Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/0BBF212E1EC211EF82A61739C4F9AE02.roa
File: 0BBF212E1EC211EF82A61739C4F9AE02.roa (raw, json)
Hash identifier: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=
Subject key identifier: 3B:2D:4A:FA:00:89:9E:6E:A2:A3:23:C7:15:A0:BF:E4:47:EC:65:58
Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial: 95
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/0BBF212E1EC211EF82A61739C4F9AE02.roa
Signing time: Mon 03 Mar 2025 07:59:40 +0000
ROA not before: Mon 03 Mar 2025 07:59:40 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 133132
IP address blocks: 103.108.176.0/24 maxlen: 24
2001:df4:1300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152B13
Validity
Not Before: Mar 3 07:59:40 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c5616c-07a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:2a:26:c1:a2:dd:92:96:2a:ea:c9:df:c4:
09:dc:f7:86:51:50:73:9a:a1:84:77:16:67:11:12:
6e:77:bc:61:42:c2:2e:c2:8a:2f:e4:0d:75:36:dc:
ac:1e:e3:bd:17:8b:b3:47:b9:51:2b:e2:25:63:04:
74:b7:59:3c:bb:44:03:7c:7a:b7:7a:7a:8b:78:88:
85:76:6a:2d:a3:ab:ac:68:57:64:a1:56:ba:f2:37:
e5:a1:c9:5f:77:5b:5b:55:b2:e7:65:c8:07:b3:63:
3c:49:00:a9:ed:16:6f:cf:45:9c:05:7e:5a:44:c0:
9c:98:b0:de:e8:d1:a8:a7:ad:4c:4f:d2:88:36:71:
ce:d6:e1:d7:aa:53:a6:c4:bc:69:ed:c8:86:0c:e6:
6f:08:09:35:28:6c:f8:06:cc:18:d5:50:a4:5d:ae:
7c:61:be:22:81:b9:4a:2d:60:df:32:52:ac:5a:65:
fc:be:71:98:dc:a0:1a:2b:e3:0e:4d:0b:e9:68:07:
6d:24:60:97:5d:a4:69:e5:99:6f:03:8e:dc:e2:4a:
63:15:47:e0:29:76:d1:4d:59:4f:ec:ff:a2:4d:99:
55:15:79:e9:11:98:9d:33:77:d7:09:f8:10:b6:21:
82:fd:84:50:b8:7e:74:6d:81:4a:bd:c4:ab:3d:a9:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2D:4A:FA:00:89:9E:6E:A2:A3:23:C7:15:A0:BF:E4:47:EC:65:58
X509v3 Authority Key Identifier:
keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/0BBF212E1EC211EF82A61739C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.176.0/24
IPv6:
2001:df4:1300::/48
Signature Algorithm: sha256WithRSAEncryption
b0:f3:68:ae:63:8f:f5:5f:b2:0c:4c:2d:ff:c7:58:9b:fb:3d:
f7:7f:60:c6:91:f4:82:62:d1:4c:d0:5f:d5:6a:7e:7a:ee:25:
30:92:74:fd:07:60:17:8d:cd:57:fd:06:ed:ef:67:bb:65:42:
c1:27:82:3b:23:1e:0b:cc:cd:a5:02:d4:20:0a:05:f5:42:42:
18:37:cd:77:b1:b4:a1:ba:94:b4:67:fb:e2:38:ae:3e:bb:25:
a6:f4:4c:ec:8c:20:1e:f2:33:45:b9:81:3f:8f:dc:24:0b:c6:
a1:50:6c:57:ba:94:2d:87:e3:b4:c4:91:b9:81:19:2e:57:45:
40:d1:a5:0d:4e:43:d2:41:88:8f:69:5b:67:2f:b4:18:6f:fb:
e8:66:25:52:c9:c4:17:9a:15:7d:77:d3:9e:a4:ee:e3:45:dc:
82:33:ff:59:8c:6f:63:d8:78:47:5b:d0:f7:d7:f7:8f:68:df:
e8:4b:92:a4:28:c3:2b:ad:aa:16:7b:95:4d:32:d3:9b:81:49:
da:08:ee:6d:bb:0c:50:c3:c3:48:c4:0a:a6:42:20:47:b8:c4:
13:19:86:3e:ce:94:5f:e2:18:8f:e5:29:59:36:4f:23:e9:91:
54:e1:f1:48:8e:1b:81:ee:d8:9e:98:1a:60:48:23:d2:0a:c1:
f0:d3:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:13 2025 by rpki-client