Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162661/32911D184FDB11E99AF34C5CC4F9AE02/EA88C7CAE17A11EC93AB7473C4F9AE02.roa
File: EA88C7CAE17A11EC93AB7473C4F9AE02.roa (raw, json)
Hash identifier: GhPcOMI+gPNl7oX0ohkTGssQQ+b6Lt8t0TjROyFYvqE=
Subject key identifier: 8B:E2:C6:26:EC:A6:5A:06:8F:39:77:0E:2C:75:48:B8:DC:7F:8F:39
Certificate issuer: /CN=A9162661/serialNumber=ACD26F134FCE0764CC67FC9F265C785341C1B5D4
Certificate serial: 0F30
Authority key identifier: AC:D2:6F:13:4F:CE:07:64:CC:67:FC:9F:26:5C:78:53:41:C1:B5:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNJvE0_OB2TMZ_yfJlx4U0HBtdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162661/32911D184FDB11E99AF34C5CC4F9AE02/EA88C7CAE17A11EC93AB7473C4F9AE02.roa
Signing time: Fri 31 May 2024 19:11:10 +0000
ROA not before: Fri 31 May 2024 19:11:10 +0000
ROA not after: Tue 01 Oct 2024 00:00:00 +0000
asID: 138932
IP address blocks: 103.137.96.0/24 maxlen: 24
103.137.97.0/24 maxlen: 24
2404:ae40::/32 maxlen: 32
2404:ae40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3888 (0xf30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162661, serialNumber=ACD26F134FCE0764CC67FC9F265C785341C1B5D4
Validity
Not Before: May 31 19:11:10 2024 GMT
Not After : Oct 1 00:00:00 2024 GMT
Subject: CN=665a20ce-c452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:ee:85:99:10:f4:9a:ca:e3:30:33:f0:e2:
48:da:71:e8:2f:e9:8b:b9:62:67:92:d6:ea:fe:fe:
08:c0:8a:82:a5:e1:61:1f:d9:5a:89:b2:15:71:7e:
3b:d3:49:42:e4:4e:b2:03:64:ea:e5:ab:c3:63:12:
54:05:eb:eb:a7:96:00:29:d6:71:d7:f5:5f:07:6a:
1d:b3:79:2b:69:e6:b9:7c:c0:5b:a0:53:e8:e0:97:
01:4e:67:c4:b4:8a:fc:63:44:f4:79:dc:64:4f:08:
6c:ac:c8:4a:46:8c:c0:53:d9:ca:6a:a9:15:41:08:
0e:6a:84:a8:38:2b:c2:66:45:88:6e:9c:6e:cc:5c:
eb:03:ef:46:cf:b1:a3:3b:84:67:a4:50:26:29:7a:
b0:0b:08:92:31:31:7e:cc:e9:f5:e6:e9:c9:05:ee:
ba:80:fc:c7:1c:ce:6e:59:8b:51:e8:92:37:61:be:
f0:13:90:b5:d7:10:91:e4:0c:18:c8:5c:7c:07:e0:
2c:d9:d2:e4:d8:f5:6b:9d:1d:e5:7d:5d:a8:29:2a:
f3:60:7d:4b:49:85:e4:6f:7d:42:86:60:45:46:7a:
45:12:d6:73:3c:b6:43:fe:26:da:83:5c:09:07:ca:
30:cd:f4:0d:df:e3:74:b4:30:ca:12:7f:5e:6f:ae:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E2:C6:26:EC:A6:5A:06:8F:39:77:0E:2C:75:48:B8:DC:7F:8F:39
X509v3 Authority Key Identifier:
keyid:AC:D2:6F:13:4F:CE:07:64:CC:67:FC:9F:26:5C:78:53:41:C1:B5:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162661/32911D184FDB11E99AF34C5CC4F9AE02/rNJvE0_OB2TMZ_yfJlx4U0HBtdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNJvE0_OB2TMZ_yfJlx4U0HBtdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162661/32911D184FDB11E99AF34C5CC4F9AE02/EA88C7CAE17A11EC93AB7473C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.96.0/23
IPv6:
2404:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
a4:ba:27:88:9b:73:47:44:fa:78:a6:36:b5:e2:71:8e:5a:0e:
b0:83:19:14:10:c1:d9:7f:5a:9d:96:01:7d:5c:30:05:f8:05:
12:ae:30:f2:b3:2c:a5:b4:2d:e4:9a:18:30:29:f9:ce:9d:17:
f2:b5:79:0e:67:11:eb:2e:93:78:f3:7e:17:7a:68:13:ba:8f:
6c:e8:28:03:b4:69:f7:cf:9f:e1:d1:bc:5e:1c:24:1a:a0:0e:
85:1c:c0:68:4f:13:ad:32:2c:c8:d7:20:67:cb:4d:0b:0b:d6:
a8:cf:64:06:17:54:fd:07:4b:09:70:d9:b7:c8:72:ad:05:25:
53:da:d8:b7:d8:65:dc:1e:96:de:db:4e:4c:c6:62:14:a3:1f:
98:73:f8:8b:91:ea:e1:88:1a:e5:36:d4:f8:2e:f4:24:38:3e:
0e:9b:37:e0:53:60:9d:ca:07:ac:01:78:0e:24:ad:05:33:c6:
fc:b0:ce:49:a7:39:60:3d:84:46:4d:ae:d0:b5:2a:c6:1d:df:
f2:7f:81:0f:d9:69:7f:e3:3e:af:af:c0:07:26:55:b0:48:ce:
1e:73:bb:9c:fe:81:90:8f:39:d6:d3:d3:5c:a6:e7:58:ce:ee:
23:c7:10:b5:f9:db:6f:68:3a:76:50:c7:b7:2a:9f:23:51:63:
c4:74:24:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:01:54 2025 by rpki-client