Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/9BB410F021B011EFA6C95F83C4F9AE02.roa
File: 9BB410F021B011EFA6C95F83C4F9AE02.roa (raw, json)
Hash identifier: DQp5W/vsl6Br/ogSstkorS/8VooztvuTJ4JXbRwCOMw=
Subject key identifier: FD:01:28:D3:F7:38:72:E3:86:12:4B:A2:3D:F6:9E:04:59:51:3F:DC
Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial: 08A3
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/9BB410F021B011EFA6C95F83C4F9AE02.roa
Signing time: Thu 22 Aug 2024 20:58:57 +0000
ROA not before: Thu 22 Aug 2024 20:58:57 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137990
IP address blocks: 103.119.128.0/22 maxlen: 22
103.119.128.0/24 maxlen: 24
103.119.129.0/24 maxlen: 24
103.119.130.0/24 maxlen: 24
103.119.131.0/24 maxlen: 24
202.43.225.0/24 maxlen: 24
202.43.226.0/24 maxlen: 24
2403:43c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211 (0x8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176190
Validity
Not Before: Aug 22 20:58:57 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66c7a691-1186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:15:2d:fb:61:97:48:83:15:62:38:0f:5b:
eb:5c:e2:6a:67:91:5b:4f:68:f5:9e:e7:43:e4:8c:
c3:2e:76:17:68:da:6c:f7:68:11:bc:a7:93:89:c6:
d6:32:9b:5a:bf:d3:ec:46:16:6c:80:18:e4:af:eb:
55:85:06:28:ae:83:f0:af:d5:9f:aa:0c:0b:7d:71:
78:4a:71:79:5c:52:34:50:17:b6:a2:78:34:a1:8d:
0a:b0:37:64:58:7d:f7:5d:3b:2f:20:9a:87:2c:be:
49:42:3e:24:a6:e3:c4:a7:b9:f8:18:1d:0f:ad:5b:
f3:25:74:9f:e5:63:81:f5:75:52:57:bd:8a:42:a2:
05:0f:d3:f1:5c:05:38:c8:d8:97:90:c3:24:07:87:
57:96:aa:41:05:74:d9:ca:0d:08:90:04:02:6a:75:
b0:5c:c6:4b:d8:32:43:0b:ac:07:ca:29:40:69:4d:
f0:d1:47:60:e8:e7:88:e7:0c:dc:5e:8f:7d:bd:da:
82:fb:aa:9a:c0:4e:83:68:25:98:91:55:05:1e:49:
65:e6:2f:e7:88:b5:62:5a:1e:ca:f5:22:0b:fb:00:
d7:2a:ce:94:01:ba:12:c2:e6:9a:b5:d8:8b:35:89:
34:b3:ed:dd:8f:bd:9d:80:19:20:46:94:cb:1e:fd:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:01:28:D3:F7:38:72:E3:86:12:4B:A2:3D:F6:9E:04:59:51:3F:DC
X509v3 Authority Key Identifier:
keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/9BB410F021B011EFA6C95F83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.128.0/22
202.43.225.0-202.43.226.255
IPv6:
2403:43c0::/32
Signature Algorithm: sha256WithRSAEncryption
80:fe:d5:92:0f:79:40:2f:eb:21:16:e6:fa:3f:8f:dd:35:19:
89:21:4c:a7:7a:01:17:ca:d4:0a:45:79:3c:a4:bd:8d:fa:a7:
54:b4:95:2a:65:1d:02:38:ed:f9:dd:ea:c8:5c:8f:51:e7:86:
a7:9b:b2:79:17:52:b5:fe:c0:5d:de:03:12:f9:dc:16:ce:e5:
bc:a0:48:c8:34:d4:80:aa:db:2e:c9:87:c3:93:d0:12:ae:d5:
a1:e7:5f:8b:81:58:f0:44:cf:b2:8c:43:84:bc:9a:c7:76:dc:
2d:3d:45:ad:05:12:70:47:7e:7f:06:81:41:fa:21:26:e8:dc:
3b:af:b3:10:ab:3e:63:6b:07:62:90:48:ca:91:40:44:d9:98:
4c:56:a3:50:d0:66:bc:a9:ea:71:c3:cf:95:49:84:6f:8b:5a:
09:7a:3a:0f:03:f8:4e:1b:75:91:dd:b3:77:9a:0d:4e:bc:60:
c9:16:ca:84:cd:24:e3:78:02:21:09:a1:fa:cc:f7:b7:b7:10:
2e:d3:91:3c:66:81:8e:19:33:48:86:31:bd:a7:56:95:89:37:
9e:ec:16:cf:df:e4:bb:9e:2a:10:57:da:64:ba:ae:e9:72:66:
ad:55:d8:80:da:ea:5e:e0:11:61:45:5b:2c:fc:6b:02:dd:ac:
da:1b:13:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:39:18 2025 by rpki-client