Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/744CCD5834F911E98AB73628C4F9AE02.roa
File: 744CCD5834F911E98AB73628C4F9AE02.roa (raw, json)
Hash identifier: Xi30fjCwdu1ys1ihQmxOl+2PGZkizPRtJAwU5and9os=
Subject key identifier: F0:40:D3:1B:34:DA:D8:08:CA:D3:49:05:9A:11:7B:E1:01:0F:57:AB
Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Certificate serial: 105C
Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/744CCD5834F911E98AB73628C4F9AE02.roa
Signing time: Fri 28 Mar 2025 17:57:52 +0000
ROA not before: Fri 28 Mar 2025 17:57:52 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137519
IP address blocks: 103.111.126.0/24 maxlen: 24
103.118.18.0/24 maxlen: 24
2001:df4:8300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4188 (0x105c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4E2
Validity
Not Before: Mar 28 17:57:52 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e6e320-47df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:51:1b:4e:60:ba:50:d2:b7:cb:10:51:58:
95:2d:94:f2:da:81:28:20:ae:db:6b:86:51:48:51:
10:9e:c0:ab:29:6b:32:57:2b:a9:59:3a:de:6b:c6:
dd:1e:03:a4:de:31:5d:3f:ae:ee:75:e6:d8:d8:f0:
61:b9:92:3a:66:15:cc:3a:19:91:d9:94:d5:c8:c6:
fe:6b:a5:fb:af:b2:eb:70:48:70:b3:c6:51:2e:1f:
73:7a:f9:ce:02:37:04:0b:78:ec:1b:f1:54:e5:be:
7f:24:41:26:58:bb:0f:5a:39:c2:7b:ec:ba:8a:e5:
f8:eb:f4:b3:a0:e0:dc:e7:9b:1b:4d:b4:a8:9c:c2:
98:57:f8:02:38:f1:4b:bd:35:c3:1a:16:cc:99:f6:
ef:a0:9c:51:35:e1:6f:ed:1a:d2:c0:74:84:6c:dc:
19:60:d2:8d:2f:6f:32:40:f4:87:f5:e0:9a:4a:8f:
ff:48:b7:5a:e8:76:2a:fb:1a:1b:9d:02:c6:17:8f:
3f:b6:c0:0e:af:3b:5f:57:78:06:52:97:66:a9:92:
d2:95:36:66:09:6e:4e:bd:4c:56:bb:ab:95:04:90:
25:f5:94:ab:5a:a2:bf:24:9b:4a:e6:cc:d6:0c:d1:
bb:8a:4e:ef:db:8b:df:d9:bc:ec:2d:fa:c6:2c:01:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:40:D3:1B:34:DA:D8:08:CA:D3:49:05:9A:11:7B:E1:01:0F:57:AB
X509v3 Authority Key Identifier:
keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/744CCD5834F911E98AB73628C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.126.0/24
103.118.18.0/24
IPv6:
2001:df4:8300::/48
Signature Algorithm: sha256WithRSAEncryption
9e:f6:60:be:d4:5a:d0:2d:b0:95:fc:b3:6a:fa:1c:fa:af:7b:
9a:d1:eb:c8:eb:a1:d2:a0:11:d4:52:21:f5:0f:69:6c:65:aa:
c3:de:a4:07:3b:24:ce:1c:66:e3:2c:67:22:66:7f:ad:31:0a:
22:9d:81:38:eb:b5:50:06:04:da:86:0f:a0:02:2b:a1:0c:fc:
35:a6:75:4c:6d:19:a9:91:8b:ba:13:8d:45:85:e4:b1:cf:c8:
02:e8:c0:98:7a:68:51:d6:31:22:8e:c2:eb:e4:67:bb:74:60:
16:e0:3f:e9:f3:72:e6:46:0c:07:4d:6c:ee:95:ef:d5:ae:e1:
28:69:2c:72:fd:61:cd:23:5a:55:d3:2b:9b:86:bf:e4:07:1f:
c7:43:db:b2:de:91:5b:75:28:5c:de:01:fa:c4:a9:c2:97:55:
d0:e2:a1:cc:18:32:d6:a8:34:0d:3b:c4:ed:40:eb:fa:2a:08:
ea:31:4a:9a:73:93:6e:94:91:be:27:04:2f:7a:b9:e9:b3:88:
39:8f:ef:3a:5b:03:d5:f5:13:ef:85:b7:dc:e0:53:19:9e:8a:
31:eb:a9:89:03:09:f4:3c:13:15:36:5c:7d:46:b2:50:88:9b:
72:e6:22:9b:e5:5f:8a:42:6c:28:3d:1a:99:6f:ee:c4:1d:e1:
e3:b7:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:04:19 2025 by rpki-client