Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa
File: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (raw, json)
Hash identifier: OvtIBWIONkhrTQi/ko/Qtu38pVg+GOOY2iprHCNF2R8=
Subject key identifier: 2C:39:36:A9:14:9C:0E:BF:8D:AB:B7:8B:5B:A1:33:59:DB:1B:F6:CB
Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Certificate serial: 033C
Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa
Signing time: Wed 19 Feb 2025 02:54:20 +0000
ROA not before: Wed 19 Feb 2025 02:54:20 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137995
IP address blocks: 103.84.136.0/22 maxlen: 24
2400:a040:a::/48 maxlen: 48
2400:a040:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828 (0x33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193339
Validity
Not Before: Feb 19 02:54:20 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67b547db-c688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:d6:0d:9d:33:28:04:d9:b9:3e:29:72:08:
ca:e7:3c:a9:63:01:9c:c8:ee:a8:09:0f:ed:bc:19:
4a:48:dd:f1:84:38:6e:9e:7e:cc:ad:65:06:e8:7a:
6e:40:1f:6c:c5:f8:65:9d:c3:5d:2e:77:57:fe:55:
61:87:ea:8e:a3:a1:86:cf:60:1c:66:79:c5:77:db:
10:55:4a:7f:0e:4a:9b:2c:d0:34:df:ff:3f:b1:db:
6f:70:3b:69:6a:40:e3:0e:2b:b2:a3:a1:0d:f7:6b:
a7:89:8f:af:7c:5d:86:3c:42:d3:d6:1b:eb:f3:49:
4d:ed:80:0f:d4:36:22:8a:e5:5f:ac:7c:26:57:78:
43:f6:ed:ea:96:f6:a5:0d:73:08:ac:c9:74:54:e8:
c5:5a:c4:9b:6a:85:2b:82:3b:b1:a4:58:94:e5:d5:
ac:9f:65:43:84:ed:e0:e6:70:d3:00:b3:f7:e1:24:
a0:07:2e:12:04:e3:97:e5:d3:41:ad:0f:ee:37:48:
e3:72:0b:fd:29:da:f3:b3:3e:01:fc:8c:5c:80:a1:
4c:62:ef:82:84:00:0d:09:f3:50:14:a7:a0:9f:96:
13:05:e9:61:34:9d:c5:69:58:7e:e5:fd:8f:ce:44:
27:1b:d3:0e:8b:97:45:7c:bd:ad:49:d0:01:77:14:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:39:36:A9:14:9C:0E:BF:8D:AB:B7:8B:5B:A1:33:59:DB:1B:F6:CB
X509v3 Authority Key Identifier:
keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.136.0/22
IPv6:
2400:a040:a::/48
2400:a040:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
4f:30:1b:22:96:36:86:0f:ea:76:88:62:f8:d2:d3:62:58:1b:
b8:0a:65:c0:ea:ab:f0:54:a9:5b:76:f0:88:e9:45:3d:38:cd:
a0:04:c4:05:57:b7:37:4b:9f:6e:e7:4c:3d:a1:f6:19:51:86:
91:a3:2e:0a:cc:26:ce:01:25:90:ec:19:6c:7b:c7:75:6b:89:
63:dd:20:23:4e:e9:fb:10:22:4d:01:17:6f:e3:4c:ff:83:38:
d5:ef:b4:86:e2:a0:01:28:75:63:f7:f7:85:fc:17:2d:d3:96:
12:69:d8:02:90:7a:e1:a5:ac:a1:97:cf:64:c1:5b:84:25:75:
42:88:7a:b2:a8:80:4f:f2:10:32:e2:99:ca:32:ab:f6:d8:7f:
5f:43:9e:31:b7:6d:7d:41:e5:2f:52:5d:55:ec:17:d3:94:5e:
3d:73:f1:5a:72:50:0b:c1:79:dd:05:58:ed:d5:b8:4b:56:f7:
4c:07:ad:6c:b4:7b:4e:07:78:93:01:00:ea:04:15:b1:79:86:
51:84:d8:0a:a9:b6:b6:f5:bd:93:a1:fa:0f:56:ab:45:68:11:
da:a3:6a:5f:2b:f5:78:9e:b5:08:ce:ad:7d:0b:c5:3b:97:51:
ff:a9:95:d9:00:e6:2c:af:68:87:cd:e0:74:24:ab:05:75:4c:
b8:d5:14:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:33:06 2025 by rpki-client