Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa
File: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (raw, json)
Hash identifier: ZQeH9s5GaYIk1ZxktX3ZDI1XyJXOlpVX7ljtVr42XF4=
Subject key identifier: 68:DD:16:8D:70:42:D8:E3:6A:1C:43:50:61:1C:30:FA:F8:BA:EC:3E
Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial: 04AA
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa
Signing time: Wed 11 Dec 2024 00:14:43 +0000
ROA not before: Wed 11 Dec 2024 00:14:43 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134711
IP address blocks: 103.12.188.0/22 maxlen: 22
103.197.144.0/22 maxlen: 22
220.158.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE13
Validity
Not Before: Dec 11 00:14:43 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6758d973-1a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:2b:cb:ef:3c:ea:07:20:8c:f4:f0:77:e3:
91:5d:99:74:a8:1e:d1:81:a8:28:cc:7a:de:ca:3e:
5e:f6:27:61:94:0b:dc:6d:d9:ac:ea:55:e1:7c:5a:
a0:02:60:56:37:e7:84:1f:af:62:11:2d:02:39:3f:
1e:61:dc:7e:64:cc:66:d8:75:f0:65:4d:30:f7:8f:
9f:db:01:4c:11:37:19:a9:41:4c:69:1f:31:01:19:
be:98:7d:4b:62:4f:53:4d:c7:3f:3b:d2:dc:73:60:
c4:27:ee:f9:bc:88:92:30:eb:c0:2e:78:4f:c7:47:
bc:70:c5:1d:c7:9b:24:75:d9:48:d0:60:0f:5c:c1:
01:94:8e:ea:b7:03:a1:c7:ac:2e:27:bb:30:84:92:
6b:6d:cc:52:d7:71:40:19:fa:77:ad:64:89:d7:1b:
58:35:cc:39:80:ae:b6:81:f7:2a:9f:28:13:64:ce:
53:30:59:3b:07:b2:b4:6a:c8:c7:5d:75:7a:65:bb:
69:08:c1:9b:55:f3:6f:b0:59:c3:10:d4:77:6e:cd:
d9:f5:9c:7e:7a:71:d1:fd:11:6e:46:d9:2b:e4:97:
ab:97:df:a8:fd:f0:24:b7:d1:e9:16:59:55:bb:b9:
68:58:27:2f:ab:42:c8:fe:3e:c0:b0:0f:51:d6:04:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DD:16:8D:70:42:D8:E3:6A:1C:43:50:61:1C:30:FA:F8:BA:EC:3E
X509v3 Authority Key Identifier:
keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/D758E96CF8FF11ED98C6D45FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.188.0/22
103.197.144.0/22
220.158.188.0/22
Signature Algorithm: sha256WithRSAEncryption
93:08:67:79:c1:6d:07:52:48:2d:7c:b1:e7:86:30:af:53:b7:
8c:e0:f7:f9:67:01:b1:f6:f2:e7:ae:04:9a:60:42:bc:6c:2e:
79:e5:99:b8:93:47:69:4e:ec:92:07:92:bf:40:b8:23:da:5b:
b4:83:be:ce:83:a8:d2:57:fc:5c:4a:38:9e:f4:fc:dd:08:65:
fb:46:57:b0:7e:d4:e0:79:59:c4:5c:61:80:4d:63:be:36:eb:
1d:15:cd:4a:bf:1f:ca:e2:2d:73:4b:5c:bd:21:de:8e:c8:4a:
54:05:1a:10:fe:45:3e:ad:5c:20:3f:35:ed:a6:54:49:2c:bc:
43:dc:3e:ba:dd:39:62:89:aa:58:d1:34:8a:0d:e4:27:51:66:
6e:94:20:95:3e:b2:3f:08:6a:08:0d:13:8b:dd:d9:b3:77:db:
0e:a2:0e:0f:9c:1a:ab:d9:c6:8d:60:f9:49:0e:98:08:a6:a8:
d5:20:1e:7f:4e:80:1a:84:7f:6d:d3:bb:4d:8a:d8:e8:69:3e:
39:bd:26:98:9f:77:d3:66:23:15:25:5e:bb:54:ad:fe:07:4a:
91:9a:cc:0a:91:3e:d0:8b:3d:c8:07:0c:c7:09:ff:2d:61:93:
92:72:0b:7a:55:d9:a9:d0:5e:aa:c9:70:d4:c7:4c:d7:58:61:
04:9c:da:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:32:55 2025 by rpki-client