Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/FCF0A580B10D11E5894F4D1CC4F9AE02.roa
File: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (raw, json)
Hash identifier: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=
Subject key identifier: F2:DE:CA:BD:2D:65:42:A1:5E:67:F0:BD:29:9F:21:BF:86:14:81:29
Certificate issuer: /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Certificate serial: 23CD
Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/FCF0A580B10D11E5894F4D1CC4F9AE02.roa
Signing time: Mon 24 Mar 2025 16:23:18 +0000
ROA not before: Mon 24 Mar 2025 16:23:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 133611
IP address blocks: 103.26.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9165 (0x23cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917412F
Validity
Not Before: Mar 24 16:23:18 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=67e186f5-a639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:01:4c:fd:09:4f:40:89:2e:f9:9c:bd:09:
b8:e0:56:08:72:ba:3f:fe:ee:26:f2:be:c6:29:13:
0d:69:4e:fc:2b:80:e7:b4:06:8d:83:75:ff:45:27:
12:29:0c:0a:78:22:49:57:17:18:33:e3:b9:70:f9:
3d:c4:fb:27:29:42:33:4c:84:73:b5:22:65:61:97:
9b:cf:f9:04:3f:e7:bd:a5:86:00:b4:13:b6:c4:85:
43:86:fb:53:f2:fb:5b:38:bf:1f:21:be:b0:5a:a6:
3f:6c:31:a6:38:21:16:6e:c6:02:a7:af:1b:53:ec:
cb:0c:f8:8d:91:6d:b9:da:93:04:15:42:4d:91:f9:
09:b0:ef:ae:36:ba:9e:cd:14:06:35:95:fa:88:62:
73:36:dc:7d:dc:3e:47:d9:6f:5e:06:78:4b:40:d6:
61:08:37:bd:bb:e3:de:27:d2:2e:ea:75:ca:7d:f5:
ac:76:e2:fc:33:cc:b1:a8:b2:ee:44:fc:ea:09:57:
c7:65:91:ed:d6:bf:ca:0c:6a:f1:66:43:ed:d1:cc:
7d:34:29:51:21:4b:9e:02:23:0e:df:ed:bb:89:40:
4c:1b:aa:31:b1:4d:ea:2f:72:77:e5:a1:99:23:85:
84:aa:b1:78:61:92:a0:68:bf:71:9d:cc:b4:63:1b:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DE:CA:BD:2D:65:42:A1:5E:67:F0:BD:29:9F:21:BF:86:14:81:29
X509v3 Authority Key Identifier:
keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/FCF0A580B10D11E5894F4D1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a4:76:f2:e8:94:98:18:1d:c4:92:77:ba:08:bb:99:4e:27:
a0:df:89:6d:cc:bd:57:ae:6e:c6:73:2c:b5:fc:39:a7:75:97:
7d:c4:b3:7e:47:de:52:0e:97:d9:f5:02:bf:5d:49:80:87:e5:
ca:33:02:f9:87:4c:39:e3:bb:be:1e:ab:9a:df:54:1a:a8:43:
f1:04:39:3a:20:22:c1:be:68:72:59:b1:68:cb:bc:bd:f8:a9:
f5:e7:9d:39:95:63:e9:ef:bd:b9:68:43:85:11:2e:93:62:c6:
c6:38:27:dc:bb:8e:a8:a1:d4:5b:2b:e4:f3:f9:c5:6f:1b:d8:
4e:71:71:39:d8:10:92:1e:39:96:f8:44:82:96:6f:d2:8c:5d:
e8:cc:27:e3:d7:a3:29:e2:83:90:07:b7:e5:4b:77:ae:98:dd:
47:0a:60:ea:82:ee:9d:03:1f:70:58:a4:98:1b:ce:fe:a9:ed:
01:0c:e9:5c:f6:46:fb:a0:52:5d:9f:1c:b3:24:52:71:f8:ef:
4d:2a:d5:82:55:9f:d9:6f:3f:e1:20:fe:4b:9f:e1:28:25:71:
f9:89:f3:03:3d:22:e1:7a:10:ba:dd:63:40:91:70:34:cc:db:
30:7d:77:bf:f2:dd:75:7c:f6:09:18:cc:f7:63:3b:03:b7:50:
e0:18:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:19:07 2025 by rpki-client