Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/9ABE08C606F311F08407D351C4F9AE02.roa
File: 9ABE08C606F311F08407D351C4F9AE02.roa (raw, json)
Hash identifier: RQyjCLUwrgZbR6fskgXnLbpzIWDhx9QR1OQK+G+KBx0=
Subject key identifier: 95:39:C9:14:71:E4:B2:E0:FC:15:52:FC:AE:1D:35:D4:59:B6:11:91
Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial: 030A
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/9ABE08C606F311F08407D351C4F9AE02.roa
Signing time: Sat 22 Mar 2025 08:00:27 +0000
ROA not before: Sat 22 Mar 2025 08:00:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149765
IP address blocks: 103.185.226.0/23 maxlen: 24
2400:6ae0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918213B
Validity
Not Before: Mar 22 08:00:27 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67de6e1a-67f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:14:52:39:ee:7c:1b:9c:24:22:6d:21:d6:
37:b7:c8:76:c6:09:85:43:f8:90:58:0e:2d:bc:9d:
21:11:99:30:7e:9a:e6:e6:8f:a7:ce:bd:47:26:54:
42:bb:13:26:5b:05:d3:4b:c8:10:ae:d4:cd:82:d1:
ec:c8:94:b4:7c:0a:91:ec:13:b6:50:97:ed:91:7b:
f1:31:5c:f7:11:83:7c:0a:8b:23:aa:40:de:3f:35:
d2:58:f1:fc:63:0b:c4:01:41:29:aa:0d:91:6d:16:
db:38:1b:f5:a6:ee:a3:a9:25:1e:2d:33:1e:cd:ef:
4d:45:31:c5:e1:5d:c9:2b:39:ce:ee:e8:de:1d:5a:
19:dd:7a:8c:d0:7a:74:d2:ec:0b:50:3f:8d:c5:d9:
f5:66:8a:2b:82:0e:51:1c:0e:31:de:00:dd:89:37:
b2:7b:3f:a0:a8:e3:20:4a:93:d2:1a:b7:e4:9a:64:
4a:8d:87:c3:df:aa:0e:38:e3:30:54:79:2c:19:a9:
af:19:af:29:07:49:2f:b8:fd:4f:b8:ac:10:13:cf:
8e:37:8e:fe:81:58:62:09:f7:a2:50:e0:39:79:c3:
3a:14:1f:7d:bf:35:9e:cd:14:2c:0d:ba:c5:92:cd:
f9:78:ef:61:be:6b:e8:73:e0:f7:ad:d8:1a:96:f0:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:39:C9:14:71:E4:B2:E0:FC:15:52:FC:AE:1D:35:D4:59:B6:11:91
X509v3 Authority Key Identifier:
keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/9ABE08C606F311F08407D351C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.226.0/23
IPv6:
2400:6ae0::/32
Signature Algorithm: sha256WithRSAEncryption
77:4c:0b:09:63:33:de:6f:7e:3f:1c:23:15:51:44:53:80:cf:
b5:00:fd:91:2c:d4:14:a9:12:84:b1:dc:a0:2e:0a:aa:bf:03:
6f:dc:72:84:38:7c:3c:fa:56:00:e3:b8:94:b1:db:8d:f5:fe:
b7:bc:68:5a:9b:5a:4a:5f:fb:6d:56:ab:16:b3:79:71:59:8c:
73:f9:c2:53:d8:0b:dd:82:92:33:3d:5e:24:a5:64:14:89:0b:
1f:f0:a5:70:09:63:3f:c7:22:92:90:12:48:bb:b4:25:a1:b9:
cd:c6:b2:e1:56:c0:e7:12:9d:df:51:32:80:e7:af:a4:5a:8e:
ea:8d:44:22:59:0b:fa:e6:00:73:cb:21:ba:85:66:f5:71:e5:
41:16:ed:1b:ee:77:cf:45:58:3a:a9:b8:8e:be:44:20:0e:85:
f8:2e:0c:ee:96:08:71:a9:23:e1:5d:73:c7:a2:27:f9:a5:4e:
ec:9e:6c:a5:1e:1c:af:65:9c:17:8a:e7:b4:d7:7f:49:91:ca:
2a:8c:6b:3f:df:8f:b2:c0:0d:d6:90:8a:2d:9e:b1:a8:79:59:
3d:ab:49:98:c2:ed:de:42:52:89:4a:99:b2:91:a3:ab:58:00:
de:76:88:59:6c:02:a8:24:bb:d1:fc:4d:2e:ce:f2:14:38:de:
d6:06:4b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:04:55 2025 by rpki-client