Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa
File: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (raw, json)
Hash identifier: EsEKbWC4WA6ZCtUbUMwn5+A+yLzgnyso48+dg3mdnLg=
Subject key identifier: C2:C9:00:7A:25:E2:0E:ED:C2:59:F0:E2:34:DC:5A:A1:98:FD:0E:48
Certificate issuer: /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial: 0832
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa
Signing time: Mon 12 Aug 2024 21:18:54 +0000
ROA not before: Mon 12 Aug 2024 21:18:54 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 29066
IP address blocks: 103.66.180.0/22 maxlen: 24
103.244.112.0/22 maxlen: 24
2406:f380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098 (0x832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147C4C
Validity
Not Before: Aug 12 21:18:54 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66ba7c3d-29c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:f8:cf:fd:9e:5c:9d:bc:ea:25:9c:f4:b4:
d7:cf:53:e2:71:ec:1a:e0:17:5f:71:c2:5f:8d:0c:
31:7e:19:a2:96:59:92:6f:b9:f1:89:9d:2b:50:f9:
fb:c1:b4:87:91:06:88:15:a5:fe:a5:fa:cb:e9:20:
f8:32:3a:30:b2:53:c2:98:b8:10:ef:92:72:c9:a9:
05:56:54:dc:aa:a3:2f:ee:e9:75:9b:d2:57:10:f6:
6c:71:66:a3:10:6d:90:fa:15:76:b6:51:fd:d5:0f:
3c:94:46:1e:84:8d:57:3f:f4:8d:89:4e:31:f6:6d:
3b:d6:67:9f:b7:ef:60:61:fa:d0:91:6b:dd:d8:76:
39:a6:6f:4f:75:cf:c2:69:f4:1a:8b:4a:21:91:3b:
e6:42:1c:74:c0:2e:06:96:c2:9d:48:c5:87:4b:4c:
76:cb:27:36:8a:52:12:03:84:86:ac:83:60:9b:e5:
be:e1:56:62:5b:53:fe:b6:eb:bf:0f:a4:e3:20:6f:
25:84:c4:20:60:0e:ed:74:ef:06:84:ce:db:92:ac:
62:2d:c4:7e:af:3e:9c:d6:67:af:73:f9:bc:90:83:
48:f6:04:dd:3f:21:e8:c2:0b:e2:87:92:97:3e:64:
c8:cd:55:41:35:bf:b5:60:9c:10:d0:5a:d5:e6:d6:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C9:00:7A:25:E2:0E:ED:C2:59:F0:E2:34:DC:5A:A1:98:FD:0E:48
X509v3 Authority Key Identifier:
keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/9FB96E16929A11EE8CC5D033C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.180.0/22
103.244.112.0/22
IPv6:
2406:f380::/32
Signature Algorithm: sha256WithRSAEncryption
82:2d:53:20:e7:24:89:fb:8d:b1:dc:42:0e:88:91:84:db:d5:
f4:30:a4:d0:45:22:f1:02:70:cf:ad:a0:9b:ed:55:a8:05:05:
25:ce:b3:98:97:74:bb:a8:07:36:99:2e:1e:22:92:0e:b4:a0:
fd:d0:c1:25:79:92:e6:30:45:e4:fc:15:de:11:45:7b:a0:bf:
0b:2e:5a:5d:fa:28:0b:65:1b:76:2b:9c:c8:9e:0c:b7:f5:8d:
89:30:a1:0a:d1:3f:d1:ba:bc:fb:7c:fa:c4:75:ec:bd:4e:7e:
38:46:d7:05:6b:00:d8:ff:32:5a:ff:5d:7b:4e:f1:bf:16:d0:
89:09:d1:1a:b2:33:00:04:ac:3a:92:2c:11:2a:a4:84:d9:77:
ca:fd:22:29:d4:04:66:a5:53:6a:a7:96:13:d7:59:9c:10:11:
7f:ce:2d:18:a4:01:47:d9:9b:36:e8:5f:af:b7:2f:8c:56:a0:
86:80:91:f1:fa:fa:b9:7e:81:58:23:ca:98:a8:48:44:49:da:
b6:6a:0c:41:14:47:fb:cf:06:dc:99:11:84:46:ec:83:2d:2d:
01:e3:8a:66:3a:32:10:84:8e:6d:89:90:b7:02:57:dd:eb:de:
64:bf:24:29:4f:47:33:37:a1:1e:4b:74:fb:81:4e:20:52:79:
2b:95:a3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:51 2025 by rpki-client