Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa
File: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (raw, json)
Hash identifier: FgvpUN85rtr+i1GuoDsaGwxZYbJ7H8djnKwJKhetLt8=
Subject key identifier: 2A:13:5F:7C:B1:69:26:1E:74:FC:82:80:FE:E3:17:1B:8E:A7:9C:23
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0D00
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa
Signing time: Sun 16 Mar 2025 18:08:25 +0000
ROA not before: Sun 16 Mar 2025 18:08:25 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137453
IP address blocks: 103.109.93.0/24 maxlen: 24
103.109.94.0/24 maxlen: 24
144.48.151.0/24 maxlen: 24
2404:4c0:a::/48 maxlen: 48
2404:4c0:b::/48 maxlen: 48
2404:4c0:c::/48 maxlen: 48
2404:4c0:d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3328 (0xd00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D
Validity
Not Before: Mar 16 18:08:25 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67d71399-b309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:f4:91:8c:c5:d1:eb:92:00:da:8a:91:85:
7a:43:9d:a5:af:8a:5f:12:3c:d6:40:34:88:4b:1a:
35:1d:d2:f3:35:94:95:4e:20:6a:68:32:08:d0:13:
24:d1:b6:d3:b3:61:96:d5:94:bb:c4:d0:82:45:f0:
ec:45:30:f2:af:94:40:d1:a2:c4:c2:1d:8b:98:79:
f8:fb:b6:24:8d:cb:5e:ae:15:36:51:c2:a4:f2:e8:
1a:11:c2:64:da:94:3b:fc:26:c4:cc:76:90:25:41:
b2:fd:01:f2:f7:f9:d4:33:d8:f8:be:b5:a3:60:82:
fc:71:4f:69:31:96:cc:c9:e5:7b:0e:f2:72:c2:19:
31:fd:5f:04:b8:3a:48:38:c9:81:a6:61:a5:2b:e7:
12:fb:b5:fb:6e:6c:f2:62:bc:2c:35:6d:94:2b:21:
87:74:ea:29:ce:2c:85:6f:d1:a9:b1:58:59:83:f1:
05:eb:02:89:46:66:75:77:c8:44:26:57:ad:e3:a3:
f5:d6:f5:ab:97:64:02:41:8e:d3:73:2b:82:fa:92:
3f:d4:56:39:68:c3:ab:54:89:ff:9e:92:3b:8d:6f:
0e:61:c7:47:a9:ac:36:e3:5f:86:f8:e7:c1:dc:2a:
55:8c:2d:2c:bf:48:4a:25:64:b9:df:5a:8e:6a:c0:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:13:5F:7C:B1:69:26:1E:74:FC:82:80:FE:E3:17:1B:8E:A7:9C:23
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.93.0-103.109.94.255
144.48.151.0/24
IPv6:
2404:4c0:a::-2404:4c0:d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7b:ab:25:10:dd:07:94:7c:5d:e9:a4:97:bf:d7:46:b9:04:1d:
35:29:f0:ba:cd:c5:e3:2d:fd:b1:f8:47:c8:ed:79:7b:dc:9c:
6f:f0:c6:11:e9:5a:49:7a:c6:55:b1:64:6d:e5:03:4f:97:8e:
94:57:57:29:dc:f2:46:e2:8e:22:ec:fa:b4:78:16:51:24:fd:
29:d0:f1:ad:a8:62:9b:d6:d7:87:9c:11:6e:a9:7d:ce:6b:b7:
a8:e6:78:2c:c1:60:a6:eb:8c:18:1c:c8:08:0f:ad:55:c8:99:
d6:85:1c:2d:d1:77:92:93:b3:e8:09:79:4e:f0:b3:ac:fb:a7:
60:e9:1a:17:27:41:4f:02:0a:af:c1:aa:0a:af:d8:23:15:30:
ed:db:8a:bc:bd:12:11:eb:a4:f1:83:94:2c:3e:e8:8d:9e:8e:
d2:4e:72:df:ca:f1:b7:bc:86:a6:fb:6f:d5:6c:4b:9d:62:a5:
77:38:8c:97:92:69:16:b8:b8:dc:5c:40:49:c2:c8:4a:63:a2:
1d:2e:21:c7:78:72:58:48:ba:1e:41:9a:d4:6c:9b:74:00:5e:
46:34:2c:19:26:82:18:0c:18:b7:fd:a8:01:8c:ea:d4:27:b2:
c7:2f:87:55:4e:cc:f8:48:fe:e1:09:f9:51:da:33:69:46:c7:
e0:0a:53:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:34 2025 by rpki-client