Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/034BA52C03AE11F0BDE1863DC4F9AE02.roa
File: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (raw, json)
Hash identifier: ab26F3EYbMgcHX5lgOt6ZwE49tJ4dMZ5pQVz6Dx+1d8=
Subject key identifier: 89:E0:5F:12:9A:EF:04:D5:FC:EB:B5:73:15:37:C4:4A:4C:54:CB:1A
Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial: 057C
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/034BA52C03AE11F0BDE1863DC4F9AE02.roa
Signing time: Tue 18 Mar 2025 04:03:56 +0000
ROA not before: Tue 18 Mar 2025 04:03:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 153656
IP address blocks: 103.165.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1404 (0x57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897B3
Validity
Not Before: Mar 18 04:03:56 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d8f0ac-95f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:d2:79:52:ac:10:b8:c5:0c:f8:96:fe:a2:
3e:b0:5f:26:2c:fa:6a:ca:1b:bf:b5:4d:89:75:44:
4c:d7:98:c7:78:51:30:c8:56:3d:23:e5:e2:13:f7:
9d:99:33:0e:35:89:aa:38:b6:d0:d8:a8:98:79:b8:
ca:0b:1e:a1:4a:a1:f4:0b:de:5c:1c:ad:e1:87:41:
71:3c:eb:37:59:59:e6:a5:d6:9b:a6:61:78:19:a7:
e0:2c:0c:e3:28:cb:a4:eb:eb:38:8a:27:e1:7f:53:
5c:fa:43:6a:f0:71:03:3c:dd:2e:82:3a:5f:ef:25:
22:3a:52:30:e3:c8:8f:e0:ea:ae:7f:3b:4f:cd:69:
f5:60:29:62:1f:bc:f5:88:8f:17:80:51:70:56:ee:
df:44:03:d2:af:bb:75:87:3e:ec:af:10:ef:10:ca:
70:5a:3f:b8:15:db:fc:2b:7c:76:f9:42:73:5f:81:
fc:37:57:1b:22:eb:e0:36:ea:d0:81:c4:46:29:b1:
cd:a8:2d:ba:9c:59:19:b6:36:6a:93:39:63:54:0b:
d2:fc:57:03:16:9f:3f:6a:86:22:1d:2b:69:0d:fe:
da:a9:2d:44:6f:fd:57:ac:22:3a:07:e9:be:50:32:
00:b2:ae:02:82:1d:82:a1:05:f2:a5:48:cb:f5:70:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E0:5F:12:9A:EF:04:D5:FC:EB:B5:73:15:37:C4:4A:4C:54:CB:1A
X509v3 Authority Key Identifier:
keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/034BA52C03AE11F0BDE1863DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:1a:ba:3f:a9:1d:6b:20:f6:ab:e3:39:2a:e1:30:f6:43:f0:
bf:8c:fd:1d:31:55:94:88:c2:7b:73:f9:ab:a6:43:5d:65:86:
f2:f3:c5:4d:27:a5:b3:fb:a5:85:fc:5f:9b:d1:00:b5:c3:6d:
82:3c:1f:ed:21:24:1d:94:90:9f:70:a8:c6:32:30:20:04:bb:
77:e7:57:af:62:a8:16:fb:4b:cb:7f:9f:d7:40:93:ad:a0:72:
98:e6:ab:eb:2f:46:cf:0b:3f:dd:2b:23:a6:ff:6f:00:d8:97:
ad:bb:ba:bd:be:53:b5:1c:b6:7f:82:33:c0:4d:65:c3:16:60:
3d:3e:44:2c:a2:6f:c5:1b:5d:54:31:3d:61:4a:ae:6c:69:a1:
e6:37:d6:8b:0f:cb:ab:8b:0c:41:f6:97:79:0a:b2:aa:2c:92:
27:21:bf:11:cf:81:d7:2b:c6:85:d8:83:e8:f3:8c:d1:41:e5:
50:41:24:2a:19:2f:6f:71:48:61:f0:48:e9:de:f8:a2:76:87:
a9:b6:75:f5:fb:4a:e7:91:70:6c:ba:85:82:22:59:e3:e3:f8:
b5:3f:27:97:d1:04:f7:46:b3:38:ea:f0:82:98:d2:a3:fa:31:
c5:a4:66:b5:9f:e5:40:a6:0a:21:c5:1f:e3:14:29:aa:ec:13:
44:45:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:53:34 2025 by rpki-client