
Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF
Certificate serial: 075E
Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/1D3589E875AF11EC866EEF53C4F9AE02.roa
Signing time: Tue 04 Feb 2025 21:11:09 +0000
ROA not before: Tue 04 Feb 2025 21:11:09 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 7575
IP address blocks: 103.84.224.0/24 maxlen: 24
103.84.225.0/24 maxlen: 24
103.84.226.0/23 maxlen: 24
2400:a4c0::/48 maxlen: 48
2400:a4c0:e025::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886 (0x75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119ED6
Validity
Not Before: Feb 4 21:11:09 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a2826d-ad98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:b7:89:0b:d6:b7:21:69:cf:37:b9:97:bd:
97:4c:66:29:cf:15:52:05:c6:f9:45:10:c4:91:7a:
ff:a6:85:5e:6a:56:d5:43:e4:0f:9c:3a:a6:55:ea:
c9:11:5f:e4:4c:be:4d:89:0f:29:9c:34:ba:25:1f:
19:aa:f8:ec:9e:af:41:9c:d7:9c:44:e6:44:3c:72:
40:68:21:ca:7a:ae:99:aa:97:30:c0:46:dd:17:19:
a6:0e:7f:7c:d1:cf:57:8d:e7:c2:59:4f:86:ad:b4:
cf:7d:20:d9:0e:a1:ed:af:44:47:bc:29:fc:80:e4:
63:dd:f8:f5:23:97:ab:90:30:d3:63:80:ed:6f:05:
ec:13:39:81:72:fb:38:75:7d:72:f0:b3:a8:a0:e8:
b2:dd:59:07:62:21:3c:e7:ac:95:10:6b:92:03:f8:
8b:5a:b1:2f:e6:0b:d6:2e:65:bf:92:51:6c:73:28:
e0:5e:80:2b:f4:ae:4c:fd:ff:02:3e:48:46:81:94:
bc:94:6d:5a:9a:93:c2:c7:aa:c1:f5:c7:79:f0:dc:
cf:93:14:e4:fc:51:da:1a:40:0d:d6:0f:1e:0f:ad:
9e:37:0b:99:ed:d8:0b:90:2f:9a:d1:28:2a:67:4a:
2d:51:ab:c1:4b:f8:d4:2f:e6:f4:94:e6:f2:ae:5e:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CB:49:1E:3E:E2:B7:00:65:A7:4C:68:76:4D:33:46:69:94:C2:9F
X509v3 Authority Key Identifier:
keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/1D3589E875AF11EC866EEF53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.224.0/22
IPv6:
2400:a4c0::/48
2400:a4c0:e025::/48
Signature Algorithm: sha256WithRSAEncryption
8c:1f:7e:ac:98:ca:3a:6a:23:3f:08:42:b1:8e:31:43:6c:71:
c4:78:41:bf:a3:c1:b3:59:b9:55:9f:76:2a:f6:a2:2a:f6:16:
ca:69:75:d7:44:08:83:35:48:59:b3:38:6c:7d:fe:2a:00:35:
98:75:62:3d:74:f9:9b:4b:c5:28:09:a8:89:69:d9:5c:69:09:
be:26:b8:5f:1a:04:b0:b1:c2:0b:4e:d8:dd:b6:b0:92:27:42:
44:dd:02:64:fe:0d:28:a0:44:45:c7:b1:11:1a:93:11:30:10:
58:70:9a:27:df:5c:9e:38:a8:ae:50:cb:88:7d:de:83:54:46:
04:74:a6:b8:69:49:07:ff:f5:38:6e:c1:be:ed:31:49:21:03:
99:8c:81:8c:28:6d:a1:95:9b:2c:d3:bc:32:cd:ed:df:e6:3c:
b7:94:6a:86:b6:b0:3b:39:ac:87:a7:da:69:32:6b:6b:e2:f0:
a1:98:a4:4f:2e:d1:b5:49:87:bf:32:e6:cb:aa:d4:ec:d9:27:
02:88:75:35:7e:e3:36:eb:65:c7:87:99:42:b3:1d:e6:f2:0a:
00:8b:c9:78:65:75:b8:a2:6b:a6:b6:e2:28:d5:f1:c9:73:f0:
8e:0b:64:d4:b4:e0:22:26:d8:8e:0b:6c:34:df:da:db:1d:87:
ce:99:d7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:20:57 2025 by rpki-client