Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa
File: CDEFCF14801F11EF99206C47C4F9AE02.roa (raw, json)
Hash identifier: kISEPEmE2ZLNGr7M+gIIuLb+wfjhIl0pN5Ozrn7290M=
Subject key identifier: 82:AA:A6:B4:98:1A:34:2D:23:8C:D7:4E:FA:74:8E:77:FA:F7:13:13
Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C
Certificate serial: 0AC1
Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa
Signing time: Sat 08 Feb 2025 19:37:52 +0000
ROA not before: Sat 08 Feb 2025 19:37:52 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 138556
IP address blocks: 103.132.224.0/24 maxlen: 24
103.132.225.0/24 maxlen: 24
103.132.226.0/24 maxlen: 24
2404:4140::/32 maxlen: 32
2404:4140::/36 maxlen: 36
2404:4140:1000::/36 maxlen: 36
2404:4140:2000::/36 maxlen: 36
2404:4140:3000::/36 maxlen: 36
2404:4140:4000::/36 maxlen: 36
2404:4140:5000::/36 maxlen: 36
2404:4140:6000::/36 maxlen: 36
2404:4140:7000::/36 maxlen: 36
2404:4140:8000::/36 maxlen: 36
2404:4140:9000::/36 maxlen: 36
2404:4140:a000::/36 maxlen: 36
2404:4140:b000::/36 maxlen: 36
2404:4140:c000::/36 maxlen: 36
2404:4140:d000::/36 maxlen: 36
2404:4140:e000::/36 maxlen: 36
2404:4140:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2753 (0xac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF905
Validity
Not Before: Feb 8 19:37:52 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a7b290-f423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:00:d9:38:d3:45:a5:73:8a:27:33:26:0e:
99:4b:f5:51:ca:a4:92:ff:9e:fe:e3:87:68:98:fb:
da:8a:62:5b:b3:b8:db:ac:79:04:d3:b1:3c:02:ab:
b2:3d:c9:5e:7e:2e:36:0b:b3:6f:22:48:25:fb:19:
11:09:ef:42:16:49:5c:b0:42:82:76:e3:5e:4c:bb:
e1:7a:e7:7c:52:b8:bc:6c:37:08:07:2e:4f:47:88:
5a:14:a4:af:6d:cf:00:bc:4c:5f:b0:4e:77:b7:6c:
cc:13:05:08:38:ca:24:cd:f0:76:c8:cb:f7:90:d8:
fa:a8:8e:ca:23:18:73:96:e2:05:09:de:28:46:df:
a5:c5:17:ca:3d:d0:26:e7:72:9d:ee:37:0a:02:1c:
c1:b6:d8:a6:ac:c6:9b:c6:de:10:73:d2:ed:e3:29:
75:96:57:89:42:73:d4:65:25:73:01:38:65:5c:ca:
d7:48:3b:d7:47:0d:3e:95:0a:dc:88:e7:6e:2d:70:
40:ee:6a:ee:0f:5b:2b:f7:2b:a9:ce:de:05:dc:46:
fe:59:10:4a:ab:3e:1f:57:63:02:d4:42:15:97:b9:
0b:b0:9a:d1:50:a7:f8:d7:c4:38:c9:ea:00:f4:03:
cb:17:a9:4d:19:cb:6e:4d:ea:bd:22:2d:5b:73:a0:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AA:A6:B4:98:1A:34:2D:23:8C:D7:4E:FA:74:8E:77:FA:F7:13:13
X509v3 Authority Key Identifier:
keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.224.0-103.132.226.255
IPv6:
2404:4140::/32
Signature Algorithm: sha256WithRSAEncryption
14:ed:36:d6:69:51:51:b6:9e:3e:98:6a:67:64:c2:42:21:a8:
c6:0c:aa:47:53:56:96:44:88:5f:69:38:26:13:a8:da:6d:eb:
05:24:0a:05:a5:2b:03:ac:00:7a:61:b1:e0:9e:7c:11:7c:86:
cd:e1:c6:93:7a:b1:6b:ce:b1:50:6b:f7:ee:bf:94:e8:9d:b4:
4d:70:e1:c4:79:cc:0a:16:96:c9:09:af:48:98:de:c0:96:86:
fb:79:fa:e9:4c:f6:e3:05:38:79:f1:54:1b:40:ae:31:a0:0b:
46:58:9f:78:cc:3b:90:13:4e:bb:e0:a8:ba:6a:a1:26:3d:05:
10:52:67:8a:9b:60:e7:be:f5:f7:7e:6d:0d:b8:47:a3:52:4a:
e7:29:44:3f:54:9b:43:48:aa:25:c0:f3:54:7a:c3:ae:39:92:
14:5b:db:dc:83:9c:af:ae:84:61:51:25:cf:d4:6c:af:f9:4f:
41:ef:d3:df:8a:8e:87:2d:0b:47:06:4b:6d:f6:87:cb:2e:71:
a2:5a:08:42:30:42:11:0d:d9:c8:3d:81:fe:e1:03:20:51:50:
ea:b0:16:9d:51:62:46:93:1f:bd:d2:7e:ea:03:e0:61:68:0a:
51:46:f6:03:3c:11:d1:e4:4e:4e:7e:1a:1b:77:09:b2:e5:4e:
8b:05:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:02:59 2025 by rpki-client