Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa
File: A766D10CF86B11EF86A73884C4F9AE02.roa (raw, json)
Hash identifier: Oni6AIFm2/Zy5DtH/auanOkB6FYH+HjvXMjJMyMEcuE=
Subject key identifier: 9C:1B:93:72:A0:C6:12:36:FD:45:E0:50:C3:3A:79:55:9E:80:D3:6B
Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Certificate serial: 0C07
Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa
Signing time: Mon 03 Mar 2025 20:11:13 +0000
ROA not before: Mon 03 Mar 2025 20:11:13 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 150774
IP address blocks: 103.92.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3079 (0xc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEC12
Validity
Not Before: Mar 3 20:11:13 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67c60ce0-c4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:a2:d8:79:68:d0:e4:2a:a4:ff:f3:98:f4:
e0:4d:d4:aa:6f:39:f5:5d:d2:a7:08:cd:a4:5e:fe:
a9:64:6b:7c:74:1a:0f:d7:a3:47:a8:45:c8:7e:8d:
98:cc:c9:07:8a:a0:44:fb:ea:79:23:58:75:b7:57:
f3:a9:e2:8b:56:fe:65:d7:2f:d5:9c:bd:aa:83:4a:
67:9c:2b:39:77:0f:94:9f:3b:70:0b:47:87:72:57:
41:82:21:18:97:3c:8f:f2:e9:2e:a5:63:ef:1d:bc:
0c:1c:69:1c:25:96:95:f9:c5:2f:30:76:fe:8f:a8:
15:51:19:85:7b:2a:e3:50:56:ca:d1:c4:03:7a:76:
f4:4a:1f:4b:eb:39:19:cd:30:be:56:d1:3e:a9:a0:
7c:1b:b1:e5:4d:2d:b0:5f:63:d7:6a:dd:9e:42:a0:
49:9e:bf:8a:6d:cd:36:ec:fb:f3:f2:67:be:c0:43:
5c:44:c8:77:91:ec:c3:a1:2d:1e:c9:d6:45:d4:b0:
21:f9:22:a2:45:57:79:c3:e6:ff:12:51:8a:8c:cf:
00:d4:84:1b:ab:f5:64:13:ad:ca:c7:1d:96:e7:ae:
ac:53:2f:7c:d7:f6:36:ba:37:17:f4:87:79:39:21:
32:e9:c2:62:75:ac:3d:0c:49:a6:04:77:2b:d6:58:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1B:93:72:A0:C6:12:36:FD:45:E0:50:C3:3A:79:55:9E:80:D3:6B
X509v3 Authority Key Identifier:
keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:10:93:70:be:b4:0b:af:29:d0:03:da:e6:ca:e1:23:27:1a:
37:ff:f7:61:28:a8:d8:13:2c:ff:73:00:8c:a8:a3:b7:84:87:
3f:73:d5:0b:03:b4:46:4b:09:a9:15:aa:db:87:50:96:fd:f5:
81:23:20:f7:99:b5:7c:ba:3d:ee:a4:9d:93:bf:79:cf:90:d8:
b4:4b:b3:22:0c:f3:ce:10:d2:88:b5:dd:89:fb:9b:c2:c4:ea:
f9:e2:6c:4d:02:1b:9a:b4:13:51:d8:75:50:a3:62:42:41:ec:
d5:09:0a:6c:d1:55:f3:0b:9d:39:bb:34:d7:8c:ab:05:38:99:
7a:6f:9d:2e:41:fa:23:4a:54:ff:ba:14:d6:ff:98:38:85:8c:
63:b4:60:3b:3f:46:04:c8:5e:87:72:65:75:bd:64:bb:eb:cf:
ff:0a:9e:04:b6:28:dc:bd:be:2e:4c:8b:7b:ad:91:64:5d:cd:
07:23:59:bc:e9:4e:5f:b4:b5:ab:d2:6e:ce:0a:83:2e:d8:53:
6e:35:dd:a8:67:e5:fe:a6:12:ba:1a:83:5a:5a:a7:b6:81:2c:
02:98:2e:e0:9d:77:39:53:55:eb:a3:a4:7d:b7:c0:37:c0:15:
14:28:24:a4:ad:85:21:44:47:14:33:97:d4:ba:15:a3:b3:10:
64:f9:ce:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:55:25 2025 by rpki-client