Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa
File: 1BB9CAB6578011E99E80631AC4F9AE02.roa (raw, json)
Hash identifier: ZXqZATdJArBJctrOdjHOaMsx7uV2N+d+PjLUYYLOgsM=
Subject key identifier: ED:40:67:4B:FC:E5:8B:29:74:49:C2:CF:18:E0:43:86:AC:F6:D3:28
Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B
Certificate serial: 0F4C
Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa
Signing time: Wed 02 Oct 2024 17:55:55 +0000
ROA not before: Wed 02 Oct 2024 17:55:55 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 134595
IP address blocks: 103.121.12.0/24 maxlen: 24
103.121.13.0/24 maxlen: 24
103.121.14.0/24 maxlen: 24
103.121.15.0/24 maxlen: 24
2403:6240::/32 maxlen: 32
2403:6240::/36 maxlen: 36
2403:6240:1000::/36 maxlen: 36
2403:6240:2000::/36 maxlen: 36
2403:6240:3000::/36 maxlen: 36
2403:6240:4000::/36 maxlen: 36
2403:6240:5000::/36 maxlen: 36
2403:6240:6000::/36 maxlen: 36
2403:6240:7000::/36 maxlen: 36
2403:6240:8000::/36 maxlen: 36
2403:6240:9000::/36 maxlen: 36
2403:6240:a000::/36 maxlen: 36
2403:6240:b000::/36 maxlen: 36
2403:6240:c000::/36 maxlen: 36
2403:6240:d000::/36 maxlen: 36
2403:6240:e000::/36 maxlen: 36
2403:6240:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3916 (0xf4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C96A7
Validity
Not Before: Oct 2 17:55:55 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fd892a-9605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:0d:99:32:d6:1d:f6:bd:56:11:34:ab:d2:
8e:57:36:b2:d5:fc:34:2c:97:8d:c7:d4:48:49:fe:
b5:f9:a5:40:98:f5:f6:17:2e:d3:b8:8f:51:4f:e9:
19:0a:72:17:81:7f:25:c7:3a:26:4e:5c:fd:9c:d9:
42:6c:16:8b:84:02:b2:68:c3:4f:fe:b8:98:1d:fa:
4d:cf:c8:13:1a:d5:84:0e:e8:4f:36:48:b3:2f:50:
3c:e2:76:60:d6:e6:a3:d5:63:d1:6d:0f:97:ab:11:
73:b7:e3:21:5a:dd:ba:bf:8e:c7:a3:15:bb:b0:05:
04:25:a9:78:39:8f:51:6f:0e:f2:cc:20:bf:44:45:
db:5d:98:b1:86:1c:ee:9a:a9:a9:51:d9:dd:36:44:
31:74:c5:a9:3f:a0:5a:60:b9:ee:db:2c:2c:62:7a:
ca:da:ea:89:40:6b:d4:0f:33:0b:b4:2d:be:3a:8e:
f2:7f:48:bd:05:ce:ff:e1:f8:fa:b5:24:dc:0a:6f:
4c:29:3c:db:ba:0e:81:ee:50:90:b5:9d:41:10:04:
c2:9d:07:6b:ec:16:d1:ab:05:b4:3d:09:d5:44:52:
e1:17:4e:77:8c:2d:40:aa:ee:c2:68:10:00:9e:16:
c3:84:30:c8:1d:3b:d9:ee:74:c5:66:e5:87:b2:96:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:40:67:4B:FC:E5:8B:29:74:49:C2:CF:18:E0:43:86:AC:F6:D3:28
X509v3 Authority Key Identifier:
keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.12.0/22
IPv6:
2403:6240::/32
Signature Algorithm: sha256WithRSAEncryption
2e:34:cd:78:3a:ca:cb:3a:db:59:af:ec:24:25:49:57:e0:04:
1c:9d:6c:93:f4:7a:2c:ff:6a:ac:5b:58:d5:62:4d:e6:54:d1:
d6:cb:51:08:41:91:bf:b0:47:b6:ca:af:b7:12:d5:e0:5c:12:
4f:7c:97:65:01:ef:45:74:3d:af:ff:17:c8:06:03:39:6a:b8:
38:82:1e:41:a6:22:de:f2:ec:32:17:aa:4a:65:90:9f:55:ae:
7f:35:6a:c7:b1:56:12:0c:4d:92:92:34:c1:5c:f0:f4:c0:06:
f9:35:95:cb:52:b5:53:39:76:03:cf:f2:40:b0:a0:f4:1a:a6:
e9:af:5c:bf:79:36:9f:56:74:a3:78:45:1b:3b:3b:44:76:10:
9f:81:2d:bf:3a:ec:db:08:38:fc:60:d7:62:a5:37:86:b3:a1:
a0:93:72:ec:77:29:dd:5c:be:2f:20:a9:2d:d0:e1:09:fb:69:
e0:41:cd:72:7b:39:62:77:05:77:8b:bd:7f:9d:d1:d8:72:a7:
28:1f:7b:a9:c1:fa:36:9f:7f:59:ba:f3:a2:84:31:ca:f9:df:
4b:8c:68:80:0d:2f:32:51:25:8f:d3:02:d0:ba:0e:c8:4d:cb:
53:db:ca:2f:80:ed:39:69:83:95:a2:2c:9a:c0:c9:bc:db:f2:
79:40:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:16 2025 by rpki-client