Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/ABCAF01CA86211ED9ED67945C4F9AE02.roa
File: ABCAF01CA86211ED9ED67945C4F9AE02.roa (raw, json)
Hash identifier: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=
Subject key identifier: 85:78:2E:8B:28:9D:0B:C9:8B:8F:BC:D5:AC:B8:24:29:EF:78:13:D5
Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
Certificate serial: 0168
Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/ABCAF01CA86211ED9ED67945C4F9AE02.roa
Signing time: Fri 03 Jan 2025 02:45:55 +0000
ROA not before: Fri 03 Jan 2025 02:45:55 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 150718
IP address blocks: 103.67.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
Validity
Not Before: Jan 3 02:45:55 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67774f63-3aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:4f:7b:77:b2:09:65:fe:1d:48:cf:85:c9:
34:b7:0b:31:63:46:bc:90:b4:36:ea:79:c4:36:e8:
3a:a7:96:ef:d6:2c:14:6c:d3:32:1a:e0:3a:d3:c7:
ae:88:d5:ad:3e:55:56:9c:a6:bb:ed:05:ea:7c:c0:
47:fb:f8:f8:e1:a4:49:01:b6:b5:f4:ec:db:03:f9:
a4:b1:17:84:7b:b6:fe:c7:01:85:95:26:f2:79:29:
49:55:85:3f:48:d6:a6:4c:a1:6d:d9:7c:08:c1:e8:
1f:e6:85:7d:6a:ee:e5:e0:8f:01:fb:ef:00:2b:e1:
83:e1:28:d1:8f:b3:2e:45:fe:b3:b2:9d:22:5d:16:
31:96:8c:61:24:8b:ce:73:4e:b0:8f:71:1b:2d:2d:
52:37:f8:17:3f:3d:14:19:a5:21:e7:45:91:00:3e:
f2:d1:10:bc:1e:ff:de:f6:b0:2b:78:11:d2:e8:4e:
5a:b2:6f:23:50:4e:61:7d:7f:dd:e4:54:a1:14:c8:
69:ad:b4:c9:26:88:cd:dd:00:3c:6e:1c:d3:50:74:
d5:bb:c4:66:0c:6f:9b:41:7d:2a:81:34:89:a5:5b:
99:4f:b6:05:e2:36:7a:f6:18:b3:da:39:a3:3e:e2:
30:d7:9c:71:79:78:77:c9:63:28:2d:9c:c1:7f:3c:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:78:2E:8B:28:9D:0B:C9:8B:8F:BC:D5:AC:B8:24:29:EF:78:13:D5
X509v3 Authority Key Identifier:
keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/ABCAF01CA86211ED9ED67945C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1e:8b:53:26:2b:aa:b5:45:f4:90:8c:ef:51:ef:81:b4:e2:
70:b6:e4:15:d9:92:69:ec:b6:58:eb:c7:6c:37:08:fe:2c:2a:
b5:45:fc:f2:b8:b4:9a:4c:59:50:c4:a1:d7:36:1f:a2:5e:2f:
79:78:85:73:c7:b1:b0:a9:4f:93:b0:c4:0c:23:bc:86:de:59:
3b:d5:ce:e6:9d:75:ce:59:4f:26:86:8c:63:29:b1:b6:d3:4a:
f0:fd:1b:c4:22:36:68:ef:68:d2:b9:68:82:27:30:20:4e:ae:
5e:76:72:c4:71:8a:dd:c3:51:2a:ea:87:d0:77:99:ba:85:3c:
9f:ce:1d:31:63:80:4c:56:cd:08:9b:7a:6c:32:17:36:f1:74:
b5:9d:da:d7:5c:26:4a:53:50:67:ec:32:cb:bb:ff:44:a9:9e:
d2:68:7a:94:79:ef:22:ba:74:9f:bf:b7:40:ec:31:25:d8:96:
f0:2b:75:94:96:76:8c:e8:f7:5d:23:9d:1f:47:87:6d:7a:b6:
07:f0:05:72:8e:f6:ad:9d:a6:cb:67:01:00:9e:ea:ee:b6:1f:
81:98:1f:5b:2e:15:dc:d6:f6:df:11:44:92:34:c0:6c:f3:c4:
df:dc:f2:bf:6b:09:dc:ff:06:8b:a9:33:6d:26:99:29:ec:2e:
1a:a4:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:49:45 2025 by rpki-client