Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/B63DEA3A429411EB9D08C02FC4F9AE02.roa
File: B63DEA3A429411EB9D08C02FC4F9AE02.roa (raw, json)
Hash identifier: zn3yB42jw2hzH+xn19p165uLAUG2n0kqHzuj3/mwn8o=
Subject key identifier: 1D:A2:9C:F8:AD:B4:38:B6:4B:BC:85:4B:4E:D9:49:EA:E0:CD:7E:2A
Certificate issuer: /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Certificate serial: 06C8
Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/B63DEA3A429411EB9D08C02FC4F9AE02.roa
Signing time: Wed 15 Jan 2025 08:13:32 +0000
ROA not before: Wed 15 Jan 2025 08:13:32 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 141417
IP address blocks: 103.158.206.0/24 maxlen: 24
2001:df5:6580::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1736 (0x6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A88D
Validity
Not Before: Jan 15 08:13:32 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67876e2c-e3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:03:cb:76:e5:75:80:dc:1f:b8:01:f2:b3:21:
47:89:96:20:76:ad:cc:72:b5:52:84:9d:a3:97:30:
da:16:2d:69:9b:a3:66:e6:b2:af:05:16:b2:ad:53:
0a:0e:ca:4b:a5:45:24:ae:85:f7:d9:d0:10:b4:13:
54:77:35:f7:c2:aa:25:64:86:cc:38:da:f4:95:75:
78:61:23:75:cf:42:02:ac:e7:90:52:47:47:cd:aa:
2f:e1:5e:39:1a:59:56:7b:ee:02:ad:57:f6:f1:cd:
4b:26:31:09:77:7c:ff:d6:9a:87:bb:0d:f5:57:a2:
4a:ad:34:8f:50:4d:66:86:8c:0a:69:0d:23:ad:27:
e6:07:a6:bb:88:48:e5:d0:00:6d:0e:f2:36:3c:8a:
34:a4:f9:87:5d:68:35:7f:42:4a:0a:6e:50:80:3b:
ef:79:3b:3e:0b:49:9b:bf:2e:7d:4e:a5:3b:2d:38:
a6:73:31:89:1a:44:b0:07:33:08:66:de:2f:56:c0:
10:4e:f6:66:df:f7:8b:f2:19:8d:36:ae:c3:64:e4:
87:ba:36:d7:44:e1:6d:31:6b:9b:08:34:04:e4:91:
f5:a5:a1:b4:da:e0:ed:38:3c:36:d9:5d:5b:ad:cd:
ff:dc:d9:86:3d:4a:92:ac:38:f9:b5:ff:42:53:53:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A2:9C:F8:AD:B4:38:B6:4B:BC:85:4B:4E:D9:49:EA:E0:CD:7E:2A
X509v3 Authority Key Identifier:
keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/B63DEA3A429411EB9D08C02FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.206.0/24
IPv6:
2001:df5:6580::/48
Signature Algorithm: sha256WithRSAEncryption
47:ac:10:28:b3:e2:a0:a3:d1:1b:c3:20:81:6f:55:1e:18:a3:
04:bf:09:e2:f6:d8:d6:84:e1:a9:cb:bb:d3:76:4a:c3:90:e8:
35:f3:ba:ff:3e:46:bb:17:6d:e1:1c:14:28:37:74:b5:b6:3d:
f4:89:1f:e9:79:c7:9c:dc:b6:b4:a8:57:6c:01:3e:39:a3:c3:
26:8e:ac:7d:af:08:6f:54:13:11:23:9e:bc:9a:24:37:20:20:
e7:ce:74:a9:d8:46:98:b8:68:70:be:03:28:1f:46:b9:f9:6f:
3e:fe:f8:f1:ca:23:e4:e4:79:6d:1e:13:cc:b6:b6:9b:d3:42:
be:25:b5:46:94:96:85:22:8f:3e:96:2b:69:a2:e7:a1:81:76:
bb:79:ec:4d:61:eb:bc:60:de:8a:51:8a:2b:c7:99:9b:59:40:
3b:42:9f:0f:e5:2a:ca:8d:17:91:f2:d7:1e:65:9d:d2:4d:54:
dd:d8:35:f4:4f:ea:eb:e5:ca:77:c3:c5:29:5f:6a:39:04:3c:
6c:c8:e8:0f:72:42:b5:c8:56:62:1f:d2:26:0d:e0:f1:d6:43:
86:a3:78:10:41:f8:05:15:2c:18:7e:30:a8:bb:47:94:96:8c:
e5:4d:eb:42:37:a5:47:cb:21:43:fe:c2:8e:ad:bb:58:3a:46:
1a:c6:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:19:23 2025 by rpki-client