Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/02181C4CE13511E7B0D71C83C4F9AE02.roa
File: 02181C4CE13511E7B0D71C83C4F9AE02.roa (raw, json)
Hash identifier: kYdi56Vh70Qo/SN0C8R4CSPhNox0X9SfOcU95n5XzCk=
Subject key identifier: 33:57:9D:85:78:93:D3:90:80:83:F9:1A:63:C2:DA:59:3A:A5:54:54
Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
Certificate serial: 16EB
Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/02181C4CE13511E7B0D71C83C4F9AE02.roa
Signing time: Wed 08 Jan 2025 17:04:36 +0000
ROA not before: Wed 08 Jan 2025 17:04:36 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 137243
IP address blocks: 103.105.191.0/24 maxlen: 24
2001:df3:8900::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5867 (0x16eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782
Validity
Not Before: Jan 8 17:04:36 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677eb023-39c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:7c:85:12:e5:7b:a8:21:22:55:b0:ff:56:
25:fc:df:9f:e2:e5:00:5f:e8:fa:4c:c5:af:62:04:
83:1b:9b:fd:94:2c:23:3a:60:57:01:b3:4f:b9:2f:
7c:b3:50:62:22:1e:4b:b2:fb:97:10:62:d4:d1:6d:
75:86:ba:de:36:94:8a:8e:0a:91:6a:56:cf:f2:47:
1c:f6:78:fb:75:0b:7c:b5:7f:52:4c:a0:ab:09:16:
63:22:f8:2a:fb:72:fb:96:21:8f:a1:76:69:48:15:
dd:47:57:bf:57:ce:2f:d0:12:cf:13:e5:ef:9b:6f:
f2:66:15:b4:85:87:39:b1:32:a8:d9:fd:d5:c7:8f:
ad:88:91:70:05:67:16:e3:62:70:12:fe:b3:f4:86:
c6:22:15:f8:de:7c:bf:83:b7:38:cc:bc:12:85:cd:
60:44:24:4b:c5:ee:d5:be:07:1c:0c:35:55:02:5d:
06:a5:29:3f:6a:fb:d7:28:a7:88:4a:28:60:b2:85:
42:99:fd:56:1c:41:f3:c8:65:af:99:c3:37:0d:56:
f5:a5:68:9a:6d:c8:f5:88:29:b3:39:48:3b:83:0f:
46:26:46:46:2a:30:d9:e2:42:86:f6:b4:ba:11:1c:
0e:d9:b9:25:db:5e:d6:51:20:5a:48:1d:7f:e9:4a:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:57:9D:85:78:93:D3:90:80:83:F9:1A:63:C2:DA:59:3A:A5:54:54
X509v3 Authority Key Identifier:
keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/02181C4CE13511E7B0D71C83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.191.0/24
IPv6:
2001:df3:8900::/48
Signature Algorithm: sha256WithRSAEncryption
65:44:ca:8f:fe:8c:f2:2e:32:49:0d:e7:fb:25:66:b5:1b:ee:
b3:3e:16:57:81:fd:cd:89:ed:fb:6d:3c:b2:fb:79:67:ba:80:
e9:5a:85:23:04:f1:0a:fb:f8:38:98:fa:58:cf:b0:a8:1a:11:
81:54:4c:05:25:05:03:4e:c9:0b:63:96:1f:0e:f8:ae:f6:09:
47:b3:e5:30:47:38:f5:4d:8b:0e:ad:01:14:55:b9:65:16:fe:
ca:b2:be:d9:91:52:9b:ea:37:02:be:32:86:75:fe:02:9c:da:
2a:d9:0c:fc:4d:f4:82:a9:43:1c:31:09:55:14:3c:1f:74:f7:
0a:9f:50:12:19:07:fa:10:20:5b:09:77:a6:13:31:43:bc:f8:
fc:5c:06:93:cc:71:d3:8f:1a:e3:d8:53:21:4c:36:ec:2f:a1:
b7:6b:87:02:42:88:48:08:3b:80:98:07:0c:71:47:c9:3b:ea:
6c:15:47:d9:f3:21:93:50:95:7f:0b:9b:d7:7b:cf:3d:ce:12:
ee:cb:67:fa:ce:08:b3:0b:1c:fe:91:c2:4c:db:20:3f:43:0d:
01:ea:3a:73:73:43:d7:24:69:4b:63:65:8a:54:2a:02:79:8d:
ca:fd:d7:c2:2e:00:bb:3e:8f:30:d9:02:3e:f9:25:27:cd:ac:
30:fe:73:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:25:55 2025 by rpki-client