Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
File: 8144C55412E611E98A4A6A35C4F9AE02.roa (raw, json)
Hash identifier: HcaovZ/E4LVI99vShwEF3DVWudHVhbjCDuMnNSp75nw=
Subject key identifier: B3:E4:3D:C6:A5:F1:2B:EC:19:E4:57:EA:AC:50:DB:D4:F2:F9:9E:69
Certificate issuer: /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial: 1DEB
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
Signing time: Wed 12 Mar 2025 17:06:09 +0000
ROA not before: Wed 12 Mar 2025 17:06:09 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 133749
IP address blocks: 103.76.40.0/22 maxlen: 22
103.76.42.0/24 maxlen: 24
2407:6180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7659 (0x1deb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912184B
Validity
Not Before: Mar 12 17:06:09 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67d1bf01-d0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:fd:7a:6e:13:93:05:85:5a:e2:53:03:28:
5c:71:f5:b9:7d:55:e8:b4:f2:bc:78:40:31:0a:40:
5c:24:55:f9:e0:3a:eb:17:85:19:41:30:f3:dd:72:
41:a2:4d:a8:d8:90:c2:a5:d9:d8:dd:e6:95:87:29:
2c:ae:28:37:2b:81:c5:f8:3c:e2:c9:53:38:c4:85:
62:7d:fa:36:cd:48:65:9b:3f:12:e4:17:f7:1f:ea:
cf:ea:b8:17:7b:dc:5a:17:c3:97:19:5d:f5:2e:30:
cd:3c:e6:bd:62:ab:0e:be:7d:2f:6c:0b:6b:30:c4:
46:d8:71:9d:59:9f:2c:88:30:f9:14:05:9c:e1:85:
56:92:5a:b2:f7:70:3e:c3:f6:24:1b:52:73:20:15:
41:7a:4d:cc:dd:64:04:6f:5a:90:7a:c5:c2:29:52:
26:8b:0f:72:44:22:b5:26:11:29:e7:b6:17:14:f7:
ec:12:fd:41:b2:ba:41:42:a3:1b:db:a9:c4:fa:59:
26:70:08:97:98:9a:36:87:77:f8:f8:24:54:b6:f8:
2a:2e:4d:f3:76:05:17:d0:7a:2c:84:2b:91:a3:4f:
be:d6:a8:4a:de:b1:ce:05:bf:71:36:90:74:8d:08:
b2:a3:5a:ce:36:11:11:3a:6d:3d:a5:c6:16:93:9a:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:3D:C6:A5:F1:2B:EC:19:E4:57:EA:AC:50:DB:D4:F2:F9:9E:69
X509v3 Authority Key Identifier:
keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/8144C55412E611E98A4A6A35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.40.0/22
IPv6:
2407:6180::/32
Signature Algorithm: sha256WithRSAEncryption
88:36:f7:1a:cf:6d:55:72:5c:a2:2d:fc:b2:5f:0e:7f:3f:bd:
3b:eb:82:67:df:b5:01:a4:78:7d:aa:67:f2:aa:1c:12:c4:7e:
b9:8a:d2:e8:29:28:1c:7b:68:05:ce:65:97:97:2f:85:96:0b:
01:eb:22:39:b4:36:24:45:2c:4d:8e:71:2d:d6:f6:db:89:7f:
2a:61:10:2c:18:78:35:80:32:8f:7d:69:98:53:d8:9e:b5:32:
86:68:0c:49:85:a7:0b:74:17:c1:e9:49:43:0c:87:1e:42:5b:
16:99:77:e3:ae:99:e5:81:16:3a:91:b7:eb:7b:6c:77:62:78:
23:b8:48:15:d7:8c:1a:a5:57:1c:e4:43:25:8d:ff:aa:ed:ad:
54:44:26:61:dc:38:c0:6c:47:29:f6:9c:01:fd:07:bb:4b:11:
cd:4c:f9:f1:2c:b9:65:d0:2a:54:e0:d0:1a:81:0c:2d:1b:0a:
68:3a:f7:c0:63:17:10:df:3b:5f:7e:d8:e0:74:07:17:fc:f4:
85:5f:12:69:03:af:34:e4:40:35:5e:b3:44:91:3e:c3:6c:0c:
85:50:d9:6b:5c:d2:2e:05:63:01:60:ba:61:9e:8e:f3:07:e9:
70:f4:4d:db:49:b8:df:3c:ce:62:6d:8c:31:d0:3d:cd:a1:82:
4d:1e:c6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:10:12 2025 by rpki-client