Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/1EE23948F8F411ED96463014C4F9AE02.roa
File: 1EE23948F8F411ED96463014C4F9AE02.roa (raw, json)
Hash identifier: P12MNrI/Sv3x/5WhhR/xkFqPpUABisLPf88NE6poKHE=
Subject key identifier: 4D:01:72:F0:2E:24:83:94:29:FB:02:0E:B3:60:1F:E3:6F:A1:50:CF
Certificate issuer: /CN=A9190057/serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
Certificate serial: 0157
Authority key identifier: AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/1EE23948F8F411ED96463014C4F9AE02.roa
Signing time: Fri 07 Mar 2025 03:19:58 +0000
ROA not before: Fri 07 Mar 2025 03:19:58 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 134555
IP address blocks: 103.16.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190057
Validity
Not Before: Mar 7 03:19:58 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ca65dd-175a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:f9:d3:dc:2a:48:7d:3f:5f:94:9b:9c:41:
f4:ab:ad:1b:a6:e6:98:53:9b:e9:16:64:88:14:1a:
49:8c:2f:17:c2:28:9d:85:f4:79:cc:c0:04:cf:8d:
12:13:4d:b5:76:d0:dc:fd:32:2b:cd:5b:44:bf:96:
63:29:d7:61:e8:b5:44:9f:30:67:28:4b:d9:e2:5a:
08:b4:25:58:6f:d1:4e:9b:72:1f:49:de:a9:53:7f:
eb:9b:2d:15:7f:5c:76:06:21:b7:2c:6a:dc:b5:a8:
de:3f:9d:55:c3:42:aa:17:fe:4e:8e:ee:8a:05:72:
45:b3:3a:24:4a:e5:27:c4:74:d2:0c:3a:3b:f3:d1:
5b:b1:a6:89:6d:0d:48:c8:fe:a1:3e:69:b6:1c:b0:
6c:11:8c:5e:ce:79:3d:66:2a:a2:e2:53:86:a5:cc:
10:a7:a3:e0:2c:3a:f0:b9:c2:65:e7:43:be:b7:a0:
a4:f1:09:ae:30:f3:fe:13:33:5d:63:13:a4:49:94:
1b:2b:a1:bf:64:76:ea:07:a2:85:a1:89:48:be:0f:
ab:cf:1f:5b:d2:0f:fe:a0:38:0a:13:78:a4:64:b4:
a7:78:a1:98:d8:39:37:0b:86:f1:14:7f:51:c4:6d:
7e:04:f1:25:55:da:d6:d1:d7:ab:c5:47:af:ea:16:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:01:72:F0:2E:24:83:94:29:FB:02:0E:B3:60:1F:E3:6F:A1:50:CF
X509v3 Authority Key Identifier:
keyid:AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/1EE23948F8F411ED96463014C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.16.194.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:b4:39:37:45:03:7c:4d:a8:80:d6:a2:37:24:91:aa:ac:f7:
62:eb:50:6a:5f:6b:1a:77:7d:75:21:a6:71:81:1c:6b:01:86:
b8:4e:85:6d:a7:52:04:9f:65:f1:de:d1:89:45:56:9b:89:41:
c3:bc:c1:70:56:57:59:c5:1f:e5:39:7d:c9:c7:8b:18:cf:67:
d0:80:56:2b:00:46:58:09:11:bb:3e:b1:09:fc:32:48:ae:72:
4c:2f:29:dd:93:40:cd:d8:3e:6b:bc:e5:52:4c:ab:51:91:51:
c1:e5:dc:7c:c8:b2:19:c8:8b:79:d7:17:e6:5c:3b:de:54:66:
42:97:00:cd:08:86:2a:a4:14:74:a2:1c:93:9f:a0:dc:2a:28:
df:91:a2:a7:23:2b:c0:b2:d3:7f:66:63:72:47:8d:b4:c7:1f:
55:8b:a2:6f:2f:e4:0f:b0:a8:91:a6:32:fb:f8:25:f6:ce:b4:
86:94:52:91:31:44:e9:c6:50:42:6f:31:d9:5c:ca:ac:88:3e:
53:78:2e:d0:8a:df:64:a9:67:bb:d9:03:87:7a:d4:90:2e:74:
95:f1:f3:19:a7:60:c3:90:db:3a:d6:dc:26:a6:92:d8:94:fb:
05:12:d3:37:ae:53:36:4b:22:ab:a6:18:62:d2:af:37:6a:bb:
2e:83:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:35:30 2025 by rpki-client