Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/1B07853EA4F711EF84B06E42C4F9AE02.roa
File: 1B07853EA4F711EF84B06E42C4F9AE02.roa (raw, json)
Hash identifier: Gm1fun7pnQKByDLxI/azTsTDDryvchojFZK6+n4D1PU=
Subject key identifier: 5A:9B:12:C6:2D:DF:9C:D7:06:20:66:B8:D6:01:39:CC:2F:A6:04:A0
Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Certificate serial: 0C47
Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/1B07853EA4F711EF84B06E42C4F9AE02.roa
Signing time: Tue 18 Feb 2025 19:37:37 +0000
ROA not before: Tue 18 Feb 2025 19:37:37 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138636
IP address blocks: 103.135.76.0/22 maxlen: 22
103.135.76.0/23 maxlen: 23
103.135.76.0/24 maxlen: 24
103.135.77.0/24 maxlen: 24
103.135.78.0/23 maxlen: 23
103.135.78.0/24 maxlen: 24
103.135.79.0/24 maxlen: 24
2404:76c0::/32 maxlen: 32
2404:76c0::/33 maxlen: 33
2404:76c0::/34 maxlen: 34
2404:76c0::/35 maxlen: 35
2404:76c0::/36 maxlen: 36
2404:76c0::/40 maxlen: 48
2404:76c0:1000::/36 maxlen: 36
2404:76c0:2000::/35 maxlen: 35
2404:76c0:2000::/36 maxlen: 36
2404:76c0:3000::/36 maxlen: 36
2404:76c0:4000::/34 maxlen: 34
2404:76c0:4000::/35 maxlen: 35
2404:76c0:4000::/36 maxlen: 36
2404:76c0:5000::/36 maxlen: 36
2404:76c0:6000::/35 maxlen: 35
2404:76c0:6000::/36 maxlen: 36
2404:76c0:7000::/36 maxlen: 36
2404:76c0:8000::/33 maxlen: 33
2404:76c0:8000::/34 maxlen: 34
2404:76c0:8000::/35 maxlen: 35
2404:76c0:8000::/36 maxlen: 36
2404:76c0:9000::/36 maxlen: 36
2404:76c0:a000::/35 maxlen: 35
2404:76c0:a000::/36 maxlen: 36
2404:76c0:a000::/37 maxlen: 40
2404:76c0:b000::/36 maxlen: 36
2404:76c0:c000::/34 maxlen: 34
2404:76c0:c000::/35 maxlen: 35
2404:76c0:c000::/36 maxlen: 36
2404:76c0:d000::/36 maxlen: 36
2404:76c0:e000::/35 maxlen: 35
2404:76c0:e000::/36 maxlen: 36
2404:76c0:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3143 (0xc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C93EE
Validity
Not Before: Feb 18 19:37:37 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67b4e181-9dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:81:07:d2:6e:03:ad:4c:57:46:d9:e0:72:
9f:26:e8:33:3c:42:98:0c:74:8f:b2:9a:a3:2d:ea:
8d:86:50:54:94:7b:77:f6:7c:84:d1:b1:cd:6e:6e:
33:fe:83:0b:fe:65:71:e9:99:f8:5b:bc:2a:5c:51:
d9:8b:16:b6:3d:fd:9c:0b:e4:6d:9e:13:67:2d:90:
9c:22:bd:4e:5c:7c:c0:1b:4c:fd:6e:65:19:26:8d:
11:6c:71:dc:b1:2b:be:bd:9e:1f:05:9d:f1:69:51:
f3:92:50:6f:68:71:40:bd:cd:cc:70:82:08:12:04:
0d:83:2e:f2:4c:24:cc:cd:52:c3:fa:d1:f2:16:f5:
5f:02:07:ab:54:55:94:df:e3:aa:46:42:67:37:38:
45:f8:13:56:83:e9:e2:0a:6a:b3:96:47:18:3d:9b:
52:0f:8a:85:04:4c:f1:12:c8:ec:c5:fd:bb:98:77:
3d:65:b6:63:d0:ad:62:bd:c9:c7:65:49:25:bf:33:
a5:7c:2b:5a:f5:a7:96:43:f8:92:79:d7:e9:3c:02:
4a:53:0b:0e:7a:18:7f:47:b6:0f:df:7a:28:f1:66:
37:f9:83:33:8d:4e:59:6a:40:e7:00:88:2d:3f:bc:
14:2d:26:0d:3b:ae:20:b4:6e:25:4b:86:11:7d:f0:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9B:12:C6:2D:DF:9C:D7:06:20:66:B8:D6:01:39:CC:2F:A6:04:A0
X509v3 Authority Key Identifier:
keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/1B07853EA4F711EF84B06E42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.76.0/22
IPv6:
2404:76c0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:de:b0:44:f2:57:eb:b6:1f:ca:ba:80:16:59:5a:3a:47:e8:
66:3d:23:03:ab:66:d5:38:60:6f:9a:df:23:11:02:d3:bf:8c:
9f:14:b8:99:24:3a:c1:ad:31:7b:a4:e9:9c:03:51:d3:51:be:
55:75:33:8a:f5:5f:db:35:c3:81:67:a9:49:e3:e1:38:63:15:
8f:f1:04:6e:d9:fb:3b:22:17:75:9a:77:bf:c8:46:48:a3:18:
26:b5:a3:e7:c6:85:08:5d:05:6b:31:fe:7c:99:bf:39:95:67:
de:7d:ef:27:02:8f:0f:be:7e:ea:da:94:d1:9f:94:a6:f8:9d:
c9:ea:96:b6:3b:e4:a8:c6:1a:33:15:d9:86:8b:a1:cd:f4:16:
2b:4f:ad:cd:5e:69:ba:d3:70:89:24:a7:54:38:a9:16:28:a4:
3c:70:16:be:15:39:0a:ae:53:81:0a:95:44:39:e9:da:40:c5:
48:10:98:75:15:a2:a7:72:be:1a:3f:56:48:67:fa:be:2f:88:
3e:6c:e2:ee:49:ce:b4:6c:4b:b8:ad:c2:e2:d9:67:61:4a:d3:
0e:b6:31:3b:c9:bd:6c:74:c9:d8:16:3d:1e:f9:37:28:dc:0e:
2c:07:7b:63:61:a9:ab:d4:c6:05:2a:1c:d8:ad:04:f4:ae:a5:
b9:db:b8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:42 2025 by rpki-client