Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa
File: 96BC85E8145711EF8ED9C174C4F9AE02.roa (raw, json)
Hash identifier: r9L4CmzavsqqBK92JPFfdFnoYkrBESFuwdtJEjg40XU=
Subject key identifier: 4B:D0:10:64:A6:3B:7B:1D:57:4C:90:4D:AA:55:59:45:50:8B:33:F7
Certificate issuer: /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7
Certificate serial: 0209
Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa
Signing time: Wed 17 Jul 2024 03:25:19 +0000
ROA not before: Wed 17 Jul 2024 03:25:19 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 38203
IP address blocks: 103.190.204.0/23 maxlen: 24
2400:9220::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B751
Validity
Not Before: Jul 17 03:25:19 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6697399f-09c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:85:35:65:5a:f5:f9:f6:c6:d5:f4:46:d6:
72:4c:5f:9c:a9:46:cc:d6:1e:63:2d:e8:60:c6:54:
a6:f9:83:63:21:da:25:20:13:a0:c0:31:4a:fd:6f:
57:2e:d4:e4:ca:bf:06:57:d3:e3:de:2b:bc:56:a0:
8a:78:7e:3e:08:33:a1:dd:75:4c:b9:e7:a3:c9:78:
81:86:5b:f1:99:3f:da:ad:35:1d:94:dc:04:f3:90:
7a:a1:99:38:0b:83:fe:6c:e1:85:e1:d9:03:ca:af:
4a:d8:85:03:3d:8c:44:87:dc:12:bb:39:05:0e:b4:
de:63:34:3b:1c:6e:a8:c3:7a:2d:68:fa:2d:af:10:
49:0e:74:9a:f1:ca:08:68:46:25:a8:8d:72:92:6d:
3c:3b:76:58:b2:14:e1:88:b7:08:88:7c:fc:b4:08:
f1:28:26:9d:cd:9d:ca:6e:c4:b9:4c:54:0e:40:a4:
6f:72:e3:d4:26:46:18:ce:21:eb:48:31:87:c0:cb:
a5:7b:f2:fe:aa:79:83:ce:2c:c2:1a:31:04:64:f0:
b4:c4:4c:1c:c3:bd:53:b2:e4:23:6f:af:35:c8:04:
83:1f:bd:c9:b6:76:33:1f:d2:06:da:7b:08:0f:00:
4c:5e:92:55:54:c6:ec:01:fe:17:cb:c5:cf:e7:cc:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D0:10:64:A6:3B:7B:1D:57:4C:90:4D:AA:55:59:45:50:8B:33:F7
X509v3 Authority Key Identifier:
keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/96BC85E8145711EF8ED9C174C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.204.0/23
IPv6:
2400:9220::/32
Signature Algorithm: sha256WithRSAEncryption
26:b7:48:b6:d7:6a:5e:20:46:e3:fc:70:71:f7:3d:8c:e8:ed:
85:b6:c8:6c:29:33:5f:ee:92:76:ab:07:aa:8d:c6:64:e3:a6:
69:c0:13:56:ce:11:91:52:48:a6:60:23:a5:d1:1b:2e:67:fe:
a1:72:60:22:1e:c0:66:3e:b0:3c:bf:ab:fe:55:c6:8b:21:ed:
e5:53:d6:0c:99:95:55:46:12:e9:a6:cc:25:3b:96:87:ed:f4:
6c:78:41:31:8e:71:e1:4b:94:71:06:17:92:ea:98:2c:b4:e8:
55:f9:3e:f2:9c:1d:5d:ef:a2:66:75:06:3e:63:eb:7e:b6:ba:
9b:28:96:8e:2b:8a:5f:8f:a7:cb:6c:be:1e:69:5d:2b:28:f6:
98:c8:7d:1f:21:e6:d4:80:d4:8b:cb:bb:9b:0a:d7:c9:ae:ae:
50:95:60:47:92:7c:f5:74:58:e1:90:c9:8e:f4:14:5d:c0:da:
6d:44:6c:6e:25:6a:70:10:00:08:51:32:85:e0:bf:30:48:78:
56:40:50:08:dd:9d:f3:36:49:cf:a2:e8:1f:60:f2:3d:73:61:
92:95:26:e8:03:92:8a:9a:ca:40:64:fd:d5:00:86:cb:00:e6:
8d:22:32:a5:86:17:6d:c8:c6:a2:f5:ee:e1:e9:d5:65:f7:1b:
13:08:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:01:14 2025 by rpki-client