Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa
File: 9CB324BA273111EF9F5B0860C4F9AE02.roa (raw, json)
Hash identifier: tuypvpB5BqOqFONJHnNDkY9wl1Vyxr2l9hApI1MYGj0=
Subject key identifier: 5E:25:32:C5:66:D7:34:86:8C:08:C9:67:2E:37:53:22:89:A8:20:3E
Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial: 04E8
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa
Signing time: Sun 01 Dec 2024 00:03:11 +0000
ROA not before: Sun 01 Dec 2024 00:03:11 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 142647
IP address blocks: 103.173.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165362
Validity
Not Before: Dec 1 00:03:11 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=674ba7bf-4da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:2e:41:5d:34:9f:23:c0:3a:37:c6:cc:af:
86:35:30:0b:37:78:bf:7a:6b:aa:cb:99:15:21:df:
a4:1a:55:d1:52:73:44:3c:d7:18:fd:9a:33:42:c7:
6e:35:25:00:e6:37:8f:10:36:42:85:f4:69:42:ba:
81:08:0f:d2:60:b1:2d:98:6f:89:ea:8d:1a:b4:d4:
25:c1:d0:f7:fd:34:d9:95:3c:b8:40:32:1d:f9:3c:
d3:2b:9f:46:8a:8d:17:e8:51:d9:27:37:96:00:7e:
aa:7b:2b:a6:02:73:5c:53:64:f0:94:1b:e2:3c:2b:
b1:8a:6d:01:5d:de:c6:03:8d:1c:7b:2a:14:59:fb:
0b:70:c3:9a:3f:68:31:74:d0:77:15:e9:03:0d:97:
4c:e0:38:21:07:fa:3c:47:69:c9:b4:88:fd:c1:bf:
18:74:73:98:d9:c7:4e:f8:11:3a:80:28:04:b3:56:
24:70:dd:c5:78:50:c1:2a:d5:24:c9:40:3f:f3:df:
98:90:92:8a:15:aa:78:ae:77:08:61:17:5b:53:2d:
d4:50:60:6d:b5:0e:d5:a7:ab:e6:a3:e0:af:99:58:
f9:c1:3f:40:88:d0:41:c1:1a:3e:c9:c4:33:bf:57:
8b:41:78:f7:e7:a8:62:2c:18:0b:5a:e9:8f:f6:d4:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:25:32:C5:66:D7:34:86:8C:08:C9:67:2E:37:53:22:89:A8:20:3E
X509v3 Authority Key Identifier:
keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/9CB324BA273111EF9F5B0860C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.7.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8f:99:65:1f:0c:74:45:e7:4b:7a:4f:b8:d3:cb:87:d6:4c:
3d:79:b0:4a:06:95:8e:df:ec:ca:4a:35:2e:ea:32:b6:8a:b4:
3d:71:b7:57:dd:21:5d:56:36:f5:8d:d4:3e:e8:1f:c5:35:c8:
c0:75:c4:dd:bf:81:e7:8b:37:7b:fb:b9:e0:de:ae:bb:3f:12:
bf:f8:a6:0a:70:2a:b9:f9:11:cc:64:fd:c9:ae:4a:8c:88:e6:
f2:f0:48:1d:b2:9b:d1:dc:06:04:fa:e3:e8:ab:83:cd:73:ea:
47:71:d6:ed:3a:b0:83:fd:fe:25:9b:28:94:91:fa:c4:19:8f:
c1:1f:5e:98:59:8e:14:f3:cf:76:fc:82:b8:22:54:79:be:5a:
6f:cf:24:7c:9b:3f:cf:bf:1d:39:f2:f5:2b:20:18:9c:05:e7:
59:3a:9a:d3:e9:6b:9a:cd:dc:df:62:e4:03:3b:77:75:85:fc:
fa:e3:11:c6:92:2a:c3:aa:09:46:c8:96:1b:1a:5b:34:f0:d6:
a6:40:1f:70:08:6d:b1:f1:2d:25:ad:c7:16:d7:b3:b5:e4:1b:
0c:a4:77:94:49:55:e1:76:ca:28:40:76:66:78:dd:19:55:d6:
a2:78:cb:34:93:27:24:54:d1:d3:18:60:39:3f:39:02:22:fe:
05:3e:f5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:09:57 2025 by rpki-client