Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/CB16EA82FB6411EF90E1E429C4F9AE02.roa
File: CB16EA82FB6411EF90E1E429C4F9AE02.roa (raw, json)
Hash identifier: Q6MiHP+R88hVP5uJ4adxJpvxkQ/xGhsrM9tNu/bI7KQ=
Subject key identifier: 63:48:85:53:0A:8F:2B:8D:0F:73:41:CF:E0:9D:78:F1:ED:2C:E8:A0
Certificate issuer: /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Certificate serial: 02
Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/CB16EA82FB6411EF90E1E429C4F9AE02.roa
Signing time: Fri 07 Mar 2025 14:59:40 +0000
ROA not before: Fri 07 Mar 2025 14:59:40 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 135357
IP address blocks: 103.234.96.0/22 maxlen: 22
103.234.96.0/24 maxlen: 24
103.234.97.0/24 maxlen: 24
103.234.98.0/24 maxlen: 24
103.234.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6066
Validity
Not Before: Mar 7 14:59:40 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67cb09db-28bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:fa:ac:8c:14:f7:5c:0e:b2:5f:78:c9:0d:
5d:62:fa:7e:4a:e0:76:7a:1a:89:34:34:68:4f:cf:
29:7c:c8:62:b6:22:ee:5a:1c:db:18:af:ef:58:76:
e0:1d:5b:d7:3f:3a:95:84:ef:0c:1e:06:05:7b:2f:
ac:6c:33:33:7f:8a:62:34:63:a2:f8:b8:31:75:d2:
32:3e:fd:77:d6:c4:35:1c:03:c8:29:8b:de:8b:12:
7f:ac:df:64:75:a4:ab:11:bc:98:5e:de:a7:e9:e7:
a3:73:1e:8f:09:4b:62:36:90:0e:6c:7c:4b:81:2e:
ad:f3:bf:86:ab:d0:6b:7a:02:d2:61:80:2f:e8:fb:
01:1f:cb:1f:f4:3a:bb:01:d2:75:70:40:a7:d8:b7:
37:23:6e:bc:fc:12:06:99:0a:5e:53:c2:df:39:c9:
ed:a1:ad:7f:02:b2:a8:a2:ab:03:2d:a1:44:b3:c7:
cc:ec:d1:b6:0d:65:52:7e:66:f3:53:7f:a4:94:2c:
70:c9:9e:e6:ce:93:39:65:fe:8a:1f:5c:35:76:22:
ea:f4:40:99:99:57:cb:86:10:42:f4:55:f9:b2:9f:
92:18:0f:e2:5f:a3:0f:ea:c0:39:ee:24:12:54:37:
ed:60:12:31:de:2c:35:cf:74:46:2b:55:a0:0e:30:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:85:53:0A:8F:2B:8D:0F:73:41:CF:E0:9D:78:F1:ED:2C:E8:A0
X509v3 Authority Key Identifier:
keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/CB16EA82FB6411EF90E1E429C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:a3:09:b4:e9:26:b5:0e:70:6c:13:64:97:31:05:c6:ed:cb:
72:23:b2:c8:fd:df:32:6b:8f:4f:8d:d6:03:f7:0f:8c:88:da:
cd:19:ca:f1:5c:e5:ec:5d:4d:fc:97:5e:1c:95:f3:8d:f1:ff:
43:2f:a8:d1:89:1f:84:47:09:b6:61:ee:39:af:a5:22:ad:a7:
8c:c3:1a:7a:1e:98:38:1b:02:2e:dd:d1:ce:1c:1d:12:cd:20:
9b:78:3d:9f:d7:95:1a:ba:08:ac:0c:c5:56:92:29:4c:18:90:
14:f6:6a:bf:2a:9c:12:92:33:d2:dd:64:68:d0:9b:2c:90:9f:
a3:a6:1e:13:0d:34:ed:4c:9b:f8:06:88:7e:17:05:10:ca:65:
82:f2:56:1d:b7:4f:ca:68:87:b3:6d:44:be:d2:cb:15:7a:48:
c5:b3:1b:d1:aa:1f:b2:db:c2:41:54:e4:b2:14:88:9c:6b:84:
c9:7f:f8:18:40:12:7f:2c:83:01:e9:a3:f6:33:08:1c:9b:e5:
a4:27:92:28:29:eb:79:35:6b:7b:1f:70:54:9c:0a:09:e8:22:
9c:8a:c3:61:4a:c5:ec:7c:8d:be:e6:55:9e:f1:7e:e2:76:5b:
42:d5:a0:5f:46:c8:84:10:65:f4:be:13:8b:71:93:b1:29:12:
16:ee:cc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:08 2025 by rpki-client