Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/D4F41074FB3811EF841FDB5DC4F9AE02.roa
File: D4F41074FB3811EF841FDB5DC4F9AE02.roa (raw, json)
Hash identifier: 16Gqqt5QongQMmSrYwjFdVRxHCf2AKQuxpsVfZXRSdA=
Subject key identifier: F5:5F:DD:5F:B0:1F:07:DA:6A:34:78:40:65:89:8D:63:41:36:7B:30
Certificate issuer: /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Certificate serial: 71
Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/D4F41074FB3811EF841FDB5DC4F9AE02.roa
Signing time: Fri 07 Mar 2025 09:44:58 +0000
ROA not before: Fri 07 Mar 2025 09:44:58 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.205.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917928F
Validity
Not Before: Mar 7 09:44:58 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67cac01a-b52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:1d:1c:f2:1a:ca:af:fb:1a:1c:91:95:25:
39:f0:6e:0c:c0:3a:14:db:1d:47:c8:16:7c:36:53:
a9:9d:f8:09:28:a5:6b:02:02:55:54:ee:0b:f0:27:
94:9e:1b:a5:cc:bf:04:d2:e6:eb:68:ee:79:32:1a:
7e:fe:55:5e:65:91:91:1e:cd:58:23:3e:08:5d:ce:
e8:35:24:e6:b2:d4:05:b8:70:fd:8a:2f:d6:5a:7c:
61:6d:68:10:dd:86:0a:27:54:bb:b2:67:32:ef:39:
c5:03:9c:6c:ce:d8:1b:93:02:d7:8d:c6:32:15:73:
08:6e:56:7d:de:03:0b:a7:27:7b:8c:85:36:9c:a7:
81:ab:5a:72:de:94:a8:d1:ff:08:6d:ad:ca:37:b4:
5b:ce:dc:ec:2f:10:f4:e2:d8:a1:70:6a:0a:26:73:
69:79:85:66:a0:be:eb:7b:71:bb:35:02:14:b8:79:
b1:55:19:aa:af:15:bd:d9:b1:f1:4a:9f:6b:80:88:
87:50:cc:86:b5:20:50:58:d1:1b:11:5a:d8:f5:f4:
ad:7a:68:10:2a:99:56:a7:54:9d:4c:f3:ba:49:e1:
00:dd:a5:8c:30:80:e3:7e:0d:bc:bd:93:09:41:3a:
d0:f0:4e:b9:c9:e1:cb:91:3d:f6:c3:c3:52:04:1d:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5F:DD:5F:B0:1F:07:DA:6A:34:78:40:65:89:8D:63:41:36:7B:30
X509v3 Authority Key Identifier:
keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/D4F41074FB3811EF841FDB5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.164.0/22
Signature Algorithm: sha256WithRSAEncryption
83:0c:80:5b:9b:7c:fb:0f:47:4f:6a:78:33:e3:0d:ef:14:97:
a5:12:be:7b:7f:96:3f:6a:69:91:63:db:2a:40:8c:fe:b6:1d:
3f:cd:4a:b0:ab:5f:28:63:26:4b:31:af:70:ed:12:9b:f1:6a:
5f:91:93:8a:8b:8d:a2:56:68:80:c4:f2:ec:a6:a5:ef:f3:26:
59:9e:95:fa:5f:1b:b1:3c:f2:b3:07:d3:ae:3d:93:35:1b:6f:
b3:48:85:4b:c3:b6:ac:b9:55:4e:e1:5b:a0:06:fb:f1:37:c2:
58:b8:c8:d7:b4:95:26:de:ee:7d:2c:6d:66:ef:1b:ef:c3:70:
e4:22:e4:01:48:30:ff:8a:34:06:39:3d:9d:fd:0b:2a:0a:3e:
24:f0:87:fa:13:48:2b:b6:74:62:13:09:8c:d4:eb:be:c6:70:
1a:87:7c:8e:99:9e:2c:36:a7:62:6e:e1:e6:c9:94:d6:be:66:
b8:84:3f:4a:b5:fa:ec:ef:56:63:c6:8e:57:50:a9:cd:6f:c6:
75:1b:df:f5:73:62:9e:b6:d0:6d:8d:11:da:49:c5:93:f0:7b:
f9:a2:48:c4:80:b9:ba:ae:ea:d2:bc:bf:4f:ab:14:05:79:2b:
e8:db:cb:77:65:11:e5:ed:22:83:80:29:13:0f:f3:01:11:e4:
e0:eb:56:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:23:05 2025 by rpki-client