Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/026A84FC4C3211ECB9639932C4F9AE02.roa
File: 026A84FC4C3211ECB9639932C4F9AE02.roa (raw, json)
Hash identifier: uBkySuw/pyK9tvxApltYqkUVTPyi7oX70MF7KU+NjE0=
Subject key identifier: B1:3E:A4:8A:85:C2:AE:DB:23:AF:A1:36:EA:1F:60:9A:D4:05:DC:3C
Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
Certificate serial: 06FE
Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/026A84FC4C3211ECB9639932C4F9AE02.roa
Signing time: Sun 16 Feb 2025 22:50:29 +0000
ROA not before: Sun 16 Feb 2025 22:50:29 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 141458
IP address blocks: 103.160.16.0/24 maxlen: 24
2001:df2:7c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1790 (0x6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DD44
Validity
Not Before: Feb 16 22:50:29 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67b26bb4-684a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:d7:06:d2:bf:af:b1:f6:a2:3a:f4:9e:55:
a7:0a:ae:ab:90:f5:88:87:47:c2:f9:3b:20:31:91:
9d:c5:94:ac:8c:b7:72:7e:cb:fa:6e:52:38:40:3c:
6e:74:f3:5e:30:ed:77:75:6f:53:73:09:e8:01:48:
4c:c1:d1:4b:1d:39:98:3f:34:f7:86:64:a4:78:7a:
d1:10:08:8c:35:15:1e:c7:e6:07:0e:b9:00:1d:9c:
7d:ce:62:5c:6a:4e:90:43:51:04:48:75:e9:48:f5:
35:44:6a:8a:12:14:19:6a:bc:39:9b:33:83:7e:bf:
9a:91:9b:3f:14:db:cb:d5:b9:63:fe:9e:8a:3b:32:
93:9d:64:e8:a8:7e:f9:4c:a2:03:34:e8:a1:71:6d:
0a:f7:8e:5c:a0:88:17:2c:a7:fa:ea:e7:93:4a:11:
7f:db:aa:15:16:58:b6:c3:a3:89:e0:44:a6:d7:af:
ab:4b:9d:e1:2a:5a:f5:d4:2e:21:94:fb:cc:65:a1:
ae:71:a1:fd:b0:db:24:37:34:49:55:9a:36:b5:e3:
c0:65:63:5e:1b:13:7e:51:1c:2c:ac:5e:db:e9:bf:
6a:f4:98:75:af:6f:d4:03:9d:f7:52:4f:7f:c3:6c:
5d:95:68:1d:4d:93:8d:1f:c3:9a:6d:e7:99:2f:14:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3E:A4:8A:85:C2:AE:DB:23:AF:A1:36:EA:1F:60:9A:D4:05:DC:3C
X509v3 Authority Key Identifier:
keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/026A84FC4C3211ECB9639932C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.16.0/24
IPv6:
2001:df2:7c0::/48
Signature Algorithm: sha256WithRSAEncryption
65:73:51:7f:fa:d4:fd:75:1e:ab:56:da:17:ae:5e:d8:72:ad:
4e:40:d5:85:86:ce:e2:77:2e:a0:77:47:90:39:f2:ed:ab:f9:
1c:ce:f5:4c:52:85:89:91:2e:cc:ad:59:63:28:a2:37:ea:01:
19:76:3e:99:47:45:f7:62:84:9e:26:b4:2e:2b:5b:bb:5b:fd:
c7:93:b5:0b:7d:76:2b:59:78:02:17:3f:45:ba:62:a0:ee:28:
bd:1e:9f:91:61:ec:ab:f2:b4:01:4a:30:29:1c:87:94:bc:65:
a4:d0:78:82:75:2f:42:8f:21:6c:2a:0f:5f:2b:73:87:dd:38:
1e:f7:4c:b0:b7:97:ac:1d:17:7c:74:0e:90:d2:a4:74:16:2d:
25:54:86:b9:e5:3a:d8:4b:9a:0e:2e:b8:93:d7:1d:31:da:dd:
a6:4f:ef:cf:b5:e9:e4:ea:0c:58:23:a6:2a:60:19:b3:fb:b9:
be:b4:34:a1:99:66:71:33:4a:14:e4:08:9e:f2:cf:e1:45:22:
5d:fa:d4:52:99:5d:ab:65:2b:96:3f:b3:cd:31:e1:69:bc:3f:
0b:54:b1:91:ad:83:03:96:9b:3e:6b:a7:3b:7f:7c:79:7f:a4:
ad:b8:fb:4b:c7:de:58:a0:fc:fb:33:9d:f5:88:30:cc:1e:85:
f5:4c:d8:57
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz
ODU0ODFCQkYwHhcNMjUwMjE2MjI1MDI5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2IyNmJiNC02ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArV/XBtK/r7H2ojr0nlWnCq6rkPWIh0fC+TsgMZGdxZSsjLdyfsv6blI4QDxu
dPNeMO13dW9TcwnoAUhMwdFLHTmYPzT3hmSkeHrREAiMNRUex+YHDrkAHZx9zmJc
ak6QQ1EESHXpSPU1RGqKEhQZarw5mzODfr+akZs/FNvL1blj/p6KOzKTnWToqH75
TKIDNOihcW0K945coIgXLKf66ueTShF/26oVFli2w6OJ4ESm16+rS53hKlr11C4h
lPvMZaGucaH9sNskNzRJVZo2tePAZWNeGxN+URwsrF7b6b9q9Jh1r2/UA533Uk9/
w2xdlWgdTZONH8OabeeZLxSAMQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLE+pIqF
wq7bI6+hNuofYJrUBdw8MB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB
MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH
NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OURENDQvRDhFMzFFNzYzQTFFMTFFQkFFNEVENDFBQzRGOUFFMDIvMDI2QTg0RkM0
QzMyMTFFQ0I5NjM5OTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnoBAwDwQCAAIwCQMHACABDfIHwDANBgkqhkiG9w0BAQsF
AAOCAQEAZXNRf/rU/XUeq1baF65e2HKtTkDVhYbO4ncuoHdHkDny7av5HM71TFKF
iZEuzK1ZYyiiN+oBGXY+mUdF92KEnia0Litbu1v9x5O1C312K1l4Ahc/RbpioO4o
vR6fkWHsq/K0AUowKRyHlLxlpNB4gnUvQo8hbCoPXytzh904HvdMsLeXrB0XfHQO
kNKkdBYtJVSGueU62EuaDi64k9cdMdrdpk/vz7Xp5OoMWCOmKmAZs/u5vrQ0oZlm
cTNKFOQInvLP4UUiXfrUUpldq2Urlj+zzTHhabw/C1Sxka2DA5abPmunO398eX+k
rbj7S8feWKD8+zOd9YgwzB6F9UzYVw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:37 2025 by rpki-client