Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa
File: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (raw, json)
Hash identifier: Pjk7KOVj7H3BoAMc7NRiJiAFk/4ChSG9JZtPBtMlKPY=
Subject key identifier: CB:B7:F4:A9:57:33:FA:7F:84:3D:AE:E9:24:46:BD:94:AE:B6:48:5C
Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Certificate serial: 0874
Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa
Signing time: Thu 06 Feb 2025 20:19:25 +0000
ROA not before: Thu 06 Feb 2025 20:19:25 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 137280
IP address blocks: 103.106.208.0/22 maxlen: 22
103.106.208.0/23 maxlen: 23
103.106.210.0/23 maxlen: 23
103.106.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA
Validity
Not Before: Feb 6 20:19:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a5194d-9a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:2f:7d:7e:6d:0b:3e:5e:1f:37:be:2e:67:
9b:bd:82:c5:13:38:ff:fd:d6:4e:f9:f6:c2:ea:c0:
c0:55:88:de:4e:43:dc:6f:88:06:ee:b5:f4:de:90:
0f:8e:bb:40:46:44:05:f1:c5:f7:9a:93:f9:fc:93:
76:0c:7d:e5:a6:e0:3e:47:9d:89:88:9f:ab:e3:72:
75:a6:1b:b5:de:42:c5:56:99:d1:9a:f5:e3:6d:f4:
a0:4b:9c:08:24:b6:21:6a:b1:03:df:91:ff:d1:7e:
3e:19:6a:0d:ae:c5:f5:9e:dd:55:ec:43:13:9f:39:
7e:b3:76:0c:7b:de:b1:ec:72:dd:b0:cb:34:e5:4f:
e5:67:2d:83:01:dc:4b:08:e5:4f:60:78:93:31:86:
d2:a8:f4:69:b8:27:2d:f8:c4:d4:dc:69:6a:5b:06:
45:4e:5e:ed:55:fc:a0:f9:7c:bb:05:bc:1d:bc:ac:
8f:d0:2d:41:85:2f:da:94:b2:3f:29:41:40:5c:d2:
d6:b7:20:7b:9e:33:0c:f0:7e:cc:ba:0f:19:45:5c:
5f:cc:ab:98:12:23:cd:25:65:76:3c:6c:30:96:f5:
f0:69:e6:1b:9a:2d:a0:d4:eb:ac:71:53:bf:c6:9d:
ef:0f:2e:7a:aa:f9:a7:a8:d7:a6:50:86:1a:70:b9:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B7:F4:A9:57:33:FA:7F:84:3D:AE:E9:24:46:BD:94:AE:B6:48:5C
X509v3 Authority Key Identifier:
keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.208.0/22
Signature Algorithm: sha256WithRSAEncryption
20:23:a3:51:5d:9f:29:f3:49:60:d9:4e:64:08:66:d0:81:74:
4d:4b:8c:c9:8a:31:37:9f:26:d2:75:50:5b:ce:8b:99:09:37:
1d:45:0d:95:fc:c2:76:74:56:f7:31:b0:22:1e:02:0c:eb:3b:
f4:04:57:1b:c9:f7:b8:c7:3e:52:3e:c9:77:fe:4e:f6:1f:d7:
73:86:44:d2:3d:e6:30:25:19:89:07:6c:e4:2c:ef:0a:7c:0e:
a3:a1:ba:10:eb:a0:ba:37:b2:df:d9:4a:d2:0c:08:d7:96:54:
6b:33:b6:11:0d:ed:d1:fd:77:fc:08:7a:27:de:5c:18:44:84:
44:6b:ce:50:d1:50:ea:08:b7:c7:db:c6:15:14:a8:97:b7:1b:
d3:e4:e2:5c:d4:43:bd:44:e8:85:eb:de:ba:4b:99:a4:0d:6b:
ba:f4:9b:6c:55:d3:74:59:3a:99:52:39:71:2c:76:87:fa:f3:
aa:ba:e2:9b:3e:c4:b5:23:1f:aa:b0:e3:17:a2:e4:24:06:7f:
27:e0:09:bf:4f:ea:06:bf:30:91:94:eb:d5:54:72:7e:86:75:
14:2e:45:b3:d3:51:19:37:28:73:01:ff:d2:95:2c:b8:1a:56:
f9:91:fd:1c:0b:20:dc:29:b8:e4:bc:f2:51:86:eb:c0:41:ee:
87:0c:db:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:02:10 2025 by rpki-client