Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa
File: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (raw, json)
Hash identifier: R8BTOL86V2lkOQsbW+rQ8pt2tHQCxt6FoHVMOBZZhL4=
Subject key identifier: 58:5F:21:A9:85:4D:11:FB:73:50:CB:D2:3A:2B:45:C6:46:92:C4:25
Certificate issuer: /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Certificate serial: 0244
Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa
Signing time: Fri 15 Nov 2024 07:32:56 +0000
ROA not before: Fri 15 Nov 2024 07:32:56 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 138341
IP address blocks: 103.115.76.0/22 maxlen: 22
103.115.76.0/24 maxlen: 24
103.115.77.0/24 maxlen: 24
103.115.78.0/24 maxlen: 24
202.181.88.0/21 maxlen: 24
2402:e340::/32 maxlen: 32
2402:e340::/48 maxlen: 48
2402:e340::/64 maxlen: 64
2402:e340:0:1::/64 maxlen: 64
2402:e340:1::/48 maxlen: 48
2402:e340:2::/48 maxlen: 48
2402:e340:3::/48 maxlen: 48
2402:e340:4::/48 maxlen: 48
2402:e340:5::/48 maxlen: 48
2402:e340:6::/48 maxlen: 48
2402:e340:7::/48 maxlen: 48
2402:e340:f::/48 maxlen: 48
2402:e340:10::/48 maxlen: 48
2402:e340:11::/48 maxlen: 48
2402:e340:12::/48 maxlen: 48
2402:e340:3004::/48 maxlen: 48
2402:e340:6004::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998
Validity
Not Before: Nov 15 07:32:56 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6736f928-6501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:05:25:6c:c7:2c:03:69:27:45:b4:a5:23:
1b:0e:dc:0b:09:5d:20:53:ed:70:55:5a:14:1d:1a:
a7:af:b1:64:67:eb:c4:4f:10:e4:a4:d1:8f:3a:16:
df:22:8a:e7:d0:2d:8e:ca:a3:95:a6:00:72:2b:12:
fe:da:e2:51:d4:e2:b7:b7:3a:d4:db:0b:ae:4e:1e:
9b:dc:4b:8d:41:d2:b3:cb:e6:d9:fc:5b:9f:1d:22:
7d:11:54:4d:6a:df:12:5d:5b:4e:bf:6c:be:78:55:
f2:4c:8b:64:8f:30:fd:6e:37:cc:da:a0:03:3f:95:
27:d6:e4:59:02:e3:b8:08:d4:78:3c:c1:6b:56:0b:
93:1d:25:a8:e5:cd:e9:ea:d9:f3:fe:27:b8:1e:4f:
16:58:0e:a2:fa:77:c7:06:ad:02:cc:f9:9b:91:54:
e0:11:da:7c:4c:64:3b:c0:a7:05:d6:fa:cb:ff:d6:
c1:be:a4:d9:74:6b:95:8a:cf:a0:a2:d3:c3:fa:d6:
88:e1:7c:60:a8:50:f7:d9:48:d7:d1:45:25:14:d8:
03:31:81:49:f5:84:9e:db:65:04:38:54:65:b8:37:
02:ac:cb:7a:92:fa:4c:ae:5e:51:6b:d8:a6:77:f2:
94:59:ea:7e:3f:de:7d:d8:16:69:cf:b8:67:36:48:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5F:21:A9:85:4D:11:FB:73:50:CB:D2:3A:2B:45:C6:46:92:C4:25
X509v3 Authority Key Identifier:
keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.76.0/22
202.181.88.0/21
IPv6:
2402:e340::/32
Signature Algorithm: sha256WithRSAEncryption
97:1b:0b:00:0f:7d:87:55:a6:46:0d:5a:9f:5b:7a:a5:c8:34:
8b:11:b8:44:fd:32:32:6a:8a:09:d0:3e:ec:1c:b5:88:89:65:
1d:8f:d8:87:e9:9d:5f:89:a3:80:a1:96:1e:d7:20:32:17:61:
72:6a:a1:85:9a:fe:7a:0e:67:e3:32:f2:5c:f5:7d:b4:94:fa:
46:89:59:d5:82:44:cc:cc:1c:95:aa:4d:29:41:e8:07:5d:27:
9a:79:50:c8:3f:40:6e:54:c5:79:93:05:13:e7:6c:e8:9c:9f:
8c:79:99:6c:eb:8b:f0:f5:97:6b:a0:d3:e4:50:6c:4b:52:90:
ec:b5:98:53:79:d5:6e:5f:91:a2:65:23:87:75:b6:31:2c:cc:
63:14:f8:d2:96:04:e2:fa:4e:2e:95:e4:a7:64:fc:97:68:28:
59:3f:b9:ca:74:73:28:72:b2:82:11:c4:44:c7:f9:1d:ad:ba:
64:24:1f:c2:f3:88:0c:3a:a6:52:38:23:a1:39:9b:e6:3b:13:
47:f7:24:1b:1f:0a:68:2b:39:8e:81:f0:0a:e0:af:0f:c1:88:
42:f9:9f:e6:c1:10:20:76:f2:10:ec:b5:24:97:92:c5:8e:18:
a5:85:97:5f:4a:7e:6d:3e:23:c0:7c:d8:d1:57:05:ce:1a:1c:
cd:28:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:38:45 2025 by rpki-client