Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/26834412EFF211E9B74F3A6AC4F9AE02.roa
File: 26834412EFF211E9B74F3A6AC4F9AE02.roa (raw, json)
Hash identifier: ZmGMH4g7cGfub9A5Ucup2yr3pAIXwRpZ1v4yX9SvAOs=
Subject key identifier: EF:66:C7:94:9B:51:5D:BC:6C:05:36:49:04:B7:F5:60:B6:BE:9C:28
Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
Certificate serial: 1AF2
Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/26834412EFF211E9B74F3A6AC4F9AE02.roa
Signing time: Wed 04 Dec 2024 16:23:42 +0000
ROA not before: Wed 04 Dec 2024 16:23:42 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 136164
IP address blocks: 103.82.172.0/22 maxlen: 24
2400:86c0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6898 (0x1af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
Validity
Not Before: Dec 4 16:23:42 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6750820e-af02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:76:48:0a:27:75:12:4c:44:3c:6c:d4:0b:
2d:6c:3e:4c:06:14:e0:35:37:2f:85:ee:c8:3b:fc:
80:90:45:a2:5a:0c:91:3b:dc:71:43:d4:da:01:3b:
a2:e5:73:0f:53:f5:8e:98:39:23:9f:c2:fc:92:52:
2b:06:84:ee:2d:65:af:45:68:bc:f5:35:25:01:41:
44:2c:ab:54:d5:49:6d:3a:d5:4e:aa:6e:af:c7:c5:
5b:ea:fe:5a:d1:32:3b:65:a7:70:c2:e0:f3:8a:02:
c8:6a:b6:8e:d1:2f:fc:bb:41:26:61:cd:46:8c:c6:
6c:61:3d:db:6c:a0:75:c5:76:9d:b6:52:08:a4:20:
b7:55:8b:75:8a:94:15:a6:9e:5e:cc:8d:52:a6:28:
06:b7:4d:cc:ad:07:f7:56:01:83:eb:bd:d9:e7:a4:
0b:db:2d:c9:21:32:ae:9f:b0:a2:56:63:52:30:ed:
ef:63:fd:72:dc:c2:65:32:aa:5b:6f:38:60:a4:a3:
d3:98:3e:8f:63:9e:b5:65:5c:45:3c:48:40:34:76:
22:6c:e8:8a:0a:13:71:f2:8c:0e:30:00:f4:3c:11:
37:b1:4e:14:37:82:ca:5e:4f:72:bf:fb:dd:61:dc:
1b:23:87:09:19:bd:9c:ce:4f:ea:e9:4e:0c:35:f5:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:66:C7:94:9B:51:5D:BC:6C:05:36:49:04:B7:F5:60:B6:BE:9C:28
X509v3 Authority Key Identifier:
keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/26834412EFF211E9B74F3A6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.172.0/22
IPv6:
2400:86c0::/32
Signature Algorithm: sha256WithRSAEncryption
67:2b:d5:6e:d1:ef:02:b4:00:5b:42:86:47:36:a5:22:ff:68:
9f:79:e0:e0:9e:7a:ba:3c:b6:c8:27:b0:1b:39:54:12:7d:60:
f2:7c:ce:40:cf:94:b8:6c:c6:2b:33:57:5c:cc:b6:ad:26:05:
99:ad:67:07:14:07:19:cd:77:56:7a:f8:3a:a1:df:2f:0d:4f:
04:27:6f:18:a8:e3:15:2b:5e:ab:c7:21:b8:3e:fe:57:bc:a3:
ca:98:75:ea:53:ca:59:7d:24:ec:47:f8:a6:f5:f7:02:25:10:
a0:d7:0c:58:54:f3:f3:49:11:b6:53:df:97:37:b9:65:d9:e6:
30:d3:c2:84:e5:fa:d2:57:73:22:c5:6a:d0:16:6a:f2:7a:b9:
b2:d8:f8:27:a5:b5:dd:2c:b1:0e:cc:fe:ae:22:10:53:cf:4a:
ec:83:59:48:2d:05:b1:7c:69:15:a6:81:fe:4d:1d:3d:2e:50:
4c:89:de:27:21:b8:0a:bf:96:11:e3:14:6b:10:b9:10:10:4a:
22:70:7c:b4:64:e5:30:e4:6f:59:42:7d:fd:0f:bd:1c:b2:62:
6e:10:fb:b0:40:e0:65:42:1b:ca:de:ea:28:c9:fa:24:4b:40:
d9:fb:a3:c1:dc:55:a1:4d:6b:d0:35:47:51:01:27:92:9b:a3:
48:8d:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:00:36 2025 by rpki-client