Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa
File: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (raw, json)
Hash identifier: 7Hs9ZZORwzDrkP5Wsr0Azs8K265xvZ4OedgYnSopdc0=
Subject key identifier: 20:8C:9E:69:65:75:59:3D:B4:C7:86:D4:B5:52:8C:6A:72:B9:25:4F
Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Certificate serial: 18BB
Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa
Signing time: Sat 28 Dec 2024 16:34:05 +0000
ROA not before: Sat 28 Dec 2024 16:34:05 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 136004
IP address blocks: 103.79.117.0/24 maxlen: 24
103.99.176.0/23 maxlen: 23
103.99.176.0/24 maxlen: 24
103.99.177.0/24 maxlen: 24
103.120.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6331 (0x18bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C8A
Validity
Not Before: Dec 28 16:34:05 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6770287d-a009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:83:8d:f1:74:5b:db:7d:96:28:9a:64:4d:
09:fc:aa:fe:52:37:e4:8a:96:53:80:bf:d9:f9:87:
54:b9:d7:82:10:bd:3a:f8:89:cc:b9:ad:b6:8e:2a:
d3:7d:d0:7f:b7:4b:5a:bf:9e:52:12:8d:75:c7:64:
2a:bf:af:f5:1e:97:6b:31:29:e7:bf:d5:1b:64:1f:
16:c0:02:e4:93:0f:7e:16:5d:cb:a7:84:59:19:02:
12:0c:8b:c4:2a:50:94:41:47:42:22:91:12:7c:f6:
77:5d:a3:b1:02:2c:03:61:1d:c8:de:49:8a:72:f4:
e9:4f:39:b4:74:5f:61:7d:8b:d5:0b:71:c3:ac:ad:
e5:39:3d:db:fc:e2:48:db:df:c2:f3:4b:ff:25:72:
ef:ba:f1:fc:75:0d:3b:f1:3a:c7:d0:d1:3f:fd:fb:
6b:13:2d:32:c6:22:9a:f0:dd:02:f0:91:e7:9c:39:
35:db:27:31:4d:ad:bd:1f:3c:fb:94:ec:65:b2:ac:
c2:2b:28:c6:01:c2:70:81:dc:fb:95:a4:29:7f:f6:
e3:a3:fa:85:e6:19:2f:50:7a:82:85:86:8f:b6:99:
5b:dc:09:dc:77:73:33:06:fc:05:71:8f:6a:95:20:
2e:1e:6e:08:5b:51:39:f5:3c:1f:3e:81:b8:4e:d9:
a9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:9E:69:65:75:59:3D:B4:C7:86:D4:B5:52:8C:6A:72:B9:25:4F
X509v3 Authority Key Identifier:
keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.117.0/24
103.99.176.0/23
103.120.110.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d0:4b:4f:eb:4c:28:80:09:1a:e1:ee:70:7d:87:2b:39:5e:
a9:20:ae:13:02:12:80:ba:bd:8f:cf:6d:b4:a1:5d:22:21:37:
6d:fb:38:4c:63:99:62:86:62:f2:8d:03:21:80:1f:e3:e3:43:
3e:da:ee:28:28:4d:ce:d7:94:d5:69:af:c5:b1:f5:ff:f0:b0:
e2:7c:f2:be:39:d0:51:2d:82:95:37:3b:27:b3:3c:4e:a3:b7:
bd:20:d6:e1:e0:3f:4d:a0:37:3a:13:0a:e3:b8:81:e7:a5:84:
04:da:f4:9e:86:5e:9c:f4:e4:d0:af:1e:0a:64:8f:31:81:93:
b9:e5:3c:34:a1:9d:04:73:15:45:24:14:89:b4:21:6f:c7:08:
2e:ef:f6:ba:21:cc:1c:68:00:25:98:00:e0:2b:a6:31:d4:63:
18:1f:81:fb:a5:34:a6:ea:04:b3:51:0c:73:73:da:8d:4f:a0:
c5:d6:f9:0e:0c:96:46:6e:c8:be:2e:a6:6a:9b:18:31:34:2a:
14:dc:8c:f9:d0:d3:16:a6:17:b2:6c:6b:15:34:93:12:e0:d7:
a4:46:5e:b4:23:d3:f6:96:ce:ab:c2:a4:49:7c:15:40:9c:9f:
dc:cd:b1:83:e0:64:ad:7c:41:54:95:83:69:64:4d:41:b2:3d:
2a:aa:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:32 2025 by rpki-client