Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/E67EF1B25F0311ECBB273637C4F9AE02.roa
File: E67EF1B25F0311ECBB273637C4F9AE02.roa (raw, json)
Hash identifier: nVx5Y0jzC9bHhMI0JsTAXXHXSiIymADxDx7MlszHZYI=
Subject key identifier: 6D:40:B6:14:8A:3F:39:47:82:34:93:5A:86:50:96:AC:B6:1E:2A:B3
Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
Certificate serial: 0826
Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/E67EF1B25F0311ECBB273637C4F9AE02.roa
Signing time: Sat 04 Jan 2025 20:29:31 +0000
ROA not before: Sat 04 Jan 2025 20:29:31 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 138472
IP address blocks: 103.126.96.0/22 maxlen: 24
2001:df7:4300::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2086 (0x826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
Validity
Not Before: Jan 4 20:29:31 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67799a2b-f921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:24:fd:ab:aa:b1:12:88:c5:4c:92:6b:81:
5a:31:bc:b4:0e:40:b1:2d:82:fd:4e:b2:c9:bf:77:
18:f4:f9:00:6b:8c:63:dc:30:68:e2:42:c1:97:50:
e0:9c:79:44:1b:44:32:91:13:2a:ae:0f:2d:12:18:
97:0e:a5:1a:b0:57:6a:30:3e:bb:9e:3a:c9:92:12:
06:59:62:60:18:91:56:af:f1:d5:2c:c6:6f:2b:95:
ab:89:9e:47:8a:13:64:59:68:11:0c:69:e6:0c:a2:
0f:84:00:5d:75:01:d2:c7:45:d2:5c:8a:fc:5e:19:
c4:76:bc:43:c5:d7:56:b5:86:5a:51:ac:fb:0a:2d:
34:f9:18:d0:f3:27:1b:e5:38:3a:27:6e:d4:83:60:
a2:b6:b0:c5:4e:02:94:b7:1b:fe:ac:a5:63:ce:e9:
95:f3:4e:56:bc:3a:5c:cd:6f:a6:3d:50:cc:1d:2c:
ba:17:fe:a7:c4:68:4a:b0:67:48:f9:ef:55:98:82:
d2:26:43:75:3c:5e:11:2b:87:07:60:4b:93:d9:93:
63:82:0d:93:09:96:1d:7b:29:48:01:db:35:5a:35:
b2:d5:de:69:8b:46:24:07:3f:50:de:62:41:92:cc:
9f:91:09:7e:94:45:bb:14:80:39:a3:45:d9:a2:bb:
89:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:40:B6:14:8A:3F:39:47:82:34:93:5A:86:50:96:AC:B6:1E:2A:B3
X509v3 Authority Key Identifier:
keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/E67EF1B25F0311ECBB273637C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.96.0/22
IPv6:
2001:df7:4300::/48
Signature Algorithm: sha256WithRSAEncryption
49:c4:61:73:2a:da:e0:1f:d3:fc:b0:69:9a:99:e6:3d:00:6c:
3f:32:d0:c4:8f:30:60:bd:aa:d7:25:25:ce:0f:12:c0:4f:7f:
4b:55:04:d4:3c:4f:fd:3b:ce:20:0e:e9:a5:43:93:6f:0f:fa:
07:db:78:c8:84:63:0a:3f:65:d0:c0:df:19:c5:1a:02:1d:8f:
55:42:38:ed:fd:1b:f3:9e:12:6c:36:82:6a:d7:8b:5b:f0:36:
e0:d4:75:cc:ee:07:cc:64:8c:be:dd:ae:49:5e:73:60:ef:7e:
ae:3a:e5:af:b8:7f:9c:5f:75:76:24:19:4e:78:c6:8a:14:63:
4c:79:e5:e2:46:cc:60:c3:30:7d:4f:09:29:c5:68:47:57:2e:
71:fe:6a:f0:c1:eb:76:aa:e1:78:ca:bf:61:c0:71:4a:bd:61:
f5:ae:68:4e:c4:27:b9:17:bc:51:a9:2f:04:ef:96:92:45:15:
01:f1:a5:ae:67:11:ef:0d:17:df:a5:88:8d:bd:a3:a6:9c:38:
64:44:6c:74:c6:ca:13:23:ee:4f:2a:16:a8:be:80:0d:5d:ba:
cf:34:92:24:b0:aa:e0:a0:34:4e:50:36:7d:96:56:eb:94:b4:
08:eb:e5:23:e9:19:55:b2:0f:9e:3e:14:b3:c3:07:e2:00:c4:
24:2a:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:24:19 2025 by rpki-client