Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/AF905A0C021111EAA331B072C4F9AE02.roa
File: AF905A0C021111EAA331B072C4F9AE02.roa (raw, json)
Hash identifier: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=
Subject key identifier: F8:8E:14:FE:14:9F:9E:6F:F5:9B:C9:46:18:F2:03:15:A0:12:C8:D7
Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6
Certificate serial: 0C16
Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/AF905A0C021111EAA331B072C4F9AE02.roa
Signing time: Mon 20 Jan 2025 18:17:08 +0000
ROA not before: Mon 20 Jan 2025 18:17:08 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 133168
IP address blocks: 103.84.156.0/22 maxlen: 24
2400:a7c0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3094 (0xc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6
Validity
Not Before: Jan 20 18:17:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=678e9324-754f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:b4:86:3b:21:ef:b2:2b:30:84:7e:9e:35:
22:da:33:99:f4:1c:11:91:84:9a:fb:eb:5c:4b:30:
fc:75:98:ff:a6:0a:53:ed:e7:37:fc:41:5f:d3:a4:
18:33:b6:0c:2d:c6:0b:29:0c:b4:c8:31:d3:57:00:
22:9c:19:c7:2d:c7:dd:f3:6c:5d:89:66:92:ab:06:
a1:7d:3f:ef:cd:52:74:2f:77:1c:59:98:8c:5a:c7:
d8:24:14:ed:3a:e3:d8:1d:79:e9:41:c2:87:b0:cd:
02:9f:07:a6:dc:d3:54:6f:2a:93:58:9a:1e:dc:ad:
89:31:93:33:51:8b:be:65:ac:ee:e3:92:6d:c6:63:
20:6d:b9:00:56:5b:0d:c3:37:02:7e:d5:4b:e5:6e:
9c:4d:fd:4a:a9:ad:21:88:6a:0d:71:e7:36:79:b4:
f0:06:60:fc:f5:a1:d1:ec:e2:cc:f1:a0:22:e1:8b:
17:d5:ef:df:76:09:54:b3:ad:22:85:05:80:ce:56:
e2:10:e3:da:60:97:66:8d:7c:12:ac:6c:67:86:12:
37:08:16:98:2a:df:2e:c8:06:aa:37:0e:d2:50:40:
63:13:3f:46:c2:80:8c:f0:d4:bf:08:1b:f6:a8:ff:
fa:25:70:5c:1d:d0:58:a9:b2:8e:68:63:5f:91:98:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:14:FE:14:9F:9E:6F:F5:9B:C9:46:18:F2:03:15:A0:12:C8:D7
X509v3 Authority Key Identifier:
keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/AF905A0C021111EAA331B072C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.156.0/22
IPv6:
2400:a7c0::/32
Signature Algorithm: sha256WithRSAEncryption
45:98:e9:51:02:68:d5:00:5c:0a:85:c0:17:1d:fe:14:23:81:
f6:6b:2f:b2:e7:b6:b1:49:2a:44:a2:e5:95:68:eb:fd:23:81:
20:d3:97:2a:e7:3f:4b:96:87:e6:12:7d:be:3f:bb:68:d3:4b:
c2:99:60:e8:fb:0c:8d:c8:70:1c:a0:29:1b:67:49:45:8b:85:
5f:f4:35:73:60:3a:20:e9:60:8a:c6:b6:bb:87:91:b4:f1:5f:
c7:e2:2f:58:33:d6:f8:96:f0:7e:33:63:56:96:34:eb:67:b4:
45:6c:f2:20:56:95:43:2c:6c:1d:57:4a:8f:50:1d:2a:b5:9e:
fb:d9:6b:6c:5e:fd:58:81:8c:ef:ff:23:14:c9:e7:6f:3f:59:
2b:5e:56:5b:d5:e4:f9:50:f1:9b:a1:d3:00:06:24:91:f0:23:
18:0d:2d:cc:39:96:87:2d:6a:07:db:ce:a5:60:c3:10:77:77:
e6:32:0e:08:ea:85:03:5a:33:5a:c4:9a:47:d8:62:88:83:8c:
3b:d6:ef:c7:76:24:fa:e8:9e:f2:b2:b5:3e:14:b0:e6:ee:2e:
2b:c0:00:13:89:9e:33:5f:cc:08:fd:6f:65:20:26:6f:00:c7:
2c:1f:3a:d0:b6:54:7a:09:cc:16:53:e2:5e:36:c1:90:cd:ae:
27:35:97:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:36:40 2025 by rpki-client