Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/2601A296AE1011EE92B7161BC4F9AE02.roa
File: 2601A296AE1011EE92B7161BC4F9AE02.roa (raw, json)
Hash identifier: ruTuAI8tCOCbFuPP+2u83Ib06u3MS/nsClPmyXw7xNc=
Subject key identifier: E5:D9:DE:52:B6:B7:14:AF:A7:A9:79:41:D9:3D:CA:34:C6:9C:B3:DD
Certificate issuer: /CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C
Certificate serial: DE
Authority key identifier: 8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/2601A296AE1011EE92B7161BC4F9AE02.roa
Signing time: Wed 05 Mar 2025 06:22:14 +0000
ROA not before: Wed 05 Mar 2025 06:22:14 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 150721
IP address blocks: 103.68.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116E68
Validity
Not Before: Mar 5 06:22:14 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c7ed96-337e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:61:ae:78:19:24:df:19:d3:9d:1c:a1:a2:
f7:3b:35:d0:f0:64:b2:e6:88:a9:6f:89:f5:98:c3:
b7:82:15:05:a1:84:43:0b:93:83:23:b7:c4:0c:d7:
fc:bc:77:10:9c:32:6b:3b:86:30:cd:a7:f8:0f:43:
a9:da:7e:0e:9e:ca:97:69:cd:52:8e:96:61:8c:59:
92:70:7b:d5:af:64:cc:4f:e8:9c:fa:88:aa:ad:19:
2d:2c:de:71:4f:97:3a:12:99:f4:1a:f7:a5:23:25:
d6:65:d1:3c:7b:73:d7:c8:ee:e1:c5:bd:e9:8e:73:
71:3d:27:92:80:f8:60:7b:6f:13:5a:35:87:20:6a:
90:4c:4f:59:e3:24:76:ba:8e:eb:50:88:25:89:3d:
20:da:a3:c1:60:9c:4b:3a:20:e5:4f:04:be:58:d4:
e5:32:12:67:a4:43:4e:7f:0d:57:05:dd:6f:a7:55:
92:81:9a:a1:8f:39:d7:29:b4:9f:47:4f:c9:5b:40:
af:ac:ca:49:21:e0:fc:c2:25:60:c1:62:7d:d5:48:
35:b9:a5:d2:dd:28:b1:96:f5:1e:d2:ce:42:aa:f6:
c6:e6:2c:b0:c9:7f:fa:d6:dc:b1:27:46:e1:8a:56:
ec:f7:56:bd:e2:b1:b0:15:57:ee:ba:ff:b1:3c:87:
25:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:DE:52:B6:B7:14:AF:A7:A9:79:41:D9:3D:CA:34:C6:9C:B3:DD
X509v3 Authority Key Identifier:
keyid:8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/2601A296AE1011EE92B7161BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.234.0/23
Signature Algorithm: sha256WithRSAEncryption
32:54:21:2a:d3:9a:c6:e0:17:f5:d7:20:62:5b:98:ec:77:da:
06:dd:42:cf:a7:b2:8b:9d:32:69:34:a1:8a:db:dc:bf:d9:81:
3c:e0:3e:7a:81:4c:92:54:23:36:a2:58:5e:2d:fe:c8:ac:f8:
4d:5d:4e:ef:09:b0:31:ee:00:73:3b:98:8f:e3:3d:b2:ff:91:
da:46:50:35:cf:a2:eb:8d:bf:2c:33:3a:0a:88:8b:1f:11:04:
14:7d:02:3a:51:4a:13:18:ad:76:b3:7f:67:2e:4c:8e:7f:02:
47:70:ef:4a:84:8c:3d:f6:c3:c2:99:b1:78:1f:a8:54:c8:ac:
ff:7b:7b:66:03:54:e9:c8:52:7f:2d:b5:54:8d:92:3e:92:84:
2d:0a:05:ac:a7:21:9a:e1:7f:dd:ef:23:7c:0a:50:c6:c9:a1:
01:27:af:7a:8b:16:62:dd:5c:66:e7:d1:0c:36:63:1a:66:05:
d2:ee:38:f4:6c:4a:c7:3e:cd:2c:6d:ae:d6:a5:47:b5:0b:1a:
ed:2b:b0:ee:12:08:87:f2:25:ab:3f:19:66:79:a7:a6:a7:48:
d5:0b:0c:9f:6c:ce:b5:53:23:cf:f6:2a:47:da:22:ca:53:5f:
6c:22:f0:9d:12:25:8a:ea:89:6e:0b:c8:1e:a9:ac:54:06:3d:
be:bc:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:26 2025 by rpki-client