Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
File: 8F1629524FD411EB9F1A0673C4F9AE02.roa (raw, json)
Hash identifier: 0+1qqFR2dQAbs8bJZhkVHckF6TnHu8C+B8873r1KDqA=
Subject key identifier: EF:98:70:AA:99:42:FC:1D:18:20:1B:54:82:EE:9C:BC:CF:D7:3F:A1
Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial: 06C0
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
Signing time: Thu 06 Mar 2025 22:13:11 +0000
ROA not before: Thu 06 Mar 2025 22:13:11 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 18001
IP address blocks: 103.87.12.0/22 maxlen: 22
116.204.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728 (0x6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C6D9
Validity
Not Before: Mar 6 22:13:11 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ca1df7-16a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:95:bd:ac:e4:da:ab:58:2e:3a:24:38:66:
a0:c4:30:ef:7d:64:9c:da:d8:fb:ee:eb:94:69:e6:
19:cd:ed:3a:ab:c7:70:eb:e1:7b:60:31:82:d4:90:
ee:d0:07:d3:a7:cd:45:c3:ab:e1:a6:c2:4b:3e:d5:
5c:93:3f:cf:27:eb:7c:6b:f5:25:f0:95:14:44:1b:
ef:d6:d7:07:62:92:9d:d5:0c:3b:55:5e:7d:dd:03:
fb:8a:89:b0:32:ad:4e:39:b6:15:7a:3e:22:27:68:
14:18:32:63:6f:57:a7:cb:c0:c5:ac:b9:45:69:60:
5a:97:b5:02:c6:c0:b4:a2:ec:16:44:73:69:f0:be:
79:cb:38:8d:20:3f:f1:71:cc:c4:fa:6f:50:79:5a:
69:4b:2e:b8:44:a3:ef:98:49:f2:26:85:07:94:12:
47:7b:b1:62:fa:62:59:6a:f3:48:19:c2:55:f6:f6:
cd:0b:60:fd:93:75:68:00:c6:13:19:dd:c4:e7:e2:
6d:af:56:7f:cf:81:52:81:48:31:c2:98:e8:3a:ab:
43:2d:fa:24:96:76:bc:dc:72:29:7d:8e:9e:ea:2a:
f6:56:86:a6:ae:fb:fb:17:e0:fb:bd:28:08:c1:19:
fc:9f:15:72:9e:0c:a6:d8:86:3e:fc:c5:cf:da:bb:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:70:AA:99:42:FC:1D:18:20:1B:54:82:EE:9C:BC:CF:D7:3F:A1
X509v3 Authority Key Identifier:
keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.12.0/22
116.204.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:ce:a2:57:ba:11:30:11:32:ae:18:ab:79:6e:df:bb:d0:39:
ee:a5:6f:f5:fe:21:c4:a2:88:e0:c6:83:fd:82:f3:26:ed:16:
d3:51:36:7c:b0:b2:3e:46:84:03:35:24:bd:64:fc:19:17:eb:
67:83:68:a7:b3:66:a7:ca:2f:77:20:58:50:d8:4e:8a:ef:2c:
22:3c:cb:e2:5c:8c:4f:aa:8e:58:10:d8:5a:ab:5d:50:4a:6c:
cd:91:74:4d:61:6a:32:b5:51:e2:7f:20:68:aa:b4:00:f7:de:
d3:52:cf:34:bc:29:28:f0:16:fb:a4:7d:9c:e9:b9:ca:a0:c8:
e1:bd:ab:5a:25:a9:b5:67:65:9c:15:0b:f7:be:9d:18:a4:ef:
77:b8:c7:a5:65:46:58:33:3f:43:0c:58:c3:e0:14:1f:fa:3a:
d0:47:dc:bb:e5:d2:c2:dd:22:bc:39:e0:ab:fb:4b:4b:74:57:
cc:cc:c0:f8:3a:0a:93:88:04:31:12:9f:19:19:a3:94:f5:a8:
c9:68:4f:2a:68:e9:2c:9c:09:0f:0e:94:da:62:f1:ae:7a:f3:
f4:c4:1f:35:6e:27:3d:dc:ff:95:fa:81:4e:5c:79:c3:7f:4a:
8e:0c:65:5d:5d:f0:a9:71:67:4b:6e:ea:dc:89:27:69:b6:47:
fb:31:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:45:28 2025 by rpki-client