Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa
File: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (raw, json)
Hash identifier: koGFRVRewsJ7jkem3coBJtNJvVh8zs6qszUVNRr3ZBc=
Subject key identifier: A5:7C:D2:68:B2:03:04:25:E2:88:99:6D:AF:52:9E:04:BE:58:1A:EA
Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial: 13C8
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa
Signing time: Tue 30 Apr 2024 17:56:00 +0000
ROA not before: Tue 30 Apr 2024 17:56:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135298
IP address blocks: 103.213.104.0/24 maxlen: 24
103.213.105.0/24 maxlen: 24
103.213.106.0/24 maxlen: 24
103.213.107.0/24 maxlen: 24
223.26.20.0/24 maxlen: 24
223.26.21.0/24 maxlen: 24
223.26.22.0/24 maxlen: 24
223.26.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5064 (0x13c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193F75
Validity
Not Before: Apr 30 17:56:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663130b0-4ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:62:8f:3f:2b:ce:d8:dd:22:c8:7b:3b:85:
03:13:3e:40:40:66:e9:89:d1:19:01:b6:23:05:8f:
97:bd:a4:2a:98:09:5c:e6:1a:29:be:bc:d2:31:df:
d0:57:94:3a:bb:5c:c9:2a:06:91:88:7e:af:15:4f:
90:61:fa:25:5b:15:c7:4e:c2:a6:05:30:8c:0b:31:
59:29:80:1c:69:65:e1:4e:3e:15:7a:e8:ec:77:a5:
80:8d:03:6b:9c:16:20:9d:72:d0:41:54:47:25:b6:
47:44:a1:70:ac:76:c7:6f:b2:98:e2:8e:25:e8:e5:
a1:62:c3:3d:1d:ad:b2:22:3a:c1:93:01:96:4b:50:
bd:8d:28:06:eb:a8:d8:e2:0a:aa:c1:f1:8f:3b:63:
3c:18:1d:a1:c7:3c:3d:a4:2d:08:b8:69:e2:35:67:
58:95:a1:37:ad:bc:24:f6:ef:87:2c:11:4d:a8:03:
96:6f:99:af:9e:83:33:98:c8:5a:38:f7:e1:58:aa:
d8:67:8a:c3:2a:97:a7:c3:2d:c1:a3:b4:4f:e5:75:
3e:01:5b:ce:31:31:55:35:bb:85:cf:87:e7:49:28:
a1:cc:94:2c:37:91:49:c3:3a:6a:fe:6d:56:79:0a:
95:9f:4b:42:07:53:56:47:e9:0e:b4:d9:6a:66:40:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7C:D2:68:B2:03:04:25:E2:88:99:6D:AF:52:9E:04:BE:58:1A:EA
X509v3 Authority Key Identifier:
keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.104.0/22
223.26.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:9d:7b:ed:fe:e2:65:a8:bd:6e:e5:25:d5:74:a3:98:47:41:
a0:90:e6:c8:c4:77:7f:ed:93:33:5b:fc:18:0f:ab:3a:79:c1:
92:a4:53:d5:a6:5f:96:ff:e4:59:cd:71:a6:c7:3e:a4:53:95:
1f:5f:21:2a:8c:b5:77:9c:6e:57:da:c5:a8:09:73:df:ef:58:
fb:76:a0:ea:76:d5:1a:30:b1:c9:cf:03:26:3c:92:ee:fc:26:
44:0e:ef:fd:c8:13:18:5c:c2:43:5b:d3:a9:67:9e:1d:18:43:
70:93:65:ce:56:f0:59:4e:f8:b6:f9:3e:b8:5e:fb:c2:30:43:
a9:30:bd:19:df:83:91:e3:14:f8:4c:86:0b:88:92:3d:f0:ec:
2f:70:17:e9:21:35:23:20:7f:9d:27:fa:1e:5c:cb:a7:23:06:
78:9a:0b:07:d6:7f:f3:17:a2:9b:15:68:00:09:98:8b:da:67:
b8:5e:41:b0:04:56:60:c0:ee:59:e3:6f:63:33:dc:89:a1:32:
b9:98:48:49:1e:0d:bb:27:3e:39:99:d1:21:a4:83:c4:96:e1:
80:3d:ae:4d:04:a7:ff:b0:5e:ef:5d:a3:70:1d:4b:f4:87:de:
e0:f1:82:6f:33:94:4e:59:a7:29:5e:61:2f:84:c8:04:1c:98:
e6:64:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:08:18 2025 by rpki-client