Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/803C622E9B9111EDBC921164C4F9AE02.roa
File: 803C622E9B9111EDBC921164C4F9AE02.roa (raw, json)
Hash identifier: cOk9WkbMtekpbvbpWoDS8UUpnz2Yuo9L3yfei4T7i14=
Subject key identifier: E5:4E:ED:9A:59:71:F9:A7:D8:FE:8D:AD:05:01:01:A5:0F:0B:06:53
Certificate issuer: /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
Certificate serial: 09C1
Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/803C622E9B9111EDBC921164C4F9AE02.roa
Signing time: Sat 08 Jun 2024 21:17:24 +0000
ROA not before: Sat 08 Jun 2024 21:17:24 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 58598
IP address blocks: 103.9.88.0/22 maxlen: 22
103.9.88.0/24 maxlen: 24
103.9.89.0/24 maxlen: 24
103.9.90.0/24 maxlen: 24
103.9.91.0/24 maxlen: 24
2403:d700::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EAD0
Validity
Not Before: Jun 8 21:17:24 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6664ca64-9da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:71:cd:dc:b7:55:88:b2:30:70:4e:80:7c:
00:e9:c3:c0:b3:02:81:67:5b:83:45:70:25:d2:2d:
50:19:d4:17:1d:35:f9:37:af:70:f8:79:fb:ff:56:
76:48:33:e0:26:b5:3e:08:a1:a7:ac:61:ef:2b:97:
7c:6c:50:65:ff:91:d5:73:38:ff:7d:1f:34:9d:35:
dc:4d:1b:34:66:43:f2:6a:21:ba:06:20:28:fe:d2:
76:37:34:90:12:88:15:c4:60:80:f5:72:3b:16:e5:
1e:f5:9d:72:30:33:e6:87:23:79:c5:a1:ef:e2:68:
11:82:6e:8a:f0:65:95:44:74:d9:f8:09:2b:33:45:
d4:0a:19:ef:00:b1:07:ba:b9:f0:b1:8a:76:00:e5:
b2:4a:9c:4c:cb:7d:f0:b5:49:8e:5f:68:f0:cc:55:
3f:58:25:f8:0b:4f:e0:5b:65:9e:f6:ba:e1:05:65:
f8:07:be:84:6f:d1:3d:98:33:a5:82:ca:cf:7b:69:
d5:aa:3a:f9:a1:5b:83:db:89:2a:04:c6:bb:2c:5b:
17:06:da:13:eb:a1:39:4d:18:17:89:90:61:bd:cb:
1b:fb:aa:6d:27:da:db:10:4b:54:fe:49:f4:ad:50:
48:2f:d8:e5:8d:b1:3d:e9:da:0f:f3:b1:9b:b8:37:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:ED:9A:59:71:F9:A7:D8:FE:8D:AD:05:01:01:A5:0F:0B:06:53
X509v3 Authority Key Identifier:
keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/803C622E9B9111EDBC921164C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.88.0/22
IPv6:
2403:d700::/32
Signature Algorithm: sha256WithRSAEncryption
b4:5b:0d:3c:6d:67:e6:3c:28:41:ad:11:42:e8:00:ec:53:d0:
1f:52:8e:5e:dd:f9:07:d6:77:1c:b8:91:8f:01:50:e9:5f:36:
32:85:74:55:e0:09:5a:f3:73:c1:ce:d2:b2:14:64:e8:f7:d6:
ef:a9:6a:fe:64:28:be:0e:65:1d:39:d3:9d:85:2a:f2:35:69:
5b:31:65:5d:1e:f8:6d:34:da:2c:44:dc:66:4b:be:66:0d:1c:
c2:d3:1e:9b:8b:95:07:70:14:0a:a0:d5:d3:53:fe:18:c6:9c:
78:a1:92:2c:67:01:fd:a3:24:23:95:d3:bd:63:b8:95:7e:66:
72:5d:67:97:07:22:e6:d3:eb:9a:6c:60:e1:58:5b:01:77:ed:
69:ca:eb:eb:dc:6d:42:03:31:de:db:f6:38:6e:bf:a5:2c:17:
d9:43:54:7b:ac:ed:da:c8:0d:a6:be:c7:b7:22:20:40:a7:2b:
f9:1a:df:8a:5d:85:b1:e6:b5:5e:ab:bd:54:ba:27:b7:8b:92:
c7:73:da:4f:57:cb:52:a8:c8:86:50:c5:23:f8:aa:cd:19:54:
dc:45:ef:26:6b:46:b2:b7:55:5c:ee:fa:43:f9:b4:a1:2b:19:
28:d7:5f:5b:fe:4b:f8:cc:1f:6c:ce:f0:d8:85:1c:12:d6:92:
02:a2:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:43 2025 by rpki-client