Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/1B047818141E11EFB957692CC4F9AE02.roa
File: 1B047818141E11EFB957692CC4F9AE02.roa (raw, json)
Hash identifier: ZE0tBApDZzaQ+O4EZGcawrB6RxmvKTQ6iYLr+X4ZOpI=
Subject key identifier: 5E:08:B4:22:50:1C:3D:59:0D:CB:80:BC:C0:13:52:15:9D:A6:C9:00
Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518
Certificate serial: 06C1
Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/1B047818141E11EFB957692CC4F9AE02.roa
Signing time: Tue 04 Mar 2025 23:41:14 +0000
ROA not before: Tue 04 Mar 2025 23:41:14 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 132492
IP address blocks: 103.148.251.0/24 maxlen: 24
203.0.184.0/21 maxlen: 24
2001:df3:280::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1729 (0x6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9D33
Validity
Not Before: Mar 4 23:41:14 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c78f9a-98c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:51:bc:7f:6c:22:71:96:87:bd:cd:bc:42:
99:f9:25:e6:1b:a0:5e:68:96:21:8e:f1:78:34:6f:
fb:19:87:e1:4b:af:fc:3f:6b:7a:0c:9e:24:47:9b:
ef:3e:b4:bc:38:25:de:6c:64:a0:e9:d5:e3:b6:a4:
f6:43:1c:e0:3c:60:01:72:d6:92:b6:34:cd:7c:4e:
b2:79:89:cf:0e:64:e2:a1:c9:a8:a3:21:23:1b:17:
6a:b3:69:cf:ec:01:7c:c7:c8:12:e5:48:8c:84:59:
4d:9f:1d:ce:ca:9a:f3:16:9b:90:d1:fc:6e:61:78:
a6:7e:5b:7c:7c:26:80:9c:1e:6b:35:71:a3:f4:8c:
cc:0f:5b:f7:d5:81:39:0b:0d:0c:2b:81:05:45:56:
7c:b8:b1:8b:da:7e:7a:ad:4c:d7:bb:c9:25:94:dd:
3a:ec:9a:07:59:3e:6d:59:03:df:af:f1:44:34:e8:
9c:12:db:40:6e:eb:a2:2a:69:69:50:f7:43:e5:33:
48:59:24:11:5f:91:51:86:5e:c7:70:cb:59:ec:df:
52:0e:62:3d:86:5a:bf:ae:08:e3:61:09:0c:e2:ce:
f6:a9:24:3a:26:27:3f:7d:f2:02:85:80:e3:72:7c:
ef:7f:ae:96:33:0c:08:56:1c:75:07:52:62:80:7b:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:08:B4:22:50:1C:3D:59:0D:CB:80:BC:C0:13:52:15:9D:A6:C9:00
X509v3 Authority Key Identifier:
keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/1B047818141E11EFB957692CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.251.0/24
203.0.184.0/21
IPv6:
2001:df3:280::/48
Signature Algorithm: sha256WithRSAEncryption
c3:a5:04:34:f4:83:14:c1:70:bb:ee:52:60:3f:a8:3e:db:0e:
b3:e5:bb:a6:22:17:cb:e0:c3:50:75:1d:56:ee:93:66:e8:03:
83:ee:e5:39:b1:53:4a:c4:d7:5f:f6:32:78:68:7d:49:6a:9c:
b9:39:88:a0:ec:b9:5f:5e:6c:51:59:58:39:b4:26:f1:62:f5:
8c:5f:68:f8:11:e9:54:8f:3a:b5:d9:05:f7:c6:c5:4f:d5:d4:
d9:8e:e4:3a:27:30:57:19:4c:60:55:13:fe:dd:9a:49:37:00:
c9:24:fb:b3:f0:f1:44:84:0d:77:04:7c:d9:72:1d:ab:59:67:
37:23:6c:2a:5b:7b:6b:1a:bb:9e:17:b1:46:8f:53:4e:2e:c9:
87:7e:57:81:9c:ce:3b:e7:8d:02:a8:cf:c8:cc:ea:9e:30:46:
5c:92:55:ce:e0:78:a4:3e:8d:74:b8:ff:d9:2c:d4:42:46:53:
4a:d6:13:10:38:a1:a2:e5:da:d4:7a:45:d0:d4:40:c8:2c:71:
24:e4:82:bd:88:46:26:db:98:fa:45:7e:6b:aa:4d:67:8c:77:
ab:77:bb:62:5c:6f:18:3a:b1:3c:ea:d1:33:09:d1:9c:43:48:
bb:96:13:23:88:41:36:3d:80:5d:11:97:1c:12:ee:03:0a:91:
db:72:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:08:43 2025 by rpki-client