Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DCDFB82CA17B11EAB16F4954C4F9AE02.roa
File: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (raw, json)
Hash identifier: lknVK1a919SkTgA0PG7eZEzbdPbdM/q7NMLGN6N/gRs=
Subject key identifier: C1:44:3A:1E:AE:A0:23:EC:E7:82:3B:23:BE:E2:F8:49:1D:F1:98:11
Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Certificate serial: 0919
Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DCDFB82CA17B11EAB16F4954C4F9AE02.roa
Signing time: Wed 26 Mar 2025 18:27:01 +0000
ROA not before: Wed 26 Mar 2025 18:27:01 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.250.72.0/22 maxlen: 24
103.226.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F08
Validity
Not Before: Mar 26 18:27:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e446f4-64e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:74:ae:94:83:cb:2b:f4:f2:ae:ed:48:3a:
89:54:24:d4:2f:f8:17:33:15:45:c7:1d:bd:2d:46:
87:2e:3c:86:ea:f7:d7:18:ef:1a:43:21:df:8b:94:
5f:5a:d4:27:ef:fc:37:ae:ff:36:48:6d:df:c8:d2:
ea:8b:3a:b8:e6:b5:b8:cf:b0:98:38:8d:fc:ed:2d:
75:e6:17:96:ff:0e:00:c4:0e:16:72:ed:93:e2:ca:
1e:65:67:43:9a:f3:c0:6e:ed:b5:d0:3c:2c:c6:d9:
d0:41:f2:b1:b9:d9:5e:f2:22:e9:32:01:fa:40:95:
b6:c0:8f:75:1e:79:49:92:45:04:a0:db:a2:71:b2:
0a:6b:08:33:b5:1d:f1:96:27:9c:85:f7:14:ae:d5:
39:a8:40:e0:52:77:e6:fc:48:ed:93:e4:47:00:d5:
6c:43:ff:5d:98:bf:06:49:43:62:60:e6:e7:06:96:
f6:80:eb:56:a4:82:bb:3a:1e:49:53:1f:f8:8c:c5:
a4:69:b7:d3:c9:49:37:ae:2c:8d:6e:ab:ba:ed:0e:
e3:ea:69:64:e9:54:d3:b6:02:13:14:72:f2:00:cc:
ef:8b:f3:33:21:2b:79:61:c8:ad:44:3c:09:09:df:
7f:3a:63:9b:e5:e4:53:65:17:65:40:b1:d0:a5:41:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:44:3A:1E:AE:A0:23:EC:E7:82:3B:23:BE:E2:F8:49:1D:F1:98:11
X509v3 Authority Key Identifier:
keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DCDFB82CA17B11EAB16F4954C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.72.0/22
103.226.68.0/22
Signature Algorithm: sha256WithRSAEncryption
14:8f:17:40:6e:07:74:91:4b:39:bf:3a:21:6f:7b:55:09:80:
10:9b:e7:34:c6:7b:30:94:c8:35:10:81:14:d4:44:65:ca:0c:
e8:70:cb:2a:63:29:6f:12:0d:9b:f7:74:ec:c1:6e:8e:f3:25:
e5:8a:fa:58:49:b4:f9:a9:27:e2:37:0c:21:79:48:a8:9a:ac:
15:ab:bf:36:fc:93:f7:97:b9:64:f7:09:9c:2d:6b:d8:0e:ac:
57:79:53:e9:2f:e4:9d:1c:46:15:a5:21:1b:88:fe:be:73:b6:
87:7c:4e:6f:86:55:4e:b8:40:02:69:dd:64:13:b8:d5:4d:c1:
76:54:6e:84:b3:4d:b5:5d:22:48:58:2b:0a:43:41:e2:67:49:
81:9e:1d:e6:a2:70:a4:0d:36:11:97:f6:ff:27:5b:0d:f3:eb:
dd:f6:a9:51:de:30:bb:77:d5:9c:76:25:b8:23:7f:a0:92:6a:
bf:a6:c6:2d:ec:8b:11:f3:e8:9b:d5:db:d5:c3:f6:2b:4f:11:
d4:41:41:4e:f9:75:10:37:5a:a2:0b:d2:2e:4c:7a:fa:f1:55:
a0:80:34:84:56:b7:80:87:59:75:fd:f5:91:f1:15:a3:50:0b:
85:d1:03:5e:b1:36:df:ee:fc:8f:17:59:56:94:dc:93:5d:e9:
b9:71:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:11:01 2025 by rpki-client