Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/A18ED49C9A0D11EC92AD8580C4F9AE02.roa
File: A18ED49C9A0D11EC92AD8580C4F9AE02.roa (raw, json)
Hash identifier: qJKad/+ZiMDaDiVaiAw8w9uuhueQYfaURJcRIR4BlLQ=
Subject key identifier: 8E:2F:5A:17:70:66:74:13:52:04:B1:C0:B2:3E:50:8E:3B:76:3B:52
Certificate issuer: /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Certificate serial: 113D
Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/A18ED49C9A0D11EC92AD8580C4F9AE02.roa
Signing time: Thu 20 Feb 2025 17:55:38 +0000
ROA not before: Thu 20 Feb 2025 17:55:38 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 138466
IP address blocks: 103.126.52.0/22 maxlen: 24
2404:5c0::/32 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4413 (0x113d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F600
Validity
Not Before: Feb 20 17:55:38 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67b76c99-1a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:f1:7f:da:b6:af:b8:df:7f:36:f1:1f:1f:
c3:52:25:6a:5f:99:fd:11:02:b0:45:db:80:63:10:
21:3d:f4:db:80:18:53:6d:07:a2:80:95:8d:87:0e:
3e:17:d9:85:0c:5a:03:51:d0:29:a5:08:53:07:79:
bf:3e:5b:3f:0d:c7:cf:8c:18:0b:f5:1c:9b:1e:26:
27:f9:83:16:de:ae:de:64:9a:0f:9c:15:fc:a1:68:
02:5b:8a:7d:6f:9e:27:79:2c:89:45:95:97:a9:ca:
1a:12:5f:75:12:79:93:47:e5:a0:ff:13:04:e8:77:
ff:3d:9d:40:53:0a:ce:ea:50:07:90:0d:5e:43:bf:
c8:4c:81:72:9c:f6:65:2a:47:52:6e:86:ce:44:f4:
0a:5b:33:40:1e:7a:2a:58:84:ad:79:a3:23:fe:1f:
6a:ec:8f:ae:fb:75:8e:d2:1f:b6:16:54:0c:80:1d:
96:12:85:48:1c:29:4e:bd:79:b1:fc:8f:eb:8f:e8:
4b:21:7a:f5:d2:64:7a:b6:41:05:fe:52:9b:03:04:
18:4a:f5:90:be:d3:1a:7b:4a:f1:6e:37:eb:95:6f:
ea:39:70:d4:88:eb:eb:6a:46:d6:d0:21:13:f3:53:
8c:73:ca:87:3e:aa:11:5a:65:e8:a9:29:13:52:69:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2F:5A:17:70:66:74:13:52:04:B1:C0:B2:3E:50:8E:3B:76:3B:52
X509v3 Authority Key Identifier:
keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/A18ED49C9A0D11EC92AD8580C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.52.0/22
IPv6:
2404:5c0::/32
Signature Algorithm: sha256WithRSAEncryption
88:5a:69:cd:b4:d9:e9:6f:53:fb:04:16:8d:b7:ea:62:06:4d:
3d:c4:25:78:a0:0c:e8:cf:32:17:bb:36:16:1e:27:55:86:86:
23:30:7c:3a:c4:32:19:ba:2c:5a:fa:3b:85:6f:7a:b5:78:dc:
56:30:26:a0:32:a5:45:79:f4:21:65:51:8f:74:74:d8:23:3e:
59:c0:4b:64:cf:4b:9f:c7:be:63:19:83:c5:c2:d6:e0:39:79:
3c:91:42:aa:e2:0c:bc:e1:f3:31:76:fe:44:98:b6:52:f4:0b:
0e:2b:d6:9f:71:87:b1:6f:76:5c:9e:94:96:d8:02:87:39:e6:
cd:81:6c:76:5d:de:5f:84:4b:44:51:3b:f7:5a:8e:3a:bd:44:
67:7a:58:09:23:90:bb:66:b6:5a:c6:5d:fb:22:3f:cb:d5:55:
f2:79:75:98:53:42:5f:4d:b9:84:6e:82:23:13:18:be:d4:0b:
b5:60:1a:cd:bf:13:dc:89:3d:68:4d:52:a0:92:08:76:22:53:
33:80:d1:a6:ef:06:24:43:14:f9:36:2c:7e:85:cb:a9:c1:53:
00:88:3e:00:14:59:a9:c9:fa:97:de:f9:aa:5a:e5:bb:83:87:
1d:3b:20:3a:46:36:c0:7a:c4:01:5c:10:19:36:38:c0:12:57:
df:de:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:02:53 2025 by rpki-client