Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa
File: E973A832656511EC85A7CA2CC4F9AE02.roa (raw, json)
Hash identifier: sn836Q2nMHQU64NdjOs0ZiA4VlzUNBBTB3I7t0SZgIw=
Subject key identifier: 3D:28:8F:81:BE:34:B9:AF:EB:00:44:8A:DB:AA:36:C6:5A:C6:C5:F8
Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial: 0FBA
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa
Signing time: Wed 18 Sep 2024 18:06:35 +0000
ROA not before: Wed 18 Sep 2024 18:06:35 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 59382
IP address blocks: 103.73.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4026 (0xfba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160856
Validity
Not Before: Sep 18 18:06:35 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66eb16ab-85ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:cd:d5:8c:6b:9d:cf:fa:49:36:98:73:96:
e0:2d:e4:d0:64:1c:ef:71:21:67:84:63:71:1f:b9:
b3:38:6c:d7:0b:ee:e7:08:53:fe:87:3e:58:8c:c1:
e4:ff:c8:bb:b8:3f:d3:dd:65:14:b0:ff:f9:de:7e:
6d:52:94:3c:92:da:70:c5:c6:72:93:92:c3:e7:8c:
3b:2a:68:f3:6f:2e:2f:87:f1:97:4e:ff:d9:e2:34:
26:bf:a4:26:ae:5c:23:09:eb:d5:65:80:0f:49:fe:
03:83:3e:b4:d7:89:8d:41:7a:12:12:e6:22:32:78:
65:80:01:a1:70:65:8c:5e:ca:98:bc:59:4c:d1:5f:
54:8f:59:d3:c8:72:d8:49:0c:65:ec:43:ce:75:bc:
e5:c1:2e:e6:ee:17:aa:78:ce:41:5f:e3:47:53:ab:
62:a7:a3:fd:7a:ce:3e:bb:4f:c0:0d:13:68:8e:ce:
e2:35:19:7a:c6:a7:91:ae:89:31:b1:2b:d4:86:56:
5d:d2:f8:c7:bf:bd:cb:a5:a2:8e:0e:b1:be:e7:7f:
29:29:5a:3d:4e:6b:e3:83:a9:22:0a:9f:2a:10:35:
41:3c:f2:56:6e:d6:99:27:25:e7:4a:25:2d:1f:08:
09:7a:f7:c9:b3:20:3a:fa:f4:b8:33:50:fe:6b:a7:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:28:8F:81:BE:34:B9:AF:EB:00:44:8A:DB:AA:36:C6:5A:C6:C5:F8
X509v3 Authority Key Identifier:
keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.104.0/22
Signature Algorithm: sha256WithRSAEncryption
00:a6:29:43:e3:d0:fd:3b:bf:7d:5f:f9:e8:a2:25:5b:59:08:
d0:a3:5d:2d:cf:f0:d6:8e:77:e9:df:7f:8d:82:f0:ae:75:96:
0c:5a:44:96:78:31:9e:ca:6a:55:0f:b3:ef:5c:d6:5f:6d:f0:
f6:8e:86:67:85:86:15:72:14:d1:a3:60:d5:c5:1b:29:55:01:
c2:5e:21:5b:74:57:a0:fd:d3:f6:b4:4f:a0:eb:e4:eb:61:46:
ad:ff:6d:85:7e:92:7c:d2:db:83:0f:8f:a3:88:45:2e:6a:97:
48:10:3f:6b:47:f6:42:fd:c9:9b:f0:6a:13:44:f6:66:c1:c4:
25:04:2a:f3:77:97:a3:1f:12:62:1c:bc:5a:71:08:92:4c:3e:
a4:c1:7e:2e:30:d1:da:06:f2:c4:16:90:f9:08:89:12:43:bc:
43:79:11:8d:75:e6:6b:9a:bb:7c:fe:25:4e:73:d6:e1:55:ee:
78:48:b4:17:3d:a8:c7:e4:de:c4:d0:78:db:3c:69:d7:c2:d6:
e5:2f:a7:ae:c4:a4:8d:02:36:60:e4:c3:11:58:26:9c:6e:2c:
b0:3f:92:d1:b4:c7:f0:1d:e3:b7:a6:0d:bc:9b:e7:42:d4:23:
40:43:7f:83:c4:1f:59:71:c9:cf:9a:37:c0:7c:bb:e2:31:3f:
79:e0:44:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:38 2025 by rpki-client