Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
File: 9F6AA75820CE11ECAEA9140DC4F9AE02.roa (raw, json)
Hash identifier: fk7OZGBpXOEZyFxXcUzc4nVsLWOl2jhNA7RelPIs4+c=
Subject key identifier: 38:3E:95:4C:FB:65:E0:DD:95:14:A0:F7:BA:3B:F8:EB:CD:41:A8:57
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4560
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:26 +0000
ROA not before: Thu 05 Sep 2024 03:32:26 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135908
IP address blocks: 103.82.196.0/22 maxlen: 24
2001:df6:2200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17760 (0x4560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:32:26 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9264a-7a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:f3:df:ee:37:55:b4:2e:27:72:03:a8:18:
bc:e2:06:6e:8f:ef:47:4c:16:c4:7f:3a:07:b7:4d:
11:57:a2:6e:57:a4:a5:4d:96:90:0b:82:b6:2a:7f:
13:50:04:72:35:60:59:e2:95:b5:01:9e:0f:6d:c9:
b3:0d:47:80:13:2d:9b:ea:76:c1:3e:ac:32:5a:e6:
c0:a5:5f:bd:b5:e0:e3:ce:ae:4c:c3:48:50:8f:e5:
04:aa:28:d5:56:64:5a:32:e8:a3:12:70:2b:bb:0a:
7a:1c:42:91:48:9c:95:49:a4:49:4f:cf:96:2d:c0:
e5:cb:0f:76:a6:00:18:fd:cd:61:cb:c9:0a:f7:81:
71:e8:0e:68:1b:68:6f:e0:b4:9c:78:66:05:50:68:
02:ed:49:7f:76:6f:89:24:58:65:4e:8b:de:d0:03:
8b:d4:60:d4:56:34:97:3b:57:b8:d0:23:bf:3e:3e:
e7:92:6e:12:be:e0:c5:9a:c2:a0:b3:5b:ca:0b:5c:
7b:29:50:27:6a:48:7b:4a:7c:d1:f2:0d:db:5c:80:
61:54:63:d2:b0:3f:48:22:a0:e9:19:87:49:a2:93:
28:49:f2:85:1a:56:35:d4:6c:b2:d8:e0:a2:8c:ea:
14:ba:d1:65:90:66:91:ee:14:6f:c2:98:e2:2c:97:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3E:95:4C:FB:65:E0:DD:95:14:A0:F7:BA:3B:F8:EB:CD:41:A8:57
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.196.0/22
IPv6:
2001:df6:2200::/48
Signature Algorithm: sha256WithRSAEncryption
7d:ca:49:a2:cd:40:6b:1b:7d:1d:5f:c5:8c:53:8e:fa:87:87:
d9:f0:9e:c6:8a:f5:1b:de:1f:c3:93:3f:57:4b:f7:d6:1c:fc:
6e:2e:9b:04:c1:1b:6c:ab:d8:f3:e1:c7:a1:c6:b9:93:5b:de:
82:d5:b9:34:36:03:dd:2c:66:a5:d8:a4:95:3a:ea:8c:c1:40:
a8:2d:78:77:24:b6:8f:7a:c8:1f:58:23:71:a1:3a:ed:02:ed:
e4:0a:4c:34:e7:f5:89:f8:37:ca:5c:b1:94:c2:48:23:c4:fe:
35:ca:a6:81:72:a8:77:0d:88:30:a1:9a:4e:1c:5e:9b:2d:af:
7e:4b:53:17:4c:80:27:53:f6:40:16:86:59:61:0b:d3:25:9d:
8d:e0:0c:89:06:4e:98:81:7d:8c:5d:38:41:69:c0:3f:03:e4:
f2:36:2f:58:f1:f6:c0:21:6c:3e:d9:92:fa:f5:41:a0:0c:26:
b8:a4:b5:d9:98:25:98:33:9c:4b:de:01:da:e5:b4:55:a6:06:
87:4e:15:a7:3d:39:4c:9d:ed:5f:b6:2e:77:47:5e:1b:29:24:
a1:1b:d7:76:41:f7:61:a1:0c:82:4f:35:f3:d3:04:3e:4a:d0:
f3:b1:40:f5:34:43:ce:fc:28:18:5f:2a:de:18:12:5d:3e:08:
3a:61:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:33:20 2025 by rpki-client