Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/97D6B88618D511EFAC43EE73C4F9AE02.roa
File: 97D6B88618D511EFAC43EE73C4F9AE02.roa (raw, json)
Hash identifier: u8zPnTnR8vdMXMZM3gfu234Z3NZHwyNarOREwLy/WOU=
Subject key identifier: 31:8A:4F:88:7A:24:74:29:5E:A6:0A:B9:FC:AE:C4:63:D0:D1:4E:94
Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Certificate serial: 50
Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/97D6B88618D511EFAC43EE73C4F9AE02.roa
Signing time: Mon 01 Jul 2024 08:08:42 +0000
ROA not before: Mon 01 Jul 2024 08:08:42 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 48266
IP address blocks: 103.190.232.0/24 maxlen: 24
103.190.233.0/24 maxlen: 24
2400:9320::/48 maxlen: 48
2400:9320:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F9A8
Validity
Not Before: Jul 1 08:08:42 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66826409-5a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:b5:e4:38:45:78:51:7e:ea:48:75:f2:ad:
2e:a3:02:3f:64:d8:3b:ce:14:60:27:3a:4e:98:87:
1c:a1:97:60:99:f5:4b:a2:e4:3f:56:f9:5a:9f:4e:
0b:d2:3d:b3:b5:5b:d9:ce:47:ed:b9:a3:92:38:cf:
f7:f9:ea:97:3e:58:3d:0e:91:70:2f:09:cb:ab:d8:
1e:ca:a2:d2:d6:24:e5:1a:ea:5e:ad:22:fb:24:94:
a1:30:e9:cd:a7:c0:80:94:0a:ef:a8:1d:7f:c5:39:
5e:24:4f:db:b4:85:82:18:2e:ed:9f:db:73:85:8d:
d2:bf:9d:d0:33:da:b7:0d:37:20:81:94:79:87:3d:
2d:05:26:41:96:59:08:14:c4:90:06:2f:13:93:39:
09:fb:bc:ac:c3:96:cb:2c:f2:b3:22:94:79:42:d0:
51:43:01:19:fb:23:0f:a8:b6:91:78:a1:34:1b:35:
3d:66:35:47:ed:62:36:23:a1:2e:00:f9:9f:56:eb:
07:36:46:c4:7e:3e:ad:66:f0:30:38:ae:05:5b:5c:
75:89:39:f3:aa:59:36:76:97:71:1e:e7:16:b6:8c:
68:cb:50:90:88:06:ee:97:28:ca:b6:ad:dc:b1:2c:
d0:4f:b7:01:07:70:00:4b:8e:e6:a6:77:25:d5:06:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8A:4F:88:7A:24:74:29:5E:A6:0A:B9:FC:AE:C4:63:D0:D1:4E:94
X509v3 Authority Key Identifier:
keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/97D6B88618D511EFAC43EE73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.232.0/23
IPv6:
2400:9320::/48
2400:9320:2::/48
Signature Algorithm: sha256WithRSAEncryption
47:25:f6:cb:53:3d:ee:41:4a:9a:d2:fa:a1:03:c5:c2:d5:81:
0f:6f:30:e8:d3:69:01:ed:6f:e8:54:9f:06:9b:f3:55:84:87:
a4:e6:3f:28:fd:e4:0d:7e:90:ce:dd:52:b7:bb:7c:f6:e8:f0:
11:34:f3:f0:7f:e1:73:0f:75:3b:81:1e:c3:c7:c9:28:60:06:
dc:20:4b:44:62:aa:5e:6e:f5:57:a5:5b:06:f2:95:66:44:5d:
d6:38:7c:02:a0:dc:e9:9d:f6:86:17:fb:82:9d:3e:21:1f:b2:
fd:77:8c:20:ff:86:f7:ee:20:55:57:a6:96:25:59:3a:55:e4:
bf:ce:07:f8:78:4b:b5:d7:bb:be:0f:1e:94:80:02:b8:5a:2f:
fd:85:ad:61:be:38:f1:d1:5c:61:36:fa:8d:d9:41:cc:8f:f0:
c2:d2:ba:3b:36:5f:0a:ff:44:c7:21:74:3a:15:4b:c1:9c:a0:
08:be:cb:3b:ac:05:c2:8f:19:4c:87:11:f5:73:90:d5:37:67:
de:50:c9:c4:f4:8b:27:40:35:e0:90:93:46:13:ee:7e:c9:aa:
bc:ed:c6:21:9c:fc:21:5c:6e:88:36:38:4c:46:8f:ff:4e:6c:
25:4c:98:cf:38:16:d3:49:b5:8d:38:0f:7f:39:6f:3f:88:11:
d2:d5:e2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:32 2025 by rpki-client