Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/4FFC83964CA311EE815AF017C4F9AE02.roa
File: 4FFC83964CA311EE815AF017C4F9AE02.roa (raw, json)
Hash identifier: UA3Z3TNFXnNBwmElq5Ec0QuBLoZlUKqnBYT4/k/3BsY=
Subject key identifier: 2F:FC:14:44:99:E5:CA:E4:2E:D8:2E:2E:F9:37:33:FD:7D:26:0D:D6
Certificate issuer: /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
Certificate serial: 0AC4
Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/4FFC83964CA311EE815AF017C4F9AE02.roa
Signing time: Tue 18 Mar 2025 19:39:34 +0000
ROA not before: Tue 18 Mar 2025 19:39:34 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 150774
IP address blocks: 103.136.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2756 (0xac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E6CA
Validity
Not Before: Mar 18 19:39:34 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67d9cbf6-07f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f6:66:6c:67:53:f0:a8:16:14:eb:f3:9b:a1:
9c:83:1e:e2:6f:66:d7:a3:19:78:f9:d4:93:a4:28:
aa:b9:38:a7:75:f3:df:ae:c4:02:54:b6:30:6b:25:
6c:87:24:24:ac:3f:92:bc:c9:25:9b:48:18:c5:20:
0c:11:40:28:2b:7f:99:15:aa:5b:30:df:34:87:4f:
4a:2f:b7:46:ff:d4:d7:61:c9:92:8f:50:e1:91:86:
c5:6a:df:bc:7a:ac:a1:42:65:a1:f3:1e:bd:84:01:
20:b3:ad:46:ec:b1:21:38:49:f8:ee:b8:fb:28:fb:
f6:71:1f:be:2a:53:fb:78:86:85:90:f0:13:42:8a:
70:50:7b:64:e3:ef:4e:25:cb:af:47:37:19:e4:95:
7c:20:da:45:07:cc:22:7c:7e:78:8d:b7:d0:01:94:
88:3d:2a:fe:c1:d0:79:4c:c6:d3:51:d4:62:3d:36:
ba:87:27:a6:f8:b0:e6:aa:0d:45:1c:4d:bd:4c:29:
39:b4:52:73:39:3a:95:8e:be:5e:09:47:12:46:0d:
bc:9c:b5:6c:97:8e:23:5f:0c:90:4f:0a:44:eb:a9:
eb:20:eb:e0:ae:f9:b9:d1:12:19:bf:d6:7d:c9:d6:
46:32:42:23:85:32:4f:a8:22:63:e9:89:25:08:dc:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FC:14:44:99:E5:CA:E4:2E:D8:2E:2E:F9:37:33:FD:7D:26:0D:D6
X509v3 Authority Key Identifier:
keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/4FFC83964CA311EE815AF017C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.159.0/24
Signature Algorithm: sha256WithRSAEncryption
20:51:1c:a2:1e:a4:e1:3f:c2:a3:4c:01:8c:27:fb:2a:87:0d:
f8:f9:f7:a9:4a:9c:e3:20:3b:20:d6:07:3b:f9:be:29:7b:9d:
fc:c5:e8:d7:02:a9:9c:14:62:1c:4b:07:a8:d6:4e:ad:a8:8d:
3f:ff:f7:67:4a:9b:d2:af:ac:85:91:8e:54:86:87:4f:0d:c3:
f0:39:ce:0d:2f:dc:01:bf:05:c6:27:55:60:f5:79:52:c6:f0:
0d:71:47:7f:13:b9:f8:c3:6f:ca:12:0b:71:8e:d7:cf:76:14:
05:ac:e9:b6:58:8c:72:58:13:7d:30:03:09:ea:82:84:4c:77:
c3:83:68:de:36:48:1a:9c:72:f8:54:ab:38:00:03:48:ba:09:
71:3c:8e:95:67:43:3e:14:90:3b:52:5a:91:bf:35:ef:1b:5b:
20:45:ee:a9:03:12:d9:83:3e:3f:c1:74:17:2f:b9:2d:20:0d:
4e:c0:45:1d:7d:1e:fa:5d:2a:c0:11:64:d5:a3:60:39:5c:54:
d1:ba:5c:39:67:a6:71:74:89:fb:30:60:f0:39:3d:09:44:af:
17:9c:67:88:8e:33:5f:7f:73:54:f7:82:cf:6f:d5:14:46:e8:
f4:68:49:5c:e1:dc:5c:90:39:d1:a1:8f:9a:a5:50:27:24:83:
d3:5c:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:55:52 2025 by rpki-client