Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/BAC6FF88707811ED8BBDE80AC4F9AE02.roa
File: BAC6FF88707811ED8BBDE80AC4F9AE02.roa (raw, json)
Hash identifier: lhF/9T9ZslyhwAZDLG2cTTAoMH9qrlRNSjIfPAXFI4c=
Subject key identifier: 2D:BF:D8:1D:5C:B6:5C:7E:9E:EB:AE:89:40:69:26:03:84:21:97:C5
Certificate issuer: /CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
Certificate serial: 0599
Authority key identifier: B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/BAC6FF88707811ED8BBDE80AC4F9AE02.roa
Signing time: Thu 28 Nov 2024 23:13:13 +0000
ROA not before: Thu 28 Nov 2024 23:13:13 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 138685
IP address blocks: 103.44.44.0/24 maxlen: 32
2001:df1:6c00::/47 maxlen: 47
2001:df1:6c00::/48 maxlen: 48
2001:df1:6c01::/48 maxlen: 48
2001:df1:6c01:400::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1433 (0x599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196977
Validity
Not Before: Nov 28 23:13:13 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6748f909-a770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:77:e2:29:ea:8d:6a:ad:b4:87:bf:16:71:
ca:78:c4:24:b9:63:55:0d:8c:11:51:ab:16:7b:eb:
fe:c4:8b:73:6c:23:71:fa:18:e9:5f:1a:c1:53:67:
28:ff:c1:7d:b9:24:ff:9f:87:94:98:f1:53:2f:22:
e6:b1:7e:02:14:ca:0f:7e:fd:82:36:b6:d1:cc:26:
75:28:cd:eb:aa:7b:2c:54:f0:4e:80:3b:eb:fa:8e:
96:b8:41:6d:ea:1a:e1:3b:f4:c7:df:fb:46:6f:2e:
43:2a:b9:25:8d:02:a8:54:3e:9d:c3:78:d3:1e:9e:
bd:59:e3:89:18:34:1a:f6:10:68:5a:02:1f:01:fe:
b3:df:ce:73:65:1e:1f:46:91:65:44:4b:5a:fc:2e:
9d:ad:dd:b7:30:76:2a:1f:3e:f3:58:9a:c4:d3:3a:
25:b3:85:d2:d2:b3:78:7a:bc:ce:e4:c0:90:68:4c:
19:ec:b9:f5:6e:d0:01:99:38:f0:57:25:4d:3e:d2:
5c:66:79:23:a4:19:76:58:1a:82:a7:ab:18:a2:f1:
99:15:f5:c9:ab:31:78:3a:02:db:82:48:3c:2e:6d:
54:4e:bf:43:32:da:76:2b:96:81:49:01:5c:c1:a5:
c0:c4:4e:0b:31:37:57:aa:b0:0a:2f:e3:85:e7:8a:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BF:D8:1D:5C:B6:5C:7E:9E:EB:AE:89:40:69:26:03:84:21:97:C5
X509v3 Authority Key Identifier:
keyid:B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/BAC6FF88707811ED8BBDE80AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.44.44.0/24
IPv6:
2001:df1:6c00::/47
Signature Algorithm: sha256WithRSAEncryption
3c:78:9d:eb:50:c5:11:c6:bc:72:01:1c:72:b6:d6:27:c2:0b:
d1:b4:2b:db:35:61:37:20:10:ac:c7:70:f1:9e:69:31:59:8b:
30:27:0f:63:6a:26:75:b4:8d:81:41:f9:dd:3d:b8:00:7c:46:
67:8e:60:89:ea:b4:bb:ed:e9:08:24:e5:f7:d6:3a:45:1f:bf:
8c:86:f2:83:dc:01:07:8d:14:0c:3e:e6:4e:51:49:3e:14:b7:
81:8f:c2:41:30:65:05:59:b7:6e:0b:1b:f9:d4:28:d3:c9:52:
f7:30:b6:72:87:8d:6e:bc:ef:e2:12:c6:15:ea:84:0a:7f:9a:
d9:c1:e4:2d:f8:d8:38:39:a4:b2:0b:3d:e9:ca:ee:dd:51:c3:
d1:1d:07:0a:9f:55:1e:d5:dc:ee:53:23:fa:61:fb:7b:4c:ab:
c8:9d:47:be:ea:d5:66:0b:78:cf:f6:c3:13:0c:d0:68:a3:bc:
8a:0c:9b:4f:78:93:65:f9:cb:7c:95:d2:91:37:50:ca:9b:97:
28:1c:58:a6:8a:9c:cf:64:9c:8d:1f:63:bf:33:87:a2:5a:94:
4d:96:4c:df:9a:0e:d2:97:80:64:02:0e:c1:a1:1d:fb:7b:1b:
4b:00:02:11:0f:f1:56:f9:21:57:d8:34:15:8c:04:ed:c1:3f:
8e:26:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:28:56 2025 by rpki-client