Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa
File: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (raw, json)
Hash identifier: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=
Subject key identifier: 0C:1C:C8:C9:6F:19:DE:3F:55:7B:B1:66:DA:B2:43:5F:0E:90:C0:C8
Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
Certificate serial: 03AD
Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa
Signing time: Fri 21 Mar 2025 00:36:01 +0000
ROA not before: Fri 21 Mar 2025 00:36:01 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 149499
IP address blocks: 103.181.70.0/24 maxlen: 24
103.181.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941 (0x3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919290F
Validity
Not Before: Mar 21 00:36:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67dcb471-1e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:95:a9:20:3e:d9:da:61:4b:4b:b7:80:5c:21:
e2:45:b2:1c:e8:18:ef:68:1a:78:73:fb:89:8d:4a:
75:e3:b3:93:48:2e:86:97:a6:9c:4e:c2:2a:d7:76:
04:f6:90:ce:c2:86:45:34:0a:08:20:3a:6f:de:2d:
7f:34:87:10:e1:35:a6:cf:c3:df:b6:72:ba:fc:8d:
be:cf:b4:33:c0:d1:40:b4:2b:7f:8c:61:2a:87:93:
f2:48:6a:91:38:ce:7e:ef:2c:4d:70:d6:97:ec:4d:
d1:15:15:ca:04:09:72:00:bd:5f:30:58:52:fe:81:
e0:7d:14:b7:b1:7c:9b:7d:bc:47:fc:cb:89:be:e0:
82:4a:97:07:95:da:a3:10:8d:52:b9:d1:e3:8b:b2:
17:6c:6b:49:10:74:df:9f:69:87:f0:bc:f9:dc:24:
24:fe:bc:d9:b7:17:03:32:4f:2d:73:00:9f:9e:e7:
e4:a3:b9:a0:da:e8:fc:75:d6:ed:d2:e2:2f:d0:01:
bd:a5:b9:7b:86:5f:1e:a6:85:d7:e7:6c:b6:2c:8c:
ff:4c:f8:29:4c:df:6a:43:64:d0:f5:87:c2:c1:1f:
65:5a:da:28:1d:8d:5c:30:7e:09:f1:e9:76:93:36:
6c:8f:76:29:5d:a3:ea:27:b0:65:e6:40:41:53:ff:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1C:C8:C9:6F:19:DE:3F:55:7B:B1:66:DA:B2:43:5F:0E:90:C0:C8
X509v3 Authority Key Identifier:
keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/D3C1BBD687DF11EC9FAA242CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.70.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:b9:a2:7d:ea:d0:75:f0:27:4e:3b:71:3d:76:a1:d9:3e:b3:
ac:f9:66:61:20:4d:a0:74:2b:c9:62:a4:67:7f:5a:26:ce:1c:
13:8a:63:f0:c1:77:d7:03:c8:88:b2:09:a9:87:23:16:99:a2:
03:ad:1d:af:65:2a:ab:35:4c:7c:f6:cc:6c:a0:1c:fa:32:0e:
ad:61:76:c2:83:7a:1e:92:2f:c0:f8:7a:2d:53:03:0d:35:e8:
ef:61:6c:b3:26:d0:35:4b:68:61:0b:50:a5:37:65:74:bb:48:
32:2e:f0:c3:f9:27:fd:da:d8:ea:1d:62:3d:9c:94:7f:d4:40:
51:dc:4a:72:b1:c6:eb:6a:6b:7c:39:e6:5d:64:25:f8:04:bf:
fb:b5:4a:68:b5:71:3f:f2:9c:9c:eb:14:cb:b2:c8:39:3f:ff:
05:06:3d:37:7f:61:13:63:31:71:67:98:ed:3a:9a:94:07:88:
81:34:32:f5:9e:c3:f4:f8:14:68:10:da:ff:cb:e1:e1:44:47:
b1:47:8f:71:06:dc:95:e6:4d:64:8d:6e:64:63:83:02:8c:57:
a5:ee:a4:9f:97:95:41:6d:b8:24:11:72:1b:51:61:f4:86:80:
b2:b3:fd:25:79:84:01:33:d0:c5:9d:48:1b:12:3d:12:1b:1c:
1d:2f:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:36:11 2025 by rpki-client