Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/2E22941AB6C811EE925FF152C4F9AE02.roa
File: 2E22941AB6C811EE925FF152C4F9AE02.roa (raw, json)
Hash identifier: m4EezZIyNf7dli/AKbn/pkjhnxkvLMdKf/jlx7B+sWg=
Subject key identifier: 93:94:AF:6F:A4:1D:05:E7:7C:A0:05:BD:E9:E1:4C:FF:18:C0:71:A5
Certificate issuer: /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
Certificate serial: E9
Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/2E22941AB6C811EE925FF152C4F9AE02.roa
Signing time: Mon 03 Mar 2025 00:54:10 +0000
ROA not before: Mon 03 Mar 2025 00:54:10 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152320
IP address blocks: 103.85.72.0/24 maxlen: 24
103.85.73.0/24 maxlen: 24
103.85.74.0/24 maxlen: 24
103.85.75.0/24 maxlen: 24
203.175.12.0/22 maxlen: 24
2001:df0:a640::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91175BA
Validity
Not Before: Mar 3 00:54:10 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c4fdb1-66b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:82:ed:e4:e0:98:63:89:2f:e0:66:34:2a:
64:d6:4f:c2:d2:c9:48:3b:ec:70:aa:7f:01:b5:66:
3a:90:d4:40:84:f1:90:16:6e:8d:7b:db:b0:79:b0:
83:72:97:8e:bc:75:95:f3:b3:be:a6:16:1a:6a:d5:
6e:95:dc:d4:ad:a6:b8:89:17:74:1d:70:0b:69:84:
5f:e0:5a:dc:61:f5:d0:d0:1d:26:0a:ca:ca:e6:0d:
cc:e2:78:08:70:76:d4:a6:01:f1:ce:fb:e4:c5:de:
ed:04:83:06:c4:f0:e5:38:e9:b1:b6:c3:01:c6:c5:
4f:7b:6b:22:64:e6:88:98:88:fa:95:1c:08:f2:bc:
6d:70:3d:78:b8:30:c2:0c:8f:4f:2f:68:43:f3:45:
30:96:98:07:30:0f:5a:28:76:cd:9b:c1:81:cf:85:
94:56:f2:79:ca:14:6c:06:30:d0:bf:79:d6:12:8a:
43:1e:f5:8b:a3:60:8f:de:94:70:92:b6:62:80:42:
84:ba:6f:4f:82:72:af:bf:dd:01:54:40:46:6c:90:
b4:fa:9b:dc:6d:42:1a:a6:fb:0f:60:fc:ec:e7:86:
3b:8c:91:c7:ec:1f:bf:7a:bc:e0:d8:2a:7c:c1:3b:
65:1e:8f:aa:49:74:ea:65:a9:53:23:28:f2:f5:03:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:94:AF:6F:A4:1D:05:E7:7C:A0:05:BD:E9:E1:4C:FF:18:C0:71:A5
X509v3 Authority Key Identifier:
keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/2E22941AB6C811EE925FF152C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.72.0/22
203.175.12.0/22
IPv6:
2001:df0:a640::/48
Signature Algorithm: sha256WithRSAEncryption
77:b7:7f:36:f7:44:f2:43:a0:5d:2e:4f:8b:71:9d:63:00:95:
11:60:02:d0:41:fc:0f:72:4e:59:25:89:d5:72:34:2c:24:2d:
5b:45:1c:96:7b:49:07:2d:93:7b:1b:03:bc:cb:21:b5:8d:9c:
31:b1:3f:ec:a5:ac:98:86:fd:81:57:dc:98:4e:a3:ff:44:1d:
fd:ec:af:5f:0f:77:16:fd:de:a7:d0:4d:14:a4:f3:96:0f:e1:
6f:83:3e:9b:44:b3:28:a8:a6:4b:fc:30:ad:d3:c6:d4:46:46:
96:f9:46:c5:52:96:f5:56:82:23:43:c7:4c:e6:25:1d:ae:66:
b8:d3:08:8f:7e:29:e7:35:85:86:34:ab:55:22:9d:87:ac:c2:
b2:69:9e:f8:26:66:df:64:48:19:89:d2:06:e2:72:ce:65:73:
57:fc:4b:14:f4:c5:be:14:ea:e0:e2:93:fc:0c:88:2d:f6:97:
29:dc:33:39:7f:fa:95:82:7e:44:f0:10:e5:dc:f5:41:e2:ac:
e7:ad:45:cf:fa:a6:89:e3:38:ca:6b:81:53:08:3e:30:f9:e3:
6b:63:c1:a1:02:bb:ce:ef:6d:14:55:3e:e3:19:24:54:d2:e8:
2b:3c:df:a1:e8:cd:3f:48:6d:a4:88:4f:ae:b5:fd:f1:60:d2:
60:18:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:16 2025 by rpki-client