Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/BB296D2A8A9011EEA6EFA851C4F9AE02.roa
File: BB296D2A8A9011EEA6EFA851C4F9AE02.roa (raw, json)
Hash identifier: k1L+ANf3yP8/8sxZ+47s6Le30/Xw4KxVi1ih5u9sy+g=
Subject key identifier: 87:EF:84:10:B0:D6:54:8D:35:60:ED:2B:CC:80:1E:CB:18:22:28:4B
Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial: 085D
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/BB296D2A8A9011EEA6EFA851C4F9AE02.roa
Signing time: Mon 29 Apr 2024 07:07:56 +0000
ROA not before: Mon 29 Apr 2024 07:07:56 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 137990
IP address blocks: 103.119.128.0/22 maxlen: 22
103.119.128.0/24 maxlen: 24
103.119.129.0/24 maxlen: 24
103.119.130.0/24 maxlen: 24
103.119.131.0/24 maxlen: 24
202.43.225.0/24 maxlen: 24
202.43.226.0/24 maxlen: 24
2403:43c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176190
Validity
Not Before: Apr 29 07:07:56 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=662f474c-c57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:5d:9a:b4:9e:db:49:a8:0e:1d:80:a7:57:
90:d1:32:9c:bd:7f:2f:8b:10:ab:72:58:06:f5:ab:
c0:8a:cc:35:b0:8c:5c:e3:23:28:13:76:16:55:cd:
8f:51:c7:dc:ae:1b:5d:bd:64:d2:6f:6a:2a:ff:a4:
e0:08:8c:81:cf:8e:49:0d:4a:19:5a:50:41:6c:b5:
4d:c8:63:77:eb:29:73:51:c0:54:e1:ff:04:5c:4c:
42:c4:37:af:71:60:7e:c2:b6:14:ab:3c:89:7b:1a:
be:a6:b0:24:52:ee:7a:a2:d2:d4:a1:b5:4d:2a:d7:
55:e4:56:f9:1c:d8:a7:8b:61:b6:7f:8f:d0:2d:a2:
83:e4:c9:eb:c0:e6:74:19:8d:19:e8:9a:f7:b1:bc:
8c:5d:5c:5c:bd:c4:7d:b1:d3:b8:6e:ca:e2:9c:82:
d7:f8:73:1d:1f:ac:66:87:bf:2d:c3:37:2a:ce:17:
b7:c0:08:3d:ea:38:42:43:1b:5b:09:2e:45:b4:0e:
e7:7a:25:e0:7d:ce:38:61:af:be:07:ca:6d:18:04:
1c:5c:07:e3:85:a6:1b:0d:2b:76:e8:55:18:db:b3:
39:dc:d6:93:b2:14:c4:bb:7a:d4:80:78:55:97:7d:
62:ea:76:74:f9:5d:ca:f2:1a:47:96:92:3a:14:bd:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EF:84:10:B0:D6:54:8D:35:60:ED:2B:CC:80:1E:CB:18:22:28:4B
X509v3 Authority Key Identifier:
keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/BB296D2A8A9011EEA6EFA851C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.128.0/22
202.43.225.0-202.43.226.255
IPv6:
2403:43c0::/32
Signature Algorithm: sha256WithRSAEncryption
92:40:82:95:04:31:42:9d:6a:16:28:8b:e2:8d:1f:21:3e:3c:
a8:66:aa:f1:58:bf:02:98:4b:0a:99:3d:d7:ba:ca:65:bf:f1:
bd:b1:79:42:20:52:40:ad:2c:0d:6b:47:e3:e1:f4:f7:de:83:
ab:4b:f2:6b:0f:6d:3b:7c:c9:15:45:87:d0:89:29:4f:3c:15:
72:1b:2e:88:bf:21:da:b5:b2:86:22:73:0d:84:80:fd:f7:f3:
19:21:92:ed:a9:3b:dd:29:6a:a3:f6:2e:d8:ff:fe:a6:68:be:
2e:02:45:7c:2b:ed:7f:e6:0d:a9:61:b4:7a:68:04:dc:0a:94:
6e:6e:07:5f:d7:c1:34:c6:ae:43:57:0a:fb:7c:58:45:ec:b9:
77:55:44:83:80:6a:ef:0b:82:f2:1d:b4:65:90:82:46:9a:55:
80:62:2d:02:78:3f:c7:70:cf:ba:f5:4c:f8:4e:c6:f3:e3:b3:
fb:78:3a:b7:16:ef:07:df:a9:8f:8e:05:0a:87:e8:59:5e:83:
53:f8:ce:ee:ef:8b:85:97:de:f6:74:03:36:79:d5:ed:b3:b9:
ac:a9:38:c7:db:9d:d3:f4:51:53:83:ee:1f:05:63:25:a7:6a:
00:4e:b4:49:03:d1:94:d3:7f:17:bd:89:bb:01:15:4f:cb:73:
6c:6b:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:09:06 2025 by rpki-client