Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa
File: 1D171A58C76211EC95B63648C4F9AE02.roa (raw, json)
Hash identifier: u3mehOty6gVz9qRridn7xauePsp938KB+uM0lLKTBHU=
Subject key identifier: 68:99:12:22:57:FF:46:48:00:87:09:49:C2:71:47:92:BC:08:D0:75
Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Certificate serial: 033B
Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa
Signing time: Wed 19 Feb 2025 02:54:19 +0000
ROA not before: Wed 19 Feb 2025 02:54:19 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136237
IP address blocks: 103.84.136.0/22 maxlen: 24
2400:a040::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827 (0x33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193339
Validity
Not Before: Feb 19 02:54:19 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67b547da-4d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:77:a1:1b:60:19:8d:4a:23:21:19:be:15:
b4:3a:27:30:0c:5a:5d:fc:0a:ff:22:6a:5e:f4:65:
2c:82:43:a1:24:9a:ff:f8:c0:85:e4:d5:eb:2a:77:
62:b1:34:7f:26:c1:83:b7:06:14:cf:5c:7f:55:63:
41:ce:5b:eb:b7:3f:f2:4c:b0:8c:78:ff:31:4d:8f:
a0:5f:48:51:74:7c:35:fb:4a:19:00:a4:be:39:de:
5e:d1:0d:cf:cb:99:ef:42:d1:62:8e:9e:be:49:f6:
7e:d8:f9:0b:92:cf:19:fb:60:5d:2a:04:c3:81:9a:
4f:7d:eb:ce:8d:46:c2:c8:5f:79:de:68:94:2f:ec:
89:be:28:80:2f:f0:96:8d:9b:0e:20:5b:fa:60:ff:
10:40:2b:8e:35:8a:1c:0c:6f:ee:b9:7a:d8:aa:6d:
2f:6a:60:f7:c7:ca:7c:d9:66:06:cf:db:0d:e7:d6:
d6:4b:1c:6e:9d:cc:e7:5a:56:40:ea:01:fe:95:a2:
77:5f:ac:a9:2e:40:2b:4f:3b:75:1d:9a:7f:f2:21:
a2:77:72:43:99:2e:fa:83:01:00:e2:7a:65:44:1c:
15:d6:a7:f3:3e:ea:fc:4c:b9:42:62:29:f1:d5:94:
ad:32:f4:58:5d:aa:7c:6d:73:a7:5d:3f:03:85:d9:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:99:12:22:57:FF:46:48:00:87:09:49:C2:71:47:92:BC:08:D0:75
X509v3 Authority Key Identifier:
keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.136.0/22
IPv6:
2400:a040::/32
Signature Algorithm: sha256WithRSAEncryption
27:0b:1a:b2:ab:a3:d9:d8:d5:43:fe:72:18:6b:e7:07:fe:2a:
68:40:1b:5c:89:2a:f8:32:a3:5c:6b:2a:9a:e9:ee:e3:03:53:
40:ce:2b:91:fa:f1:dc:53:ec:05:b9:25:fe:45:8d:8a:3d:07:
fb:46:39:fa:26:98:e0:a8:1a:30:20:31:07:45:aa:47:52:1a:
8b:07:a6:1c:4b:fb:31:b4:d9:a3:04:52:05:77:c4:39:a1:1a:
6a:13:90:e9:92:5e:34:b1:36:2e:88:0c:5e:30:e0:70:d9:f0:
00:98:75:a6:76:d8:50:57:91:1a:69:f0:45:d5:ff:7a:1f:d2:
a9:a9:15:ca:c5:17:eb:10:3f:24:ac:be:2c:5d:42:00:29:a8:
98:9b:26:29:ee:94:da:ad:69:46:18:3c:f7:2e:77:d2:bc:6c:
97:76:de:e9:0d:12:7e:3e:69:1b:89:83:9d:54:47:5c:78:ba:
8e:d2:8b:42:ab:89:ac:76:2f:e0:90:79:92:a1:7e:a0:83:2a:
4a:eb:dc:fe:07:dd:bb:b7:f6:db:c7:20:36:ea:13:be:8f:32:
75:6d:9a:06:fa:23:d0:3b:7a:95:6b:d5:d0:c5:d4:6d:75:c6:
eb:36:6a:4b:75:b5:44:9c:f8:49:8e:af:95:61:23:61:df:12:
71:50:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:12:00 2025 by rpki-client