Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/F26DAE0AB10D11E5894F4D1CC4F9AE02.roa
File: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (raw, json)
Hash identifier: ynqxjgpY/LcV5YgALtE8f4Xl7ViuJV7AKID6+ElR2jc=
Subject key identifier: B2:04:FE:18:B8:73:C0:02:19:D5:42:65:70:2C:EB:60:13:7F:F5:AF
Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
Certificate serial: 23A5
Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/F26DAE0AB10D11E5894F4D1CC4F9AE02.roa
Signing time: Wed 22 Jan 2025 15:52:55 +0000
ROA not before: Wed 22 Jan 2025 15:52:55 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 133092
IP address blocks: 103.65.200.0/23 maxlen: 23
103.65.200.0/24 maxlen: 24
103.65.201.0/24 maxlen: 24
103.233.182.0/24 maxlen: 24
103.255.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9125 (0x23a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147259
Validity
Not Before: Jan 22 15:52:55 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67911456-11cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:59:dd:16:93:78:83:2e:01:d2:c9:74:8a:
9f:d4:fb:27:ac:60:04:8b:4d:2d:17:b4:42:d2:21:
70:82:1e:3e:d7:58:fb:da:ff:f2:a2:ef:69:43:5a:
45:b4:f3:53:fc:a2:98:f7:97:05:a2:8e:bb:b4:c9:
f0:42:6e:dd:c6:35:af:0a:ca:1a:80:fa:92:a5:6f:
2b:ad:24:54:32:35:cf:18:a8:ae:89:2e:fa:ae:b4:
07:4e:2c:a6:65:5c:e0:07:db:9f:0d:6e:a3:11:54:
17:22:46:12:fe:8d:3e:4c:db:c3:d4:f2:1b:38:4c:
8d:fd:ce:68:55:4a:59:6c:5f:87:83:ef:33:cb:6f:
02:97:05:61:10:de:69:c2:ae:42:14:77:12:64:cd:
31:43:a5:9a:e2:65:2f:35:b0:f7:97:4e:3c:01:c6:
12:a3:5c:97:ca:7b:60:44:5e:50:8d:05:18:8a:17:
ab:6b:ad:9d:a4:99:9d:71:36:98:bc:05:5b:23:98:
bf:29:d7:6a:cc:a9:cf:6b:4a:f1:c2:90:6b:19:ea:
7e:43:63:8a:da:f8:21:40:df:7e:5a:95:0d:45:03:
08:d9:99:a2:2c:8e:c6:ac:a8:09:e0:49:3a:08:dc:
09:73:fa:aa:4a:14:e8:1d:b7:c5:64:43:71:66:4e:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:04:FE:18:B8:73:C0:02:19:D5:42:65:70:2C:EB:60:13:7F:F5:AF
X509v3 Authority Key Identifier:
keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/F26DAE0AB10D11E5894F4D1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.65.200.0/23
103.233.182.0/24
103.255.126.0/24
Signature Algorithm: sha256WithRSAEncryption
11:20:06:ae:4e:66:65:42:51:55:51:d2:20:a4:ac:d7:d9:c3:
e4:d8:35:19:9f:7b:2f:17:2c:0f:e4:fd:b0:1a:e5:1c:9f:ab:
c5:d8:8c:2b:a5:08:1f:fc:bf:79:58:19:20:7e:be:a6:a9:d6:
6f:8e:0b:3f:e0:a9:ae:07:e2:12:73:cb:f8:5c:55:c7:c6:12:
c7:81:f0:0a:2c:31:c9:36:1f:b9:2c:5c:44:89:4c:c8:96:ea:
31:58:7d:ed:ba:71:c3:21:56:ee:ba:d1:d7:17:ca:26:e6:2b:
6c:20:b8:64:d8:bb:95:61:ea:f8:8f:e0:e2:ca:91:10:ef:36:
49:18:bb:a4:85:3a:de:95:f3:8e:e3:ac:19:a4:ab:04:85:d1:
ad:2c:65:ea:5c:77:af:d0:f4:91:b7:e8:91:fd:fc:0d:09:c0:
94:84:8d:df:67:20:c3:3d:11:c7:86:95:b0:81:f4:5d:eb:01:
71:9b:e6:d1:59:1f:22:85:62:bb:17:98:4b:c6:70:76:d1:b5:
43:c1:07:2b:c9:1e:21:3d:22:da:64:24:4c:f7:7a:53:02:10:
11:62:cd:8f:47:ac:93:c5:21:b0:9f:db:e2:c2:e7:b3:f4:53:
4e:85:92:ab:c4:37:3c:0d:5c:1e:fa:e0:8b:b4:9b:60:ee:b0:
b1:fc:ce:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:24 2025 by rpki-client