Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa
File: C9989D9EF52011EF88416555C4F9AE02.roa (raw, json)
Hash identifier: 5ttWZpUai22oFSUg02AkUKazNYGpWMAvqC2hReQsDD4=
Subject key identifier: CF:87:1A:2B:46:AF:FD:64:5A:43:69:98:0B:10:3E:B2:F2:E9:C2:A0
Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
Certificate serial: 0BEC
Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa
Signing time: Thu 27 Feb 2025 15:37:45 +0000
ROA not before: Thu 27 Feb 2025 15:37:45 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136022
IP address blocks: 103.134.40.0/24 maxlen: 24
103.134.41.0/24 maxlen: 24
2404:5cc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA2CC
Validity
Not Before: Feb 27 15:37:45 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c086c8-ecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:50:cd:a2:c5:80:09:7b:b8:b1:76:b6:a4:
4d:ad:03:8e:e9:82:3a:cc:9b:c1:ff:eb:eb:57:d2:
bc:2d:43:51:ea:96:58:1a:f5:20:02:be:89:74:8e:
0b:cf:6f:f6:0b:35:31:25:02:aa:82:08:48:99:64:
c8:3a:ee:cd:58:79:2d:6e:ac:75:02:78:5b:6a:3c:
4e:40:0f:d2:42:9f:2d:e1:48:a9:8e:eb:c0:a6:60:
66:72:6c:61:15:7d:19:03:d4:76:b0:b6:40:79:40:
06:80:31:25:6d:fb:be:5c:36:ea:e8:09:d0:db:f9:
b1:d0:8f:cb:c9:18:a5:b9:fd:68:b9:66:c2:37:52:
31:01:c6:d0:5c:66:d4:90:eb:c4:7a:55:10:55:8f:
e7:cb:e4:9d:e6:f2:2e:62:af:d0:51:04:d4:e4:78:
15:82:44:f0:2c:cc:7b:33:b5:13:f2:02:9a:74:18:
a5:bc:ea:57:16:3c:5e:68:58:08:fa:b1:f5:25:9b:
ee:54:25:11:17:c9:74:a4:55:37:fb:a1:17:90:c8:
e3:53:cd:30:9c:c7:98:ff:ee:d6:71:fa:0e:33:ae:
6e:9e:88:44:a5:ad:29:82:ff:13:fa:c7:e0:51:13:
c6:2f:27:1c:41:04:59:fb:73:fe:c1:f1:64:00:25:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:87:1A:2B:46:AF:FD:64:5A:43:69:98:0B:10:3E:B2:F2:E9:C2:A0
X509v3 Authority Key Identifier:
keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.40.0/23
IPv6:
2404:5cc0::/32
Signature Algorithm: sha256WithRSAEncryption
19:90:0e:4c:44:9a:b3:2b:25:b5:cc:08:07:80:08:d0:22:28:
04:6a:aa:ac:a6:b5:4f:5f:57:2d:99:67:e8:c2:ba:42:9e:b0:
d4:6d:ee:22:7a:f1:eb:1b:10:b4:24:72:f7:09:3d:6c:f2:32:
e8:3f:50:22:a3:b6:aa:12:c0:42:93:1b:0b:ce:92:7d:c3:10:
14:87:57:20:29:f3:c3:48:85:81:27:bc:9b:a0:a7:21:de:8d:
12:bb:87:9b:64:24:d0:5f:e6:30:0f:24:f6:a2:0f:a8:f7:e8:
6f:18:cb:92:c2:33:19:37:49:93:21:6b:fd:a1:93:82:52:01:
c4:ca:01:e2:e5:db:c7:84:7d:40:04:c4:d2:ea:1c:1d:7e:5e:
c0:4c:e6:e2:30:de:2a:7f:46:26:2a:9b:dd:39:e6:e1:d3:b3:
d5:38:b7:61:04:f3:1a:0a:49:3c:91:ab:81:7b:a5:fa:48:cb:
69:44:2b:92:e9:42:34:76:f6:af:f8:12:0b:b9:d2:16:35:59:
65:36:f1:87:f5:28:a1:a1:8d:c1:1a:ea:68:4a:b0:2e:6f:62:
0e:b6:65:88:12:df:45:d7:34:e5:48:d6:75:b9:a8:ec:29:a9:
80:af:92:5f:db:05:81:07:37:8a:90:20:fb:e7:28:fc:82:fd:
2f:95:61:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:02:05 2025 by rpki-client