Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/70CB2CA80B4D11EA9667AC1FC4F9AE02.roa
File: 70CB2CA80B4D11EA9667AC1FC4F9AE02.roa (raw, json)
Hash identifier: yfQXawRTireCTQRb7xZfapGsbueAp0wxnbETVcNX62M=
Subject key identifier: E6:F5:F6:54:30:C1:52:92:C5:05:0B:2E:03:6C:2A:37:9C:AE:FB:3B
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 0F94
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/70CB2CA80B4D11EA9667AC1FC4F9AE02.roa
Signing time: Fri 28 Feb 2025 19:30:25 +0000
ROA not before: Fri 28 Feb 2025 19:30:25 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 7786
IP address blocks: 103.208.92.0/24 maxlen: 24
103.208.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3988 (0xf94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA
Validity
Not Before: Feb 28 19:30:25 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c20ed1-a149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:8b:5b:23:d8:b0:5f:07:28:9d:7a:25:77:
ed:e8:eb:e1:ab:5a:b1:85:10:b8:87:19:07:fa:1f:
22:41:26:a4:67:b3:e5:73:f7:88:6e:7f:3f:92:79:
1f:c3:7c:2d:2b:24:e8:6a:52:e6:2e:e9:87:11:96:
00:d9:4d:ce:ed:17:59:b2:5a:b9:ee:e6:d5:54:ae:
bd:40:03:9e:7b:9f:3e:34:dc:e8:78:6c:fc:f1:7f:
43:90:9d:a8:e7:67:1e:d0:12:10:9d:fb:9f:5f:f3:
32:83:0d:13:f9:e0:c8:68:87:fd:a6:cc:af:ce:c6:
60:9e:0a:41:19:05:6d:e8:19:06:7d:7c:95:ef:1d:
28:71:19:af:63:24:02:33:ba:c3:4b:c1:c1:f5:73:
5f:e3:46:48:43:d7:11:28:3c:db:a1:3c:1b:4b:e9:
9d:43:f4:7a:11:3b:1f:36:cd:2f:31:46:8a:4d:d7:
0c:a6:98:7a:34:0b:74:48:df:cc:78:d2:e4:cd:07:
8b:11:48:06:42:1c:70:28:c5:c9:03:6a:58:cb:56:
b6:36:22:ee:d5:06:80:71:64:cb:2b:7c:58:bf:1b:
b8:10:5e:42:0a:cb:01:72:b5:e8:6a:78:39:2d:83:
e5:89:94:c1:8b:07:d2:d3:4f:cd:d9:da:d5:6b:a6:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F5:F6:54:30:C1:52:92:C5:05:0B:2E:03:6C:2A:37:9C:AE:FB:3B
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/70CB2CA80B4D11EA9667AC1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.208.92.0/23
Signature Algorithm: sha256WithRSAEncryption
91:27:ba:ba:52:3c:c6:f6:96:ce:b3:20:84:18:02:9e:a8:16:
2b:be:99:30:cc:fd:b7:8f:b4:fb:42:e6:02:20:7e:1f:2c:0c:
a1:2c:84:2d:45:db:4e:1e:81:6a:17:18:01:38:94:7b:74:8c:
41:0b:fe:df:18:0e:02:d7:e1:9e:78:a7:9a:65:58:66:f8:0c:
93:e9:b7:48:ff:3c:ff:d2:d2:20:c2:55:21:31:43:50:ff:a4:
fc:da:30:6b:f0:c8:37:95:bb:09:5c:ab:32:41:98:70:0a:d5:
93:94:4b:5e:3f:8f:54:28:f3:e5:d5:68:61:24:d5:06:19:ca:
13:b2:dd:b2:04:46:8f:74:f0:0e:6b:dd:07:e7:6b:32:9c:19:
70:7a:a5:2b:dc:df:77:5f:00:4a:96:44:86:b9:07:dd:49:03:
57:c7:b3:d0:a5:5d:43:dd:e5:c0:a9:1e:f3:4c:48:cd:7c:ff:
3b:79:ae:1f:0e:a0:82:41:17:44:88:34:72:8f:1e:a1:9b:96:
46:ad:0d:e7:fe:dc:1c:b9:5b:36:ae:eb:7f:96:1b:83:02:b3:
c2:59:35:5e:27:47:d2:1a:81:05:dc:c3:04:0f:63:6c:e3:6a:
c8:3c:13:da:f5:6c:1e:15:1d:23:b4:7b:5f:ce:04:30:b7:99:
40:17:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:02:19 2025 by rpki-client