Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/0F28A28037CA11EDB8E79257C4F9AE02.roa
File: 0F28A28037CA11EDB8E79257C4F9AE02.roa (raw, json)
Hash identifier: pF3/SCpjqWZzJ0zKbIk7nxneope2I0jviiYqOPZYauI=
Subject key identifier: 8C:DB:24:09:46:F3:91:07:0D:44:FF:70:99:39:1A:94:6A:B5:DF:03
Certificate issuer: /CN=A91693D7/serialNumber=5F6051873B81506E2578AC58B3268F01DFF26ECC
Certificate serial: 0682
Authority key identifier: 5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/0F28A28037CA11EDB8E79257C4F9AE02.roa
Signing time: Mon 02 Dec 2024 22:01:08 +0000
ROA not before: Mon 02 Dec 2024 22:01:08 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 9381
IP address blocks: 103.30.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1666 (0x682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91693D7
Validity
Not Before: Dec 2 22:01:08 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674e2e24-0946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:3d:88:e7:ce:3e:c8:f3:3f:3f:9e:66:d5:
75:9f:fd:6f:b3:69:e0:23:d2:50:07:dc:f7:a7:9e:
08:76:22:01:0d:f4:c1:1d:e4:12:06:e6:a3:10:55:
95:ac:cb:88:1c:68:df:cc:e0:5a:91:12:d5:d5:a1:
26:64:ec:6c:eb:25:82:d5:99:dc:21:3e:7a:b0:58:
7e:33:33:b4:29:04:c9:6e:9c:17:6c:98:ff:5b:d7:
3e:f1:d0:13:d0:c5:85:cb:25:c8:2b:6e:17:76:4b:
46:ca:67:8b:3a:04:1f:9b:d1:82:42:f5:2d:71:a5:
3b:75:fb:26:d8:db:29:f3:42:43:af:32:59:2c:46:
ff:8f:b9:a5:8e:05:52:17:7a:b6:cf:8d:40:03:57:
84:09:0a:a4:b5:83:ab:39:02:b5:a3:59:81:07:55:
d3:1a:59:b2:20:71:9a:e1:3d:89:37:b7:3f:b9:42:
d1:17:b6:4c:b1:4a:98:cd:8e:fd:da:b9:93:5a:56:
c3:33:88:00:56:99:0f:71:d1:4d:ed:aa:9a:fc:7f:
24:23:52:1b:53:ee:28:fe:dc:1e:b4:2d:b3:64:0f:
09:33:3e:2d:73:af:f6:cd:98:b4:a0:ec:61:92:05:
a8:d2:cb:9d:eb:f0:c5:09:cb:57:f1:81:7a:be:ff:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DB:24:09:46:F3:91:07:0D:44:FF:70:99:39:1A:94:6A:B5:DF:03
X509v3 Authority Key Identifier:
keyid:5F:60:51:87:3B:81:50:6E:25:78:AC:58:B3:26:8F:01:DF:F2:6E:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/X2BRhzuBUG4leKxYsyaPAd_ybsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2BRhzuBUG4leKxYsyaPAd_ybsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91693D7/1878EE0C553C11EB9BCADC70C4F9AE02/0F28A28037CA11EDB8E79257C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:55:06:45:2f:59:bb:33:9c:b1:2b:74:2f:22:b3:25:c9:7f:
20:d9:23:0d:cc:ab:e4:17:2c:f3:2b:08:1e:33:45:3b:ea:b9:
aa:7b:be:5b:fa:77:ff:a1:e4:07:45:43:69:59:01:27:6e:80:
d2:a7:43:88:60:54:4f:b9:b4:32:78:fb:dc:a3:d8:51:d4:d3:
90:e6:1b:04:bd:14:08:3f:44:6c:16:eb:89:88:34:26:03:c3:
9f:d1:f1:dd:46:c2:95:29:5e:f4:13:d3:d4:2c:6a:f8:6d:f9:
21:bb:36:e7:34:07:7b:7b:45:0b:0d:5f:67:15:14:e6:cd:24:
2e:00:fc:9b:cd:96:3a:af:d7:37:9f:6d:ec:35:08:e3:ea:17:
e1:52:83:62:33:82:e7:3a:c9:1c:18:93:ee:1a:9d:dc:04:8a:
03:1c:fd:bd:0d:2b:ad:eb:b1:33:2a:3e:ce:7e:f2:50:6b:9a:
ea:6f:a7:86:14:26:82:bc:4f:45:da:c1:17:6b:07:b8:38:d4:
58:ff:19:a8:ca:d1:2c:2c:21:5d:17:c3:11:ee:11:35:0c:e0:
30:85:70:f7:eb:77:d4:c1:bb:a0:df:f7:60:09:5c:c6:a4:11:
aa:12:18:e2:22:a1:05:1c:99:21:51:a0:ac:81:fa:05:c9:20:
0c:2e:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:19:49 2025 by rpki-client