Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/D93244BAF2EF11ED91F08A4FC4F9AE02.roa
File: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (raw, json)
Hash identifier: hUqHFifGF2RTMr5P0bZj3vJ6RCASWQ9bPokCmECeKBM=
Subject key identifier: 0B:96:6B:AA:57:D8:CA:C4:F8:99:37:A9:B5:F8:06:95:26:68:84:15
Certificate issuer: /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
Certificate serial: 069F
Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/D93244BAF2EF11ED91F08A4FC4F9AE02.roa
Signing time: Tue 18 Feb 2025 23:41:06 +0000
ROA not before: Tue 18 Feb 2025 23:41:06 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 132770
IP address blocks: 103.127.164.0/24 maxlen: 24
103.127.165.0/24 maxlen: 24
103.127.166.0/24 maxlen: 24
103.127.167.0/24 maxlen: 24
2404:24c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1695 (0x69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC232
Validity
Not Before: Feb 18 23:41:06 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67b51a92-90ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:27:11:84:a7:45:39:9b:90:d7:e6:83:43:
25:08:18:77:85:fb:a6:ce:f3:26:a6:4d:99:42:4b:
e0:d5:a2:77:a9:75:fc:57:ca:3e:4b:8e:1c:7d:c2:
96:79:d2:a4:f2:38:f4:a7:35:a8:27:3a:6b:24:88:
75:e2:30:df:62:23:2e:81:14:39:32:85:02:70:44:
a2:57:55:79:8b:fd:a6:43:8f:f8:4e:c0:a1:17:d3:
79:6b:b9:cc:e3:b8:00:81:7a:17:97:f6:41:85:72:
a7:83:2d:ec:62:ad:c6:b6:c9:a6:a5:bb:07:d6:94:
2b:0e:c2:5d:0f:75:27:22:4f:45:7e:42:cb:ad:a8:
42:2e:1b:b4:6d:9e:46:5c:55:f1:17:b9:c0:2b:9b:
15:6e:d7:80:5f:ee:5d:42:05:2b:35:9c:29:da:01:
05:e0:e0:24:f1:86:05:e6:47:44:23:6f:61:09:f7:
14:2b:be:c7:68:90:6b:8c:71:e2:b9:2f:d3:98:dc:
40:85:e3:9d:a6:3b:f5:52:94:8f:d9:01:85:1e:0f:
4f:f7:00:9c:51:f3:49:67:f4:8f:5f:4b:f1:c4:09:
23:4d:5c:ee:15:02:c8:da:32:04:ac:31:db:07:49:
93:82:21:31:14:a9:04:45:ec:bc:ec:61:da:50:97:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:96:6B:AA:57:D8:CA:C4:F8:99:37:A9:B5:F8:06:95:26:68:84:15
X509v3 Authority Key Identifier:
keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/D93244BAF2EF11ED91F08A4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.164.0/22
IPv6:
2404:24c0::/32
Signature Algorithm: sha256WithRSAEncryption
03:ce:23:85:7a:e4:57:98:a5:22:d1:5b:5c:3b:d6:81:77:12:
6f:ca:81:d8:50:63:65:7d:48:09:08:ab:c5:e5:81:9b:1e:08:
4c:fe:75:b9:e2:49:bb:14:44:32:e6:5d:cd:12:cf:22:2e:ce:
86:d5:26:ec:22:6e:40:a9:b5:31:21:a9:b2:cc:31:c3:6a:d0:
bb:f6:d0:0b:9b:0f:59:a8:9d:e1:5a:b8:e4:0c:21:2e:ab:7f:
e6:72:5a:64:63:35:87:95:c1:a4:d3:e1:81:3d:e2:f7:44:43:
2a:1f:d3:d8:69:3f:d4:39:98:b8:12:6d:41:91:be:0f:29:0e:
13:29:09:ac:bf:e6:1d:ef:31:64:47:a3:79:7e:bb:ec:f5:69:
19:eb:cb:b2:66:0e:48:7f:73:b2:dc:d5:18:a2:46:64:f2:ac:
bc:a3:e6:e6:59:43:14:c2:38:c5:d2:52:36:26:f2:db:c7:bd:
a8:e2:63:41:29:8a:59:7f:56:41:c7:97:e6:2a:0a:1e:a4:00:
ec:22:e2:0a:0f:9d:2f:29:f5:ce:f0:13:b3:25:f8:18:12:0b:
e4:d4:ad:67:67:b4:c2:f6:9a:5f:bf:3d:aa:73:b7:80:85:f3:
ba:fc:32:b7:86:d9:d8:68:1e:c0:f9:f9:ad:32:a8:46:12:5d:
2e:53:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:48:41 2025 by rpki-client