Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa
File: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (raw, json)
Hash identifier: JnyQcmBv8MumIf8qvh8E711qakyrMUVoNJzBwPEqLFk=
Subject key identifier: 14:42:C8:85:1D:21:2D:EE:9E:F3:08:9C:EE:05:B3:BF:13:D9:50:2C
Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial: 048A
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa
Signing time: Sat 05 Oct 2024 00:34:47 +0000
ROA not before: Sat 05 Oct 2024 00:34:47 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 14537
IP address blocks: 45.127.116.0/22 maxlen: 24
103.81.128.0/22 maxlen: 23
103.81.129.0/24 maxlen: 24
103.81.130.0/23 maxlen: 24
124.109.4.0/22 maxlen: 23
124.109.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80
Validity
Not Before: Oct 5 00:34:47 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=670089a6-fa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:fe:bb:58:33:93:83:17:c0:f7:dc:2b:b9:
9f:42:5d:99:13:d8:75:72:3d:c4:c3:d9:9f:8f:e9:
ba:f3:f5:4c:b5:f2:ec:a0:c3:b1:e8:42:d4:48:b0:
16:fb:36:8c:e0:71:27:05:bd:6b:40:d6:2f:51:ed:
34:60:55:da:7c:75:36:9f:d0:74:ce:be:96:d6:23:
1f:71:78:50:f4:cf:93:12:fe:b3:7f:a8:f2:84:c5:
05:6c:c2:35:61:27:37:4c:a5:96:57:ff:7a:b1:33:
c7:c7:d4:94:8b:00:fb:fa:16:0b:80:d5:bd:9e:98:
bd:49:21:ac:d5:29:2e:a4:15:8b:fa:34:02:e7:61:
3d:00:36:7d:a7:9d:e1:a4:67:1f:e0:9c:e1:ff:43:
70:63:00:22:b8:ea:87:5a:dc:97:13:89:b6:d4:ec:
5a:c4:18:68:7b:09:61:cc:91:20:f0:72:14:6c:1a:
58:ff:4f:6d:aa:a9:0c:e7:f9:c3:33:c9:86:b2:b4:
3d:f4:8d:14:25:7f:48:31:4f:49:f6:f4:6c:81:56:
ad:94:92:5e:9e:b9:26:3a:4e:38:c3:de:3b:37:ec:
4f:09:37:a6:31:31:01:7a:ac:87:e6:61:e4:58:48:
fc:ce:3d:9e:a4:42:8a:da:45:d7:3a:37:93:3b:58:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:42:C8:85:1D:21:2D:EE:9E:F3:08:9C:EE:05:B3:BF:13:D9:50:2C
X509v3 Authority Key Identifier:
keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.116.0/22
103.81.128.0/22
124.109.4.0/22
Signature Algorithm: sha256WithRSAEncryption
24:1b:55:ef:7b:7d:b2:27:a6:52:f9:ea:e7:9f:5e:73:63:e7:
9c:e5:68:89:71:fd:27:dc:22:3d:3c:65:6c:f9:8d:48:ae:77:
0b:52:2e:88:8a:67:82:83:5e:b3:08:5a:fe:12:4b:b7:50:b5:
32:82:f3:2e:93:02:a6:2d:49:18:06:d4:0c:fb:75:7d:6e:0a:
39:87:5d:1a:da:25:cb:d7:34:a5:00:10:dc:4a:66:d9:56:7d:
8b:98:7b:b7:da:07:77:c1:97:bc:c7:3a:92:b6:31:3b:9b:c6:
6a:35:8e:69:5d:d8:7a:7b:10:c2:cc:6f:85:61:5a:62:e8:a1:
f6:d8:a2:15:bd:e0:64:93:51:38:50:94:5f:48:75:88:83:f3:
6f:30:cb:28:10:03:a1:0c:33:dc:b6:5e:01:c8:11:b8:4b:bd:
ad:81:56:4f:08:02:ab:ce:f4:d2:23:9f:c9:6d:2f:01:06:dc:
74:54:23:20:3b:f8:48:3a:08:58:d4:19:f3:00:4b:11:f2:6c:
b4:14:a8:9a:c8:6b:c7:d2:37:fc:8e:67:f8:b7:bf:9c:f0:c0:
a8:16:a6:9e:f6:be:b0:1c:4b:19:56:65:fb:b0:be:32:27:c6:
6a:2e:8e:66:f1:69:64:3c:84:27:a4:a3:64:02:e9:5d:e7:7a:
ac:71:22:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:00:10 2025 by rpki-client