Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/92B90AE2A1C711ED8701EE35C4F9AE02.roa
File: 92B90AE2A1C711ED8701EE35C4F9AE02.roa (raw, json)
Hash identifier: gOeA95IoTDT+oKmI8jFxYBNTdxSgbCw9gAyz2psvCzs=
Subject key identifier: 7A:E7:66:60:CB:01:92:9F:27:A4:45:09:48:2C:51:F4:EB:76:AE:A4
Certificate issuer: /CN=A9111274/serialNumber=27E4FD41C3B364C5E444E62EB718199258393369
Certificate serial: 0722
Authority key identifier: 27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/92B90AE2A1C711ED8701EE35C4F9AE02.roa
Signing time: Tue 28 Jan 2025 21:21:00 +0000
ROA not before: Tue 28 Jan 2025 21:21:00 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 141412
IP address blocks: 103.158.132.0/23 maxlen: 23
103.158.132.0/24 maxlen: 24
103.158.133.0/24 maxlen: 24
2001:df5:5480::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826 (0x722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111274/serialNumber=27E4FD41C3B364C5E444E62EB718199258393369
Validity
Not Before: Jan 28 21:21:00 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67994a3c-c1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:65:fd:74:7a:27:e0:41:26:3a:73:74:56:
13:28:5e:4d:35:5f:a1:04:85:f9:94:5e:31:e0:2e:
52:8d:0f:2e:1c:7e:5c:e6:ed:93:fc:b8:76:45:72:
9a:44:02:12:c9:9e:70:da:ef:8d:43:81:13:c6:47:
c4:ad:1f:b3:3e:09:37:59:30:15:e4:a1:6a:fd:aa:
20:a1:9a:44:eb:60:1b:e0:1f:e6:c4:95:d1:24:a0:
cb:74:9e:20:e9:b8:be:b9:33:82:0d:91:bc:eb:48:
8c:d1:66:db:ec:59:9c:14:12:ee:0a:0e:d1:a6:81:
a6:f5:11:16:91:46:a7:80:a4:fd:44:d2:92:35:6f:
0b:9e:10:58:0c:b5:80:c3:87:7a:51:99:11:80:56:
b2:97:a9:f3:25:82:c9:3e:6f:dc:60:d6:ec:cb:d5:
e1:b7:e9:7c:e8:7b:a4:ef:aa:94:a8:56:de:e0:6d:
1b:76:f7:76:ce:7b:2d:c6:41:b4:37:79:45:f8:12:
ca:95:f4:8c:05:f6:5f:9d:48:f0:af:d2:26:34:bb:
5d:14:bf:d1:06:3f:b1:1f:2d:6a:03:34:5c:ab:90:
cd:08:2d:5b:a8:fc:fb:50:f3:3a:51:21:1d:03:e6:
b0:9a:f0:d0:16:c0:9a:30:fb:41:99:a3:3d:48:0d:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E7:66:60:CB:01:92:9F:27:A4:45:09:48:2C:51:F4:EB:76:AE:A4
X509v3 Authority Key Identifier:
keyid:27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/92B90AE2A1C711ED8701EE35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.132.0/23
IPv6:
2001:df5:5480::/48
Signature Algorithm: sha256WithRSAEncryption
0b:e6:f9:71:94:bd:a0:35:21:9e:61:57:ce:1d:5d:68:f8:ef:
74:90:38:07:f6:c3:a9:c1:f9:0b:d9:0f:44:4b:b5:c4:0b:00:
d9:d3:d3:e3:b7:7a:f9:1a:ce:3f:d8:08:eb:5e:27:bb:1d:47:
9a:a4:52:44:7c:65:84:aa:b3:0d:85:f9:e4:b9:84:ed:06:be:
a3:47:9d:1f:33:86:5b:4b:8b:07:9b:4e:17:a7:b7:1f:ed:ba:
8f:c9:34:75:ed:89:13:58:01:b6:f9:b3:f9:02:a3:3b:92:6a:
31:28:6e:2d:e6:f1:4c:2d:cb:11:35:c2:6c:63:5e:3e:48:70:
06:bb:a1:b1:4e:38:f0:2a:8d:a5:4a:cf:b9:cf:44:53:9e:57:
d5:96:db:d8:99:b8:3c:e4:46:20:06:d7:0a:54:3f:22:fa:fd:
8b:7c:33:b0:df:3c:a4:af:6a:fb:79:68:0d:66:88:06:8d:03:
a3:2d:16:56:88:97:d2:74:d6:e6:92:26:eb:93:58:38:64:5b:
2f:99:1a:fb:f6:c8:a6:f4:83:1a:8f:13:d1:43:9c:e5:63:6f:
02:93:24:f6:d5:77:30:3d:a9:b6:f4:0b:39:7d:fb:1b:ed:ca:
21:75:f3:a5:47:03:af:c7:d7:99:50:e2:1b:33:4f:c0:77:8a:
af:89:30:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:43:58 2025 by rpki-client