Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/960764842D4211EA907A566EC4F9AE02.roa
File: 960764842D4211EA907A566EC4F9AE02.roa (raw, json)
Hash identifier: +Bs4NPsq9q/ky1a2463umAyjL4riVmWQqqV4/tkgOHk=
Subject key identifier: 1C:ED:B4:43:14:3C:DF:B7:2A:43:6F:0B:22:A4:A6:D5:88:06:FE:B8
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 34B6
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/960764842D4211EA907A566EC4F9AE02.roa
Signing time: Fri 24 Jan 2025 16:02:15 +0000
ROA not before: Fri 24 Jan 2025 16:02:15 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 133809
IP address blocks: 103.50.128.0/22 maxlen: 22
103.50.128.0/24 maxlen: 24
103.50.129.0/24 maxlen: 24
103.50.130.0/24 maxlen: 24
103.50.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13494 (0x34b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214
Validity
Not Before: Jan 24 16:02:15 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6793b987-76bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:bd:e7:d5:bb:f7:d7:03:d3:17:d5:ac:dc:
7d:a8:b6:3c:d1:f9:43:37:39:0d:11:5b:94:0d:47:
94:c7:2e:23:2f:52:f2:c0:67:9f:b7:0b:33:51:93:
41:f5:47:04:a3:b7:f1:5c:30:3f:42:42:24:7e:17:
c2:06:82:68:1f:71:f7:1b:cf:d4:d5:48:ed:f8:bc:
21:57:ff:f4:a9:42:57:69:21:8f:b9:a6:48:22:4b:
58:54:2c:99:03:e9:11:47:24:64:aa:9d:40:96:94:
19:b0:6b:65:12:ee:56:ea:82:ed:95:32:74:25:01:
e5:3e:df:c1:4f:4e:50:87:b9:a3:64:7b:68:5b:67:
ef:b2:7f:ad:49:69:fc:44:52:5c:12:e0:6c:d9:73:
81:67:93:99:c9:ad:de:b3:7b:9a:d0:3b:b1:9e:cf:
7d:d7:7a:7b:d4:a6:b2:11:a5:03:50:dd:0e:be:85:
82:fa:12:22:4a:27:d6:86:26:01:66:71:cd:b3:0a:
28:0f:a1:d5:ff:e6:24:1f:ea:4b:68:da:6e:d6:72:
28:06:b8:71:c2:1b:39:52:0a:88:10:00:fc:ec:8b:
db:6e:7c:41:61:76:5e:ff:38:ec:b6:2d:52:72:82:
1f:24:7e:9e:5e:0c:7c:39:5f:03:47:ae:60:7b:11:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:ED:B4:43:14:3C:DF:B7:2A:43:6F:0B:22:A4:A6:D5:88:06:FE:B8
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/960764842D4211EA907A566EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.50.128.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:5a:d9:0b:c8:c1:0a:3c:61:ef:a1:48:e7:96:90:80:fc:92:
ee:77:89:60:9f:d7:69:4d:29:5d:fb:fd:31:94:47:63:2c:58:
38:45:80:42:9b:f5:7c:71:1c:55:9f:ac:7f:a8:b6:7c:0d:1e:
0d:7b:d5:c4:aa:48:27:38:f2:00:ab:8d:08:2d:5d:12:79:c4:
92:18:14:99:5b:97:73:f2:03:43:41:2b:c7:bb:62:8f:d4:be:
6d:f7:9a:ad:0b:f4:9e:fa:63:0e:1e:72:48:45:40:9c:42:5d:
8c:7d:95:05:fe:ee:c3:9d:10:37:f1:42:3a:eb:e6:8c:8e:8c:
ed:6d:60:86:f0:f9:cd:b2:29:35:01:9a:80:97:79:69:6c:ec:
05:f7:4f:ef:c5:9b:a9:29:b9:a0:56:7f:39:e4:72:3e:7c:c0:
d9:f8:b1:ee:3e:d5:24:3f:59:e8:c0:f2:db:c3:7d:7a:0c:aa:
70:7b:0d:88:20:c2:a4:9b:f8:09:c5:6b:45:74:4b:83:b4:77:
d3:0e:35:27:3d:f2:b8:74:fd:49:08:86:bf:9e:ac:10:f0:b6:
51:e3:c9:e2:86:7b:b7:76:fc:17:98:5b:c5:58:c1:4e:71:ed:
16:12:97:a6:01:29:aa:d3:bd:bb:c5:ca:a0:24:2a:03:3f:6c:
b3:0c:58:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:46:29 2025 by rpki-client