Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/3DC507001C8F11E9990F665CC4F9AE02.roa
File: 3DC507001C8F11E9990F665CC4F9AE02.roa (raw, json)
Hash identifier: /Xd8kuiaq1Q5eF4PAbm/NjtYZtrHCHK1WvQKBeYKntw=
Subject key identifier: E6:23:F1:A4:2A:54:E6:67:9A:AD:C7:F5:99:00:2B:AB:5D:21:EF:D3
Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial: 1846
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/3DC507001C8F11E9990F665CC4F9AE02.roa
Signing time: Tue 04 Feb 2025 16:54:20 +0000
ROA not before: Tue 04 Feb 2025 16:54:20 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 395734
IP address blocks: 103.83.88.0/24 maxlen: 24
103.83.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6214 (0x1846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133953
Validity
Not Before: Feb 4 16:54:20 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a2463b-344e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:ed:51:c0:2b:1b:28:02:c6:cb:f5:fe:22:
c9:bc:c6:e0:17:ab:e2:e6:c1:55:fa:55:ec:99:4d:
c0:66:9f:21:ae:b7:94:18:69:a4:3c:4d:4c:02:76:
c6:02:7f:25:26:6a:be:10:af:a8:2f:9f:3c:7d:4e:
78:00:45:18:d6:28:75:0a:67:ea:4e:e6:b5:e8:42:
ec:12:2b:77:50:79:8c:5a:27:d7:32:ba:ca:42:a9:
4f:94:d2:37:4e:78:a3:ec:eb:17:12:d2:66:4b:bf:
5f:4d:07:75:ce:fe:9c:56:26:74:e0:c8:77:2e:b2:
ba:b6:fc:4b:54:8c:ad:7a:0b:9f:5c:df:9e:a8:71:
5d:30:b3:4f:f3:d2:bd:ef:09:e5:4e:cc:d3:d4:1b:
ae:eb:ed:17:07:e4:08:c1:af:7b:23:2c:c3:d6:81:
22:9e:42:fb:0d:a2:49:e6:ee:6e:fd:46:ef:3e:d8:
29:38:18:b1:60:c0:55:72:d7:b3:d7:7b:45:7f:39:
1c:a0:1c:06:85:b8:5b:b4:40:4b:9d:ac:b3:43:51:
41:48:60:32:34:04:f0:76:54:7b:c6:96:79:16:c0:
c1:30:2c:60:5c:f7:6e:eb:57:08:74:93:78:29:13:
e4:89:1f:b4:27:8e:51:60:9a:f0:3c:aa:87:d2:e7:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:F1:A4:2A:54:E6:67:9A:AD:C7:F5:99:00:2B:AB:5D:21:EF:D3
X509v3 Authority Key Identifier:
keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/3DC507001C8F11E9990F665CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.88.0/24
103.83.90.0/24
Signature Algorithm: sha256WithRSAEncryption
42:dc:61:f5:dc:6c:c1:aa:a2:48:31:88:73:e2:1f:9c:a6:77:
26:6b:f3:c7:7e:76:e5:a8:4e:43:40:7e:58:b5:a1:f1:12:cf:
92:b6:cb:66:cc:db:2a:e0:3e:e2:58:5c:de:1c:95:3e:7f:9e:
e6:d7:06:49:1a:f9:b6:c1:e0:aa:f8:55:61:f4:26:1a:9c:46:
cf:0c:fa:31:f2:d5:ec:6e:8c:c7:14:14:a0:2b:e8:97:74:7e:
be:fb:ff:98:c7:1e:d0:ee:7d:46:c7:90:a2:37:3d:24:61:e1:
4d:fe:ca:00:b8:ac:fe:da:0c:7c:19:ae:77:8d:45:15:eb:6a:
33:42:d2:56:38:dd:ae:2c:67:ad:c5:31:be:e6:f5:c9:a1:e6:
da:7f:c6:71:ce:ed:e0:66:d8:5f:21:fe:f0:74:7b:65:cc:0a:
37:01:7d:8c:80:bc:0d:33:99:f4:fc:6b:ce:19:17:59:01:9d:
32:3c:76:3b:1c:f0:20:83:ff:8a:5c:53:76:28:39:e7:d9:e2:
a5:bc:d2:bb:50:57:c7:c7:32:38:d4:c7:58:04:ac:32:68:eb:
80:27:b8:39:b4:e9:93:4d:7e:07:e9:e9:5a:3b:09:77:f7:e4:
c6:9f:64:19:2e:75:6c:61:7a:f4:aa:9a:f2:d7:05:07:f1:1e:
4b:8e:b5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:29 2025 by rpki-client