Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/8AB545D294A711ECA073AB56C4F9AE02.roa
File: 8AB545D294A711ECA073AB56C4F9AE02.roa (raw, json)
Hash identifier: Vcf2mCMS48B4jAqDXmFIESOPS9I9k4iNYocNkMUmAvc=
Subject key identifier: ED:AA:83:54:DE:66:24:ED:43:62:E5:EF:94:18:5F:7F:9D:63:D6:FD
Certificate issuer: /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial: 0384
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/8AB545D294A711ECA073AB56C4F9AE02.roa
Signing time: Thu 27 Feb 2025 02:25:56 +0000
ROA not before: Thu 27 Feb 2025 02:25:56 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138432
IP address blocks: 103.181.132.0/24 maxlen: 24
103.181.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C99
Validity
Not Before: Feb 27 02:25:56 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67bfcd33-de9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:9e:cb:16:6f:bc:25:62:50:7e:1d:2f:3a:
f6:eb:09:f6:4a:b2:ea:28:42:74:01:6c:ae:0b:f3:
db:e5:93:03:62:54:5f:29:ab:36:ed:d0:0a:d8:9d:
a2:04:16:0d:c2:85:25:37:5b:f5:23:5a:66:4c:6f:
ed:4f:d6:71:d2:8c:da:06:53:0a:32:b1:d1:5f:5d:
2e:91:7d:69:43:da:2e:ab:8a:a6:50:47:ba:aa:ab:
9a:b3:0f:23:70:76:9a:01:4b:a5:22:6d:30:39:bd:
25:d1:60:58:eb:0c:95:5a:58:b6:53:5a:ff:84:76:
fd:d5:69:0a:34:9d:bb:72:d6:bb:d5:cf:dd:35:06:
7e:75:3e:ba:41:92:e9:fb:30:34:9c:04:88:26:f1:
d4:37:ca:a8:1d:64:90:39:32:da:95:3d:97:24:79:
c8:e3:3c:11:43:a4:df:09:c4:9f:76:43:92:40:02:
37:32:bb:9a:ff:fc:4e:28:ab:39:32:a2:2f:69:af:
59:f5:aa:b3:9c:d4:48:0f:5c:7b:d5:b9:db:6b:c9:
b7:a0:c7:98:3f:48:fb:70:b4:f0:c3:74:37:e0:4b:
9e:a4:53:88:c7:9e:0d:8c:fd:84:f8:c7:87:c4:37:
e9:75:2f:87:93:de:a6:62:e0:eb:cf:e3:68:6d:f1:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AA:83:54:DE:66:24:ED:43:62:E5:EF:94:18:5F:7F:9D:63:D6:FD
X509v3 Authority Key Identifier:
keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/8AB545D294A711ECA073AB56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.132.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:aa:cc:47:b4:4d:c2:fd:a7:b4:c1:63:34:32:64:cf:c9:73:
84:4a:98:49:41:33:b8:3a:00:ce:62:58:64:e9:69:0a:c1:1a:
cb:37:0c:7c:fa:e1:57:aa:a5:1c:ca:47:35:82:9f:fd:69:3f:
0d:19:36:be:a0:de:3e:f1:5f:35:99:98:d4:8f:30:13:11:f9:
83:e0:85:32:0f:06:84:5e:ef:43:3a:c3:9e:c9:91:22:3c:bd:
c4:a2:26:4f:73:7a:3f:f7:07:b9:4c:61:45:88:76:ec:c3:27:
5c:07:5e:fc:63:a4:ed:2e:90:0c:25:28:1f:d1:5e:01:34:37:
46:d6:7e:7b:5b:55:1b:a4:96:00:18:6f:84:ad:57:95:6b:ba:
38:90:cf:83:aa:32:48:66:17:77:97:eb:b3:14:f7:cc:76:42:
d6:5f:93:f0:5e:13:64:d5:27:f4:66:35:f8:5a:22:e1:55:15:
ec:93:97:f9:a4:ee:65:7a:8b:3b:1e:e6:43:cc:f2:34:0f:8b:
e0:ec:38:a7:84:e6:44:36:da:a0:71:85:6d:1c:fd:78:04:95:
fa:a0:e5:eb:0e:59:18:0a:d7:c1:7d:6f:9b:71:49:63:a5:e5:
de:90:5e:75:58:f1:36:9e:97:60:7d:b4:5a:c3:c5:43:68:90:
7a:15:53:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:35:43 2025 by rpki-client