Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa
File: 3D8EDEB442FB11ED8178A936C4F9AE02.roa (raw, json)
Hash identifier: Lqdkn47dlAI3uSNo4mAeusoxymwKh8j5AB8z4hkZ3to=
Subject key identifier: 60:60:76:15:9E:52:2E:07:06:FD:69:6C:29:3D:F8:CB:07:43:E5:F2
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4530
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:31:44 +0000
ROA not before: Thu 05 Sep 2024 03:31:44 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131358
IP address blocks: 103.9.0.0/24 maxlen: 24
103.9.1.0/24 maxlen: 24
103.9.2.0/24 maxlen: 24
103.9.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17712 (0x4530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:31:44 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92620-8a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:d8:aa:19:eb:6a:3c:d6:ca:b6:00:71:1e:
26:8a:1a:df:d2:74:e3:ad:b0:e9:a8:9a:9a:1d:cc:
e6:c5:fd:9d:cd:c8:51:62:10:b0:43:7c:fd:60:7f:
d3:56:27:4f:b4:3a:be:0f:07:51:6e:14:12:a7:12:
6a:34:d2:87:15:5a:60:60:50:4a:1a:30:dc:00:60:
9c:a7:cd:43:69:89:22:b0:dd:82:74:00:a9:c7:08:
70:26:c2:e0:69:fb:3f:cb:2e:2c:e3:53:5b:51:f0:
e7:2d:96:aa:40:ef:0b:13:00:aa:ef:ee:85:77:12:
9e:0f:7c:88:c0:92:46:15:36:de:c0:8b:8c:00:c8:
68:98:6e:22:c2:42:e9:a2:4f:78:f5:b9:85:41:6c:
c0:1d:e8:3b:18:04:ac:f2:bb:23:a0:4d:65:74:24:
e3:3d:94:b8:dc:72:b8:83:f2:15:b1:5d:3d:14:40:
c1:b0:98:19:b2:4e:8a:d7:dd:c9:68:7e:81:fa:36:
ec:ed:ff:16:7f:a9:eb:92:71:d3:de:83:b8:a3:4b:
78:d6:c9:aa:ec:63:0c:b6:a6:04:98:6b:63:4c:3c:
f5:c0:42:42:f2:18:3a:a2:d8:e7:3e:2e:d1:8f:16:
6c:0c:64:88:91:45:b2:73:9f:7c:0d:d3:71:ac:81:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:60:76:15:9E:52:2E:07:06:FD:69:6C:29:3D:F8:CB:07:43:E5:F2
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:c7:29:c8:4f:72:51:89:88:5f:9e:46:55:fb:48:b1:0e:b3:
d3:43:77:80:69:d4:48:da:89:49:ca:f8:33:ef:af:8f:21:4b:
06:e1:d4:43:6c:f6:d2:3b:2e:5a:a9:a8:58:f0:e4:35:dd:e4:
6c:43:70:63:62:87:c5:5f:f6:24:43:40:3b:27:aa:e4:9b:f0:
cc:b2:55:00:79:06:c2:84:7b:28:e6:99:d5:05:3d:d5:71:24:
44:b4:3b:37:69:0e:d4:d4:58:d0:60:1a:3d:74:f3:88:2f:cc:
28:2d:b2:57:10:7f:47:3d:f1:f5:d8:06:89:a8:06:82:8f:4e:
7f:0a:4c:bd:57:c9:b9:f6:f4:e1:e3:59:b0:02:05:d3:ca:72:
c7:c1:6b:0a:16:66:2a:f2:9e:37:0e:6e:16:9c:27:c6:fb:7d:
a6:d8:41:33:db:33:7e:d0:3e:26:25:27:9f:53:02:9d:4b:b7:
53:3d:42:ec:8a:91:e9:7e:3d:df:5c:52:69:da:9f:40:0e:de:
83:a9:30:a3:43:d5:93:88:48:d4:07:ca:25:34:63:42:70:8d:
cd:b1:c9:b6:29:8c:d5:94:df:cd:39:95:0b:19:fe:09:63:cf:
02:6a:95:87:8c:46:d0:cd:31:53:ae:1b:ea:6a:e2:62:0e:2c:
74:b0:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:46:03 2025 by rpki-client