Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/634D76E0BF0611EF828A9B1BC4F9AE02.roa
File: 634D76E0BF0611EF828A9B1BC4F9AE02.roa (raw, json)
Hash identifier: V4RKFSmNRj03Tq+ZAqr6zXqTmdx8zxzXkRxV3WpI14M=
Subject key identifier: 87:86:BF:7B:77:7A:48:99:61:1D:45:68:FA:FF:CE:0D:57:9D:DE:82
Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial: 2641
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/634D76E0BF0611EF828A9B1BC4F9AE02.roa
Signing time: Sat 21 Dec 2024 03:39:17 +0000
ROA not before: Sat 21 Dec 2024 03:39:17 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 139870
IP address blocks: 103.139.234.0/23 maxlen: 23
103.139.234.0/24 maxlen: 24
103.139.235.0/24 maxlen: 24
150.107.48.0/23 maxlen: 23
150.107.48.0/24 maxlen: 24
150.107.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9793 (0x2641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DB0
Validity
Not Before: Dec 21 03:39:17 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67663864-6287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:09:23:17:17:79:e4:ab:2a:7d:bc:6b:e7:
50:b5:41:62:bd:90:e6:3e:c9:51:14:51:93:0b:4f:
19:5e:d8:9c:3c:5f:21:8b:c6:5c:e9:d8:85:8c:ee:
32:ee:24:0b:f0:23:a6:82:7b:5d:88:6c:b6:25:bc:
cd:aa:49:2b:ff:a0:a9:72:ca:36:af:24:7d:d2:6b:
4f:67:d9:9b:98:c3:64:64:39:06:c5:48:ce:c6:4b:
e0:d1:36:e9:45:e1:50:ad:f3:68:51:5d:e2:25:9d:
30:67:76:5e:a8:34:30:ee:87:2d:f0:70:bd:4c:e7:
d5:0a:a1:9b:a0:b5:01:f2:4b:8a:54:1a:8c:32:ed:
0a:d5:4b:a5:7c:05:2b:0d:60:df:ff:bb:00:11:63:
fa:e8:25:c5:3b:a0:6d:a8:48:fa:2a:71:d2:99:c2:
50:77:b6:6d:1a:aa:6b:fc:e9:7f:de:57:11:27:d7:
5f:e3:b4:81:e3:36:7e:8f:f7:5e:80:b6:80:d1:32:
f8:70:d1:b3:d1:0c:7d:e1:30:7e:99:1f:e4:3b:d8:
97:17:61:b2:80:f7:57:07:ee:78:c1:fb:3f:db:a7:
bd:2d:48:ec:3c:20:b6:0d:07:8f:64:62:02:76:f5:
ec:eb:c8:7f:88:c5:1b:05:b3:ec:f7:52:ad:d6:3c:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:86:BF:7B:77:7A:48:99:61:1D:45:68:FA:FF:CE:0D:57:9D:DE:82
X509v3 Authority Key Identifier:
keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/634D76E0BF0611EF828A9B1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.234.0/23
150.107.48.0/23
Signature Algorithm: sha256WithRSAEncryption
84:e9:3d:8d:ff:e1:1d:cc:c1:1e:b2:3d:e7:7c:c3:66:00:c1:
2c:b3:4a:11:83:62:b3:57:c7:5b:d6:a1:76:cc:95:a5:88:c0:
21:6b:ad:6b:78:44:26:2e:f7:83:2c:84:11:08:99:d2:25:fe:
47:b0:fc:48:91:19:3f:37:89:45:0f:7d:65:2c:0c:50:45:4d:
d1:2c:b1:78:9b:4a:06:7d:c4:5b:29:58:88:27:4e:59:46:fb:
8c:f9:7f:bc:35:42:87:a9:90:07:a2:9f:4c:4e:b9:1d:26:53:
32:9e:bb:c0:08:7d:42:5d:e6:47:69:9e:84:f4:8b:76:35:3d:
be:82:22:81:66:70:fd:55:2b:5f:1c:d5:97:8e:08:ea:6c:e0:
f1:62:bb:bb:c1:91:93:fa:34:79:06:0c:5e:c8:e4:6c:cf:c6:
f8:f8:bf:22:ab:79:49:ef:83:c0:a4:e5:ff:0c:8f:c4:01:c8:
30:7c:8c:e9:14:f0:63:3a:66:6c:dd:83:a8:12:8f:1d:d8:2f:
d6:56:c8:1b:71:ac:f1:55:b7:94:27:84:6d:f6:78:d1:03:cd:
73:81:ee:72:56:68:6f:01:3d:34:57:3a:67:26:0e:4a:bb:25:
71:6d:28:19:24:99:71:9d:72:43:83:79:91:13:22:fb:91:af:
68:18:e3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:58:01 2025 by rpki-client