Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/85EAFFD806F911EC9558C827C4F9AE02.roa
File: 85EAFFD806F911EC9558C827C4F9AE02.roa (raw, json)
Hash identifier: 9v3EHVS6OF29hHJXAC8+0BpNbFO1DRfm0tNrOjvIm8c=
Subject key identifier: 82:CE:BA:7B:02:17:F8:42:55:91:C2:E6:77:91:BA:8E:0F:F8:89:4F
Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
Certificate serial: 04A9
Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/85EAFFD806F911EC9558C827C4F9AE02.roa
Signing time: Fri 11 Oct 2024 00:03:41 +0000
ROA not before: Fri 11 Oct 2024 00:03:41 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 146988
IP address blocks: 103.172.112.0/24 maxlen: 24
103.172.113.0/24 maxlen: 24
2001:df7:6f80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
Validity
Not Before: Oct 11 00:03:41 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67086b5d-6568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:29:e9:03:65:22:bc:27:a0:a0:e1:56:29:
d0:0f:d5:fa:37:c6:e5:e6:10:c1:1f:18:f1:b8:65:
6c:d7:8d:da:17:e9:ee:90:56:10:f5:75:7a:2f:d9:
5b:76:6d:b5:3a:d2:4a:56:d1:4f:6d:c2:dc:2f:9b:
6d:fa:8a:ac:79:1c:e2:d2:3b:6c:cb:79:69:0d:8c:
be:6f:e2:c6:ba:2d:19:95:89:64:44:04:a9:87:06:
c2:79:6a:dc:cd:43:d1:56:65:e8:2b:f6:79:c2:4e:
31:a3:28:2e:17:e9:e4:66:7e:8c:3b:9e:9e:65:af:
e3:1a:db:da:d8:c8:8e:55:0a:57:78:62:d8:fc:d5:
96:ca:d9:90:db:43:c2:a9:9f:aa:f6:e8:fa:57:49:
80:31:f4:9c:29:b2:85:2a:90:0b:4f:57:bb:65:a8:
b8:f5:7a:b5:22:e7:cf:f4:e9:90:db:43:df:79:8f:
db:a6:9b:36:f1:9c:21:64:c5:6f:44:58:54:2e:fa:
e7:a5:37:6b:66:be:21:48:49:7e:7b:4b:4b:8a:2b:
8e:66:50:a0:a8:7f:5a:5b:c2:5c:df:5d:58:18:d8:
1f:85:b3:0a:5e:45:d9:19:d1:50:02:dd:49:45:0e:
5a:c2:0e:e1:e5:80:cf:48:a3:5c:10:7a:8b:fb:26:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CE:BA:7B:02:17:F8:42:55:91:C2:E6:77:91:BA:8E:0F:F8:89:4F
X509v3 Authority Key Identifier:
keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/85EAFFD806F911EC9558C827C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.112.0/23
IPv6:
2001:df7:6f80::/48
Signature Algorithm: sha256WithRSAEncryption
cc:d7:3f:e8:23:9f:13:94:45:b7:ab:be:b7:0c:ff:5a:68:83:
c1:6d:77:bd:1e:85:aa:5c:71:d7:7d:c7:11:c4:32:4e:91:ec:
46:6e:e0:80:8e:2c:70:1f:6f:3f:8b:28:0f:8e:92:f6:c6:b0:
a5:a6:eb:07:c3:b6:b7:50:68:36:7b:4b:6f:c6:ab:78:1b:e6:
47:81:91:b6:27:73:31:9e:bd:d2:94:d7:47:3b:2f:58:9e:90:
1e:d4:35:b2:c9:3e:47:f6:0f:fb:09:28:e6:cc:f4:8b:7c:93:
78:2d:0b:56:03:57:0f:d1:01:02:a2:56:58:94:2d:90:33:31:
17:91:27:3e:4a:aa:22:90:24:a0:76:a3:e6:f9:2d:00:be:21:
41:c7:91:f4:97:ac:c7:84:06:2f:20:a3:11:e9:b9:cb:8d:8e:
b1:91:1a:1f:02:5a:77:ae:14:26:ab:16:40:09:5e:66:5d:d5:
1c:82:c6:54:dc:21:75:fa:f4:ed:bf:d8:16:fa:89:6e:10:d4:
bb:c3:96:78:a1:20:26:a2:b0:4e:3b:2d:a1:be:2f:ac:76:56:
ed:92:80:14:6c:7b:c5:35:a4:d8:49:4a:91:09:7b:30:b7:e4:
ca:e2:50:3c:13:ac:59:47:86:1c:71:ba:b5:9f:03:f5:d4:fc:
1a:6c:0e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:47:18 2025 by rpki-client