Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/24A183BCCD7211EFA468C80CC4F9AE02.roa
File: 24A183BCCD7211EFA468C80CC4F9AE02.roa (raw, json)
Hash identifier: +ZgXH0MqLEQm5yXWS3q+WYKasl3Na26eLGiM5UthVjU=
Subject key identifier: 5D:90:E6:A8:6B:41:D6:F6:4A:AA:1E:75:6C:FC:48:63:B9:A0:72:04
Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Certificate serial: 71
Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/24A183BCCD7211EFA468C80CC4F9AE02.roa
Signing time: Fri 07 Feb 2025 10:00:09 +0000
ROA not before: Fri 07 Feb 2025 10:00:09 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 133858
IP address blocks: 103.40.164.0/23 maxlen: 23
103.40.164.0/24 maxlen: 24
103.40.165.0/24 maxlen: 24
2401:eca0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172A52
Validity
Not Before: Feb 7 10:00:09 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67a5d9a9-ea1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:ca:0c:29:b6:d1:99:7a:2d:a8:71:c5:dc:
62:78:f7:24:69:89:20:0f:3d:f5:aa:12:fd:1e:de:
af:f0:0d:b7:6f:49:ca:5e:94:83:b0:45:3a:13:7a:
02:07:92:85:4c:4c:e2:6a:29:94:e3:21:2f:b9:fd:
31:0c:97:04:13:71:6d:94:61:5b:1e:c9:59:0a:93:
bb:9e:ee:15:f1:80:43:dc:af:85:e6:b9:b0:ac:48:
71:c6:8f:86:ed:8b:2e:e8:b6:04:9b:7c:4b:8f:32:
c1:a5:7b:1a:c5:d3:71:df:f8:b9:34:ea:31:22:c9:
8e:72:12:1a:52:f9:a4:fa:13:37:18:02:a0:5a:88:
d1:9e:d7:1e:97:8e:0b:74:2a:b0:a6:98:3e:74:27:
6a:9f:63:dd:99:4c:53:de:e9:3e:9d:13:56:43:e8:
92:e7:ff:81:95:b8:3d:53:44:ec:5d:5a:5d:9f:21:
2b:57:f2:49:a2:78:55:1f:c5:da:b8:8c:31:7c:98:
ef:05:5f:39:79:3d:da:16:96:42:3c:1c:a9:15:95:
71:3b:11:e1:55:e5:5b:6f:1e:6d:43:3f:2a:60:ad:
3c:04:cd:ec:fc:a9:70:f5:bb:7e:43:e9:ad:10:27:
c0:12:76:ac:1f:9a:76:23:e1:c5:c1:8d:ec:f2:80:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:90:E6:A8:6B:41:D6:F6:4A:AA:1E:75:6C:FC:48:63:B9:A0:72:04
X509v3 Authority Key Identifier:
keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/24A183BCCD7211EFA468C80CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.164.0/23
IPv6:
2401:eca0:1::/48
Signature Algorithm: sha256WithRSAEncryption
a3:9b:16:3c:74:4d:9e:51:30:68:5b:68:2b:8c:94:43:72:94:
43:10:fd:78:fb:e7:e0:d9:b7:84:62:ff:b1:16:ec:32:5f:98:
53:a9:c0:6c:58:57:72:5c:da:80:e8:50:e4:2b:af:84:93:93:
d8:fd:92:e6:9d:36:9d:7a:88:29:ba:58:d5:07:c5:1c:0f:ad:
dc:16:f3:db:42:0c:e6:eb:e6:cb:5e:43:9e:e0:fe:04:11:dd:
5a:70:1e:22:c2:9e:2a:92:16:f1:c9:d4:0a:45:c4:94:3f:02:
51:f2:16:c2:66:be:96:7a:64:ce:47:3b:3b:b3:e1:10:4a:16:
e4:b8:b6:7c:51:67:c4:23:57:8e:bd:fa:8f:58:68:f7:f2:71:
1f:f8:63:5a:d6:b2:8a:9b:3a:23:56:2c:22:ff:1e:d9:25:ad:
4a:e2:b9:f3:34:eb:35:39:9f:62:cb:2d:fa:85:a5:1b:75:eb:
74:e1:aa:7f:da:78:12:37:1d:ec:b3:c3:fb:cf:67:9e:ac:b5:
3d:48:fb:48:59:54:3b:42:b0:5b:10:79:31:aa:09:a5:e7:b1:
dd:8c:2c:58:ef:35:e9:b6:37:ac:ed:aa:d6:95:25:8b:b7:11:
d1:b0:af:86:c5:45:ac:1e:ca:88:8d:12:1a:00:7b:93:d8:d2:
70:49:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:55:24 2025 by rpki-client