Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/3ABCF052301511EDA401DB3CC4F9AE02.roa
File: 3ABCF052301511EDA401DB3CC4F9AE02.roa (raw, json)
Hash identifier: mKgGrrGBQwDLJBId/uOdKFjLBgmwhREF0Lpo0O+T3TQ=
Subject key identifier: 9A:3F:3B:48:09:9F:CD:01:79:BE:F9:7F:CF:85:42:3C:45:2A:39:D4
Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial: 0872
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/3ABCF052301511EDA401DB3CC4F9AE02.roa
Signing time: Sun 02 Mar 2025 21:39:17 +0000
ROA not before: Sun 02 Mar 2025 21:39:17 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 132827
IP address blocks: 103.6.63.0/24 maxlen: 24
123.253.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91169FB
Validity
Not Before: Mar 2 21:39:17 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c4d005-b1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:66:3f:e0:5d:37:fb:4e:3b:fd:e3:f1:3a:
93:c1:3d:3b:22:dc:79:15:b8:0a:42:3c:81:f9:e9:
06:27:c0:aa:b6:43:4d:1f:d3:6d:de:50:6e:30:f6:
b3:cd:5c:4c:0b:28:a6:65:fa:90:7a:9e:24:b3:06:
55:d3:58:3b:fa:c1:02:f6:41:93:d3:4a:78:f6:88:
c8:8d:e2:29:12:fc:f0:6b:6c:c5:6c:5a:3e:8d:53:
9d:60:67:53:df:41:3f:ec:34:db:0b:ea:30:6c:5d:
ea:ff:8b:80:38:e3:61:88:ed:ef:e8:33:df:b2:50:
3c:6f:42:91:ab:b2:70:8f:2a:a0:1b:b0:fd:75:de:
4e:02:d4:8f:e0:ef:d2:19:a5:b7:b5:be:a1:d0:7f:
14:95:15:b7:c9:aa:e4:b2:5c:c6:f7:bb:e7:6d:d8:
99:3a:f6:7e:30:1e:81:33:e1:17:62:85:8e:7b:c8:
8b:3a:ef:f3:82:0e:98:7f:93:0b:5d:98:5c:5c:7c:
14:64:1b:d0:e7:d9:f8:40:f0:33:d9:e6:ec:7c:d6:
f4:0a:74:ab:be:63:15:77:d6:c5:b3:c4:bf:d1:7d:
e3:2b:d6:ac:c5:1a:82:f2:a5:ac:13:f1:03:d2:2b:
cb:c0:1e:f5:9f:d1:8a:9d:e0:fb:76:ee:78:11:b1:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3F:3B:48:09:9F:CD:01:79:BE:F9:7F:CF:85:42:3C:45:2A:39:D4
X509v3 Authority Key Identifier:
keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/3ABCF052301511EDA401DB3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.63.0/24
123.253.164.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:89:64:dc:fb:db:2b:bb:0f:5b:c7:8c:f8:a9:16:0b:08:6d:
d8:74:3d:dd:59:a7:07:5b:d7:40:58:56:36:2e:8a:82:98:8d:
b1:85:a5:03:88:51:2c:c2:91:45:b7:62:e1:eb:a9:6c:d4:c0:
88:f6:0e:ed:3d:30:e4:03:60:20:13:2d:d4:9d:0d:3d:93:1f:
4d:c2:87:ad:4c:39:bd:b7:45:7e:44:db:14:50:cb:ea:f6:0a:
67:c3:d3:f0:5d:9f:c5:e3:7d:77:9c:81:67:d7:53:6a:07:13:
5c:f0:d3:68:a3:db:ad:c4:3b:88:f0:c4:3e:3c:50:b4:da:6e:
c9:37:35:16:e1:a8:64:07:2e:0e:56:93:8b:aa:f0:ff:e8:95:
a7:df:2c:18:72:c5:59:5e:be:76:80:2f:5d:9a:1d:e2:fc:c4:
56:1d:95:a2:24:b4:33:0e:6b:51:b9:11:a5:c8:9b:28:00:5f:
d3:4e:bc:9a:c5:83:ee:8f:af:80:65:42:83:95:c9:c9:04:79:
98:a1:5b:4a:53:c9:cd:8b:df:65:a3:07:f5:07:e3:0f:70:ed:
20:03:d4:53:12:eb:10:47:98:1c:34:c5:60:73:0b:90:c0:61:
03:20:85:47:12:45:53:4f:eb:a2:7d:e7:58:f7:b2:ba:1c:fd:
7d:da:5c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:33:03 2025 by rpki-client