Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/99DD3300109C11ED9A334268C4F9AE02.roa
File: 99DD3300109C11ED9A334268C4F9AE02.roa (raw, json)
Hash identifier: 6i9CrNynZPdag3g9ggvoTjj6tVFmvGRjLPHVoo9+Vt0=
Subject key identifier: 5A:3D:E5:FB:C2:05:AB:18:0B:85:68:17:43:DF:25:73:F8:49:7B:5C
Certificate issuer: /CN=A9129FD1/serialNumber=6C6989AF18EEAFDE0CAF2EEBB514883C75ED4456
Certificate serial: 07F3
Authority key identifier: 6C:69:89:AF:18:EE:AF:DE:0C:AF:2E:EB:B5:14:88:3C:75:ED:44:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGmJrxjur94Mry7rtRSIPHXtRFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/99DD3300109C11ED9A334268C4F9AE02.roa
Signing time: Sun 31 Jul 2022 06:47:10 +0000
ROA not before: Sun 31 Jul 2022 06:47:10 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 136516
IP address blocks: 103.91.146.0/24 maxlen: 24
103.91.147.0/24 maxlen: 24
2403:6640::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2035 (0x7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129FD1
Validity
Not Before: Jul 31 06:47:10 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62e6256e-06e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:2d:58:a6:3f:eb:ff:56:fb:83:5f:4b:19:
59:93:b5:82:0f:ab:5a:25:a0:7e:2b:80:4a:21:b2:
67:15:22:c3:d9:cc:2c:0d:e8:d9:b0:07:d4:17:7e:
84:16:da:ac:1d:ad:de:1c:bb:3d:8d:7d:4b:05:8a:
27:3b:23:a5:be:d2:fa:9d:40:45:76:b6:04:ea:bb:
e1:40:04:10:20:32:c5:b0:61:9b:e3:13:cf:a2:37:
17:75:80:10:c3:b4:a8:c4:8c:46:3c:3b:51:6a:42:
4a:3a:ee:fc:8d:70:7a:89:23:e4:58:07:43:84:c0:
3e:4f:0c:db:3e:0b:2c:96:4a:3b:3b:d4:10:cb:79:
29:df:bd:fc:b2:11:97:de:f8:b5:ac:d8:90:c5:b7:
60:ef:f4:a0:e8:7b:87:d5:fe:8e:93:82:0f:4d:6f:
04:5e:81:d3:c4:6c:fc:af:9f:5b:92:1f:ec:81:4d:
a5:23:9b:bc:29:5c:6d:08:21:e9:b2:03:45:5f:68:
e3:e8:81:48:8d:3b:20:df:f2:8d:30:74:47:65:cf:
c8:d8:d8:e0:32:ef:1d:ea:64:63:17:7d:1d:cb:47:
4b:87:8c:d5:cd:eb:1c:20:99:68:c9:68:f5:46:bf:
5e:51:16:55:8c:c6:35:a0:cc:cb:d6:bf:8d:cd:71:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3D:E5:FB:C2:05:AB:18:0B:85:68:17:43:DF:25:73:F8:49:7B:5C
X509v3 Authority Key Identifier:
keyid:6C:69:89:AF:18:EE:AF:DE:0C:AF:2E:EB:B5:14:88:3C:75:ED:44:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/bGmJrxjur94Mry7rtRSIPHXtRFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGmJrxjur94Mry7rtRSIPHXtRFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FD1/F85C25E2651F11EABB632C6DC4F9AE02/99DD3300109C11ED9A334268C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.146.0/23
IPv6:
2403:6640::/32
Signature Algorithm: sha256WithRSAEncryption
03:ee:0d:e0:d5:e0:ef:bd:4f:c8:b1:00:ad:c8:e5:79:03:69:
25:47:bc:40:3e:7b:0e:39:7c:9d:22:dd:2b:fc:10:1a:17:89:
98:c7:89:35:75:5c:85:cc:1b:7e:d6:23:9c:ee:a5:8c:46:ed:
74:16:49:de:6e:69:ec:bc:3b:8a:bf:c9:51:b6:a2:6c:73:aa:
09:53:16:27:c6:1b:e6:ea:46:64:2f:c0:bf:81:cb:80:9e:ac:
66:1d:0d:1e:10:9d:f1:59:7e:2b:24:68:b9:65:8f:14:fb:24:
b2:50:58:b7:1c:54:e4:06:d3:52:a5:d8:b1:43:52:f0:29:5a:
99:86:46:47:7c:04:df:c0:74:bb:37:6f:cc:54:da:bb:68:0d:
e3:ae:6b:be:13:7e:4d:7a:89:15:04:41:af:3f:f9:a6:cb:80:
8a:4b:e4:77:7e:e3:54:80:de:27:28:ff:7c:ab:e9:cd:d2:7a:
8c:1c:24:52:02:0f:69:b2:6b:c9:69:6d:4c:92:73:fc:f0:67:
4d:20:62:3f:df:ff:a9:1c:10:fd:48:c8:3a:7e:ff:05:4d:d5:
2e:ad:ed:0e:57:82:da:50:25:13:4f:c9:8a:bd:cb:19:a9:3b:
e2:44:52:ae:5e:ee:b4:61:50:e0:f3:99:9a:73:d4:45:3b:1f:
f7:25:ea:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:44:53 2025 by rpki-client