Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/94A87892D3CF11EF81EA2D5EC4F9AE02.roa
File: 94A87892D3CF11EF81EA2D5EC4F9AE02.roa (raw, json)
Hash identifier: YFlPcMOqU4AT2knX3tItgDLUNSgHaBzXBJvuHWKEgzg=
Subject key identifier: 63:82:2C:54:AE:86:E9:00:CA:F7:D2:F0:C6:40:D4:3E:F6:D5:2C:F0
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0B9A
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/94A87892D3CF11EF81EA2D5EC4F9AE02.roa
Signing time: Thu 16 Jan 2025 06:03:18 +0000
ROA not before: Thu 16 Jan 2025 06:03:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151983
IP address blocks: 103.200.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2970 (0xb9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA
Validity
Not Before: Jan 16 06:03:18 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6788a126-2e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:5b:e5:cb:1d:f3:06:8f:da:72:c8:37:5b:
62:1f:37:93:3e:8a:09:f9:56:b6:d8:52:4e:02:3a:
c7:38:28:41:82:6a:53:5e:45:ab:69:79:b0:a7:44:
ff:dd:1e:8b:9d:8f:ec:66:b2:c5:2a:c6:e5:b6:7d:
56:50:3e:50:1c:3b:45:32:03:88:92:3e:ec:2f:e7:
09:c3:48:cf:07:27:a4:23:03:b8:ea:3b:fc:92:86:
e2:09:fd:8c:d9:25:41:a5:0e:05:78:b1:9d:91:ac:
f0:5e:5c:f2:df:5f:72:21:47:27:5a:68:82:5a:db:
e9:fa:71:47:57:4e:48:32:c2:4b:69:1d:c1:d6:34:
bf:0c:99:5e:3d:8d:ac:1c:43:1f:11:63:74:df:f9:
a5:ea:66:64:25:f0:b8:b7:73:09:e8:f0:39:ec:f7:
5a:4c:a5:e7:5f:bd:35:36:fb:1f:02:fc:8b:4e:9d:
e9:30:d5:27:d4:2a:8e:7e:6b:9d:9d:06:a6:60:c7:
86:72:cb:9d:3a:b6:fc:0d:cf:b5:88:fc:23:10:33:
7d:49:d1:f0:38:02:02:4e:d3:37:d6:03:5c:8d:29:
06:02:74:88:9a:49:3c:fd:74:c2:a2:3a:24:8f:d3:
11:a5:fe:19:28:65:70:88:98:89:18:1f:c0:ad:58:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:2C:54:AE:86:E9:00:CA:F7:D2:F0:C6:40:D4:3E:F6:D5:2C:F0
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/94A87892D3CF11EF81EA2D5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.200.196.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e9:fd:21:4e:b6:de:9c:a9:e2:6b:60:bd:d5:89:21:1b:f1:
d7:65:2f:10:04:13:ef:50:b3:e2:10:a7:79:8e:7f:35:d2:2c:
be:14:1d:c4:9d:ae:19:73:17:16:94:d1:ea:47:9b:95:bf:86:
6a:de:9e:09:eb:34:41:cc:15:6c:a6:24:3e:a5:5f:19:fc:88:
b2:39:fd:d2:d3:81:87:12:62:70:e4:93:1d:b2:f5:4d:8a:8a:
82:0f:6b:f1:b5:a2:db:da:c2:5f:e7:7e:fa:16:d5:83:95:8c:
b7:0a:40:37:bb:20:ac:74:a9:1c:55:e3:b3:12:73:11:1c:02:
ba:cb:46:c4:c9:22:e6:0a:99:50:ce:3c:30:3b:0a:d9:c6:8c:
da:ee:f3:66:30:23:e9:05:d7:22:94:73:28:c3:3d:0f:7c:9e:
7b:2c:04:af:69:3e:4c:74:ed:1b:71:ed:24:77:98:51:33:80:
8c:20:dd:2e:30:ad:e8:a9:61:64:ad:ee:4f:69:04:60:b2:1b:
c7:97:2c:c8:a8:e6:b6:b2:e8:86:a0:09:2e:d0:7f:05:e0:cc:
ce:94:89:f1:de:e1:01:18:04:f6:66:94:b1:39:72:59:26:fa:
25:ef:d4:96:27:f4:b8:44:c1:d8:1e:e4:d3:ec:0a:97:94:a3:
4d:e6:28:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:58:14 2025 by rpki-client