Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/D19ABBB48E6011EC93F6710FC4F9AE02.roa
File: D19ABBB48E6011EC93F6710FC4F9AE02.roa (raw, json)
Hash identifier: 2Y9C9KiNax/FdL7eQM2hCoTzZKyNjRhe4AuCRgLGZn4=
Subject key identifier: 93:FF:B1:99:53:0A:EF:8A:AC:1E:31:05:AC:0F:EE:CF:13:C4:0D:B7
Certificate issuer: /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Certificate serial: 0602
Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/D19ABBB48E6011EC93F6710FC4F9AE02.roa
Signing time: Sun 16 Feb 2025 23:51:49 +0000
ROA not before: Sun 16 Feb 2025 23:51:49 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 137270
IP address blocks: 103.106.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1538 (0x602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262BD
Validity
Not Before: Feb 16 23:51:49 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67b27a15-48ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:ba:aa:56:7a:72:cc:3a:37:4d:b8:5e:72:
17:46:52:99:4e:54:4f:97:f6:70:9b:74:62:0f:ee:
b9:f4:fc:b5:9b:a2:ce:04:26:f1:33:f4:27:94:3c:
45:6b:7b:e2:6d:5d:f0:e3:17:a9:10:23:62:b7:44:
4f:d2:b5:c2:7c:d3:76:19:6a:5b:f6:59:63:20:3b:
f8:e4:e4:fe:2d:db:d6:d9:b1:b3:f8:18:ea:ba:d5:
03:9a:3c:dc:62:8d:5b:0a:b6:ce:98:f2:13:0c:cd:
08:b7:76:ac:5e:c5:24:ef:ac:39:e1:2d:65:76:9f:
d9:b0:1a:21:e6:63:35:0d:a5:61:9d:10:bf:92:d8:
ee:d7:c1:41:03:d6:b1:4e:49:ef:55:bc:3b:5e:33:
54:ee:da:54:c6:fb:8a:8a:bd:46:7f:78:bd:03:24:
18:aa:df:72:dd:79:31:35:1b:02:6b:e1:19:88:3d:
96:b9:4b:47:18:f1:87:85:45:d3:99:fc:55:08:f9:
c7:a2:47:7e:59:e4:c1:4c:8a:14:0c:e7:33:62:d1:
56:3a:10:f3:f9:e3:b7:a5:ca:d3:7c:40:70:0b:30:
7e:6e:b0:1e:45:48:17:54:ef:d1:4f:b8:32:87:d1:
0d:ef:b2:a3:3e:60:4e:bd:d8:9a:6b:63:16:4e:ae:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FF:B1:99:53:0A:EF:8A:AC:1E:31:05:AC:0F:EE:CF:13:C4:0D:B7
X509v3 Authority Key Identifier:
keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/D19ABBB48E6011EC93F6710FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.118.0/23
Signature Algorithm: sha256WithRSAEncryption
16:57:cb:1e:a6:63:9d:ab:3e:97:e4:86:93:4b:7a:a2:82:e6:
4b:aa:01:d7:fc:36:b2:00:88:17:a7:ce:2e:87:70:ea:96:2f:
32:d3:63:a4:61:8d:3f:10:c1:c8:79:e0:f4:d2:e1:90:b3:0a:
e2:e4:d3:44:bb:ba:a8:79:86:f1:c6:57:52:a2:da:44:a3:3b:
9f:9d:1b:14:ce:64:7c:b2:9a:b8:df:ea:0b:18:94:fc:02:16:
24:a8:01:b8:86:19:c2:b0:da:52:7a:38:c9:8c:87:bc:ab:24:
82:9c:0e:0c:94:71:fa:7b:f4:20:a1:32:fa:53:e2:43:a9:48:
78:5d:38:62:e2:bf:d0:39:fb:be:7a:83:a7:28:05:d8:9b:b9:
6c:2b:2a:26:dd:50:f9:06:8e:5d:19:ea:25:05:82:d5:96:32:
85:51:7f:c7:f4:2c:aa:c1:bf:f9:ac:f0:f7:03:b2:d3:fe:19:
68:88:c0:e2:3e:a3:f0:db:86:7b:86:3e:34:6b:a1:aa:71:d9:
a3:d7:1e:18:a1:59:a9:00:21:84:67:54:ff:2f:71:21:b6:d4:
04:1d:71:a6:37:7b:2e:f0:a5:2e:db:08:f5:ae:d9:42:9b:37:
40:fb:14:2e:08:d9:17:23:03:61:09:31:df:80:a2:0c:5c:bf:
21:1a:d5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:10 2025 by rpki-client