Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/0F0EC4A67A8811EB95169F62C4F9AE02.roa
File: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (raw, json)
Hash identifier: cbGv9Az0WV6nTGgrUjq6cjPrkcXLiewtavxh7ffNibo=
Subject key identifier: 8F:A5:A1:68:78:43:F3:04:68:81:FA:6C:62:6C:E3:78:97:04:27:D3
Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial: 065B
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/0F0EC4A67A8811EB95169F62C4F9AE02.roa
Signing time: Tue 04 Mar 2025 23:41:47 +0000
ROA not before: Tue 04 Mar 2025 23:41:47 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 133448
IP address blocks: 103.86.85.0/24 maxlen: 24
103.86.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1627 (0x65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EABCB
Validity
Not Before: Mar 4 23:41:47 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c78fbb-0b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:fe:68:21:f2:ef:32:f1:e5:2a:b4:c9:c9:
1f:f6:0d:0c:7e:b0:5d:bd:d7:27:b6:70:f7:1c:50:
6c:d0:19:0f:32:25:56:5d:9b:51:bc:00:58:e7:bf:
ce:75:96:b7:8a:c9:62:74:b9:1e:f4:bd:15:98:d8:
bf:f6:a3:c0:4f:57:19:94:97:5f:de:f6:b1:b7:83:
12:9d:c4:06:df:ab:c4:e6:8f:1c:ae:ee:cd:8b:c8:
06:65:3e:4a:8b:21:66:f7:60:16:5c:b4:c7:41:2a:
9c:44:f4:63:81:9e:8c:ae:26:6b:b1:a9:18:5f:c3:
ad:72:30:00:d7:91:21:e7:a5:09:66:b0:4a:f0:4b:
85:51:3f:b9:ee:b6:c7:16:ad:09:fa:8e:65:b1:3e:
ee:ee:1f:30:9d:85:37:c2:ee:6d:d9:c3:ff:db:53:
ed:d9:f8:8a:df:95:49:ec:f6:64:b1:15:38:65:b8:
17:48:f8:61:02:b5:98:69:9d:4f:c6:0d:fa:09:1f:
b6:36:16:b6:51:b2:62:4d:a1:f3:01:0d:1c:3d:a9:
35:eb:c1:73:62:36:b7:c1:1e:eb:7a:cd:3f:3d:15:
5c:00:4c:f7:ab:c4:71:e1:82:0a:3a:53:ae:76:a1:
69:5a:0b:a0:3b:e4:0a:07:1f:45:57:21:2e:05:be:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A5:A1:68:78:43:F3:04:68:81:FA:6C:62:6C:E3:78:97:04:27:D3
X509v3 Authority Key Identifier:
keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/0F0EC4A67A8811EB95169F62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.85.0/24
103.86.87.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:de:8d:1d:74:e2:09:71:61:87:4a:fe:49:33:78:ee:c3:8b:
86:37:8f:51:36:6c:81:6a:7d:06:8a:f3:63:f2:71:6a:0b:66:
e0:82:5b:6d:9c:8d:7e:6e:bb:5e:40:a9:11:f6:4e:9f:8e:47:
c0:1e:b3:8f:68:7e:05:05:5a:b2:d9:94:c5:ee:c8:56:dd:1b:
a1:05:03:be:d6:08:4c:4c:cb:25:dc:35:19:1a:ac:b3:f4:a4:
6f:f0:ea:0c:8e:f0:5a:8f:3f:4f:fd:36:52:a8:c8:4a:d2:00:
53:ea:f5:fc:d7:c4:85:7d:24:a6:08:5d:8e:a5:62:15:94:a0:
3e:b6:65:e6:33:1c:38:83:fc:27:5f:f1:99:2f:f5:eb:5a:a4:
74:88:27:c6:0a:61:a5:81:ae:a4:d5:34:1a:2d:18:b6:27:98:
5b:6e:71:b8:50:0f:6a:b5:c6:c6:1e:98:47:30:10:a4:44:6b:
93:79:99:73:d0:ed:74:58:75:5c:21:ec:24:ba:24:6f:08:f8:
c5:0c:f5:01:7f:83:da:bf:0d:56:70:72:5e:7e:6c:26:01:94:
7b:fa:41:cc:e0:e9:04:cb:91:8e:c3:f6:cb:94:72:41:a8:28:
f6:e0:d9:ea:2c:1c:ab:62:89:3f:05:21:b3:e8:fa:ed:46:c3:
d3:64:b0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:28:49 2025 by rpki-client