Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/1332B7BCEC7211EFBA9EF77FC4F9AE02.roa
File: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (raw, json)
Hash identifier: KqdOpgL/gYbDRcrvPzkfG4MiXc7ci+kAVjNAFITHW4M=
Subject key identifier: 1C:35:F5:38:E7:FA:F0:85:13:3F:0F:48:BB:47:D1:09:8F:F1:1A:15
Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Certificate serial: 034B
Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/1332B7BCEC7211EFBA9EF77FC4F9AE02.roa
Signing time: Sun 16 Feb 2025 14:26:57 +0000
ROA not before: Sun 16 Feb 2025 14:26:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10111
IP address blocks: 103.183.218.0/24 maxlen: 24
103.183.219.0/24 maxlen: 24
2400:6460::/40 maxlen: 40
2400:6460:10::/44 maxlen: 48
2400:6460:f0::/48 maxlen: 48
2400:6460:f1::/48 maxlen: 48
2400:6460:f2::/48 maxlen: 48
2400:6460:ff::/48 maxlen: 48
2400:6460:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143078
Validity
Not Before: Feb 16 14:26:57 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b1f5b0-d9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:53:c0:e9:f0:b2:17:36:6b:c4:a1:59:5d:
80:3c:4f:ad:a3:df:bc:30:ec:52:10:a9:87:4f:ef:
b4:d7:1c:46:1d:6a:c3:41:ae:44:78:ec:a1:0a:51:
3b:a6:32:be:77:ba:ad:f9:8c:ae:56:52:b4:53:bb:
0a:0a:67:3b:a4:22:1a:fc:e6:6d:0d:20:86:3b:ff:
2e:03:46:c8:1a:e0:70:b5:ae:2f:a2:68:d9:68:cd:
67:f8:66:8b:db:06:f4:c8:96:52:14:3e:0e:3c:71:
0a:86:cb:5b:4e:85:40:8f:55:b7:28:8c:fb:a1:af:
0b:46:1a:c4:93:02:17:aa:da:97:4f:a2:d4:b6:35:
45:35:e8:56:7f:c5:09:ce:ee:b5:9a:a7:b8:17:c5:
50:b6:e5:95:4a:67:47:39:7e:01:17:35:c2:54:35:
d6:ef:f5:fd:aa:d3:54:16:64:77:70:0f:fb:a8:a0:
b9:2b:31:4f:7e:d0:53:e6:2c:12:cc:91:b3:8e:62:
42:c2:b0:57:ee:c6:bd:ee:24:88:f4:f0:75:a0:11:
4c:1c:ba:f8:ee:0d:23:16:af:73:d2:0c:20:29:57:
a4:1d:a8:51:30:9f:2d:73:01:df:f5:a8:8b:9f:8d:
b5:ae:cd:f4:12:5e:a0:74:9c:06:ce:fe:e3:4d:e9:
2e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:35:F5:38:E7:FA:F0:85:13:3F:0F:48:BB:47:D1:09:8F:F1:1A:15
X509v3 Authority Key Identifier:
keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/1332B7BCEC7211EFBA9EF77FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.218.0/23
IPv6:
2400:6460::/39
Signature Algorithm: sha256WithRSAEncryption
92:c3:7c:f6:8f:c9:3a:f3:0d:e2:e9:93:2b:9b:25:eb:e2:dc:
05:1f:db:00:ea:dd:36:9a:01:0a:4b:30:8c:41:c8:eb:f1:a7:
23:42:f9:3b:6a:d9:cf:b0:72:32:b3:3c:09:ea:51:6a:15:e4:
a5:19:ec:03:9f:fc:46:07:6e:16:56:b5:36:23:e1:84:fa:eb:
f0:8a:8b:58:4c:bf:72:59:50:a6:50:51:71:7a:1f:93:4d:20:
f0:b8:6f:bc:3f:3d:b8:1d:3e:c9:ce:f4:bf:c6:58:f0:b9:2f:
3f:db:9d:4e:bb:e0:dc:b2:68:cb:06:1a:64:5c:d2:dd:f2:a0:
40:90:37:21:cb:88:39:32:7b:81:54:74:e8:05:0b:be:41:b1:
bc:3a:7d:aa:35:4d:c0:81:c5:30:cf:d7:d0:da:76:c4:61:fe:
0f:13:99:37:29:9e:f1:b5:b6:fb:39:4b:b3:e1:86:1c:78:a1:
51:df:f1:1e:12:db:03:f5:d0:dd:3c:63:a5:24:f9:b8:1d:ce:
a7:83:27:51:b3:4b:85:df:b8:de:91:c1:fc:7e:23:18:7a:7e:
9d:ed:d2:7e:8b:44:02:58:a7:32:b8:9c:e3:90:ca:d3:66:80:
c8:7c:21:51:c6:f0:f2:dd:60:cd:07:13:21:2e:0d:16:d7:4f:
30:76:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:29:33 2025 by rpki-client