Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/26010A0605EF11F09181F913C4F9AE02.roa
File: 26010A0605EF11F09181F913C4F9AE02.roa (raw, json)
Hash identifier: um1rPyDGy/aHUSBxco8n3OW5NdOsLGQIMyWpHja+2mw=
Subject key identifier: 6C:6D:F0:C6:B3:63:E6:8F:4B:9D:07:67:32:20:F5:32:C2:DF:40:FE
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0AF9
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/26010A0605EF11F09181F913C4F9AE02.roa
Signing time: Fri 21 Mar 2025 00:55:14 +0000
ROA not before: Fri 21 Mar 2025 00:55:14 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 5065
IP address blocks: 103.13.212.0/24 maxlen: 24
103.13.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2809 (0xaf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016
Validity
Not Before: Mar 21 00:55:14 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67dcb8f2-a6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:fd:ef:bb:4c:db:eb:3b:70:0d:0e:30:e1:
bb:8b:50:3e:cc:47:27:7f:2a:67:7c:6b:c5:f1:33:
c1:3c:ff:1d:32:90:5b:83:10:cf:bb:65:5d:ad:53:
bb:90:59:89:3f:98:d5:d7:e1:ea:0d:49:83:1a:c6:
84:d8:56:4e:24:84:e2:61:2a:bf:8b:82:6d:49:ea:
6d:18:50:89:85:bc:eb:e6:f9:fa:57:e9:10:6d:10:
97:35:57:d7:30:03:e3:ed:49:94:f2:70:08:c4:b5:
c0:37:20:2c:97:a0:fd:87:60:32:12:6d:25:a5:e4:
bb:f1:e0:6f:c6:56:72:a1:d6:ba:15:82:0e:e7:38:
eb:2e:1d:a4:fc:b4:f5:1f:25:23:d6:b7:95:23:d5:
c0:74:d7:de:58:86:3b:f7:92:6b:b1:98:96:1c:7f:
72:4a:81:0a:29:6c:b0:da:88:ff:ae:e5:c3:da:e7:
e1:9a:c0:16:2a:15:38:91:62:8e:9d:2c:c1:98:c1:
0b:b0:98:b4:5a:08:77:9c:90:e2:28:c6:9d:ae:4a:
c3:ad:48:c9:17:f7:a2:98:dd:ca:cf:d3:4b:76:98:
8a:29:64:4d:c6:04:f0:47:24:91:52:7e:8f:fa:0f:
eb:ad:a0:c5:48:fb:09:96:74:92:f3:8b:f9:35:41:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:F0:C6:B3:63:E6:8F:4B:9D:07:67:32:20:F5:32:C2:DF:40:FE
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/26010A0605EF11F09181F913C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.212.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:4f:38:ca:ae:33:92:a9:17:b4:4b:ad:c0:3a:38:46:1f:b3:
3c:a7:49:8d:80:52:2e:df:91:ef:f5:ee:7b:bb:6b:54:43:89:
16:0f:92:14:46:d4:57:d1:4b:01:f7:39:57:1d:3a:1c:b5:06:
d3:f8:1a:95:68:1b:02:56:85:af:26:94:2c:fb:e9:c6:9d:9e:
4b:29:b2:09:d8:a4:f1:ac:cc:cd:99:e0:0b:cb:b7:00:ee:f7:
f3:08:12:2a:ec:62:ce:ac:04:74:39:af:9d:25:e6:36:2f:8d:
99:e7:2b:06:9f:03:59:c8:1e:0f:af:58:a6:80:f4:7b:ac:d9:
2f:ba:db:a9:8b:1f:92:a2:6a:c0:9e:e0:2d:15:c2:d1:b6:61:
b4:97:96:d0:cf:83:4b:16:45:54:f7:76:dd:84:82:af:b7:6c:
fa:f9:e7:51:e1:ee:ed:42:a7:2e:09:53:2b:13:81:e0:4a:ce:
56:5f:84:37:f9:10:bd:b7:d3:98:78:63:0f:5b:cb:d6:dd:d1:
ac:f1:8f:84:e7:c6:10:3e:59:52:d9:64:b5:ed:fc:28:9c:7f:
83:f4:eb:a1:ce:61:0c:3b:5d:de:43:9b:6f:60:b6:86:7f:35:
f6:ef:95:88:b0:f3:ef:87:3a:0a:e7:37:8f:08:68:dd:a1:e6:
cf:dd:e9:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3
OTExQkU1QjUwHhcNMjUwMzIxMDA1NTE0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2RjYjhmMi1hNmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAueP977tM2+s7cA0OMOG7i1A+zEcnfypnfGvF8TPBPP8dMpBbgxDPu2VdrVO7
kFmJP5jV1+HqDUmDGsaE2FZOJITiYSq/i4JtSeptGFCJhbzr5vn6V+kQbRCXNVfX
MAPj7UmU8nAIxLXANyAsl6D9h2AyEm0lpeS78eBvxlZyoda6FYIO5zjrLh2k/LT1
HyUj1reVI9XAdNfeWIY795JrsZiWHH9ySoEKKWyw2oj/ruXD2ufhmsAWKhU4kWKO
nSzBmMELsJi0Wgh3nJDiKMadrkrDrUjJF/eimN3Kz9NLdpiKKWRNxgTwRySRUn6P
+g/rraDFSPsJlnSS84v5NUFOFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGxt8Maz
Y+aPS50HZzIg9TLC30D+MB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx
NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUEwMTYvQzA2NzcyMjY0MTcxMTFFQUFBRDI2QTZDQzRGOUFFMDIvMjYwMTBBMDYw
NUVGMTFGMDkxODFGOTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnDdQwDQYJKoZIhvcNAQELBQADggEBAB1POMquM5KpF7RL
rcA6OEYfszynSY2AUi7fke/17nu7a1RDiRYPkhRG1FfRSwH3OVcdOhy1BtP4GpVo
GwJWha8mlCz76cadnkspsgnYpPGszM2Z4AvLtwDu9/MIEirsYs6sBHQ5r50l5jYv
jZnnKwafA1nIHg+vWKaA9Hus2S+626mLH5KiasCe4C0VwtG2YbSXltDPg0sWRVT3
dt2Egq+3bPr551Hh7u1Cpy4JUysTgeBKzlZfhDf5EL2305h4Yw9by9bd0azxj4Tn
xhA+WVLZZLXt/Cicf4P066HOYQw7Xd5Dm29gtoZ/NfbvlYiw8++HOgrnN48IaN2h
5s/d6c8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:10:26 2025 by rpki-client