Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/369F08805B9B11EFA3A8CD42C4F9AE02.roa
File: 369F08805B9B11EFA3A8CD42C4F9AE02.roa (raw, json)
Hash identifier: PHdU3YbsBVnKyiJBLqMyf65QtChsTtupcMmQjvSYsFQ=
Subject key identifier: 08:ED:C0:68:0C:C8:97:B8:A8:86:6D:47:3A:8B:09:F1:52:8E:A2:43
Certificate issuer: /CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6
Certificate serial: 53
Authority key identifier: 26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/369F08805B9B11EFA3A8CD42C4F9AE02.roa
Signing time: Wed 15 Jan 2025 05:40:17 +0000
ROA not before: Wed 15 Jan 2025 05:40:17 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.21.8.0/22 maxlen: 22
111.92.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1FF1
Validity
Not Before: Jan 15 05:40:17 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67874a41-0145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:3d:ed:a0:b4:fd:8e:f3:6d:83:aa:bb:3c:
8e:82:1e:35:18:98:f2:15:17:0d:26:18:79:b1:b9:
fe:a8:9e:ec:54:79:85:01:d4:d9:cd:42:87:f9:b4:
0f:79:37:83:0b:7e:a3:11:a8:41:f7:a4:5d:3b:87:
02:c1:39:67:9a:53:c1:ce:16:18:90:3c:77:d1:2f:
bf:7f:cf:5d:00:9a:b6:49:27:9d:1b:1e:96:25:1c:
d4:f6:19:dd:81:fb:3b:81:05:28:60:ea:6c:56:30:
36:4b:d7:41:b1:1e:d0:e6:b7:cf:b0:02:67:2e:cb:
6e:42:d3:ec:23:24:70:ec:d5:53:19:f0:a5:33:7d:
98:90:46:1f:af:d3:dc:ad:2e:e7:94:44:de:6e:bd:
45:53:82:c7:e9:03:f2:8b:a6:83:cd:11:b0:a8:7d:
fc:ae:7d:5f:72:1c:a3:0a:c3:e9:36:b7:c2:18:dd:
96:55:87:91:9b:31:48:8d:90:da:90:db:56:62:ef:
d7:b9:b8:c6:00:b3:f5:c5:74:3a:bb:10:5c:28:1e:
00:a0:c7:91:d1:fc:7e:25:f0:1c:59:9a:da:fe:05:
6d:c6:11:ae:1a:bd:47:8f:65:6d:47:bc:5c:4f:61:
dd:5e:15:34:66:8b:0e:a1:9f:5b:11:16:7b:4c:aa:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:ED:C0:68:0C:C8:97:B8:A8:86:6D:47:3A:8B:09:F1:52:8E:A2:43
X509v3 Authority Key Identifier:
keyid:26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/369F08805B9B11EFA3A8CD42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.8.0/22
111.92.184.0/22
Signature Algorithm: sha256WithRSAEncryption
42:05:40:66:69:6e:74:39:c1:bb:c3:6f:5b:d5:3e:8c:04:0d:
0f:e5:bb:42:7e:a2:49:41:0b:25:aa:b1:33:43:db:0d:56:20:
9e:da:1a:35:1b:17:9b:74:7d:d1:5e:f7:44:5e:ff:52:e4:1b:
c0:2e:71:dc:5f:5c:92:d1:fb:8e:5b:18:ee:e7:9c:76:b1:81:
94:05:03:eb:92:65:b2:7a:ae:39:71:fb:93:dc:98:67:83:ac:
fb:c9:b6:ea:e8:d8:d9:29:3d:a9:d5:b1:81:ef:d5:6d:26:d4:
78:cb:f1:b7:47:3f:a7:ca:59:c6:f4:48:da:38:3b:a0:f8:cb:
9c:54:0a:d2:55:ef:b3:13:32:54:0c:92:c1:26:b4:cf:5c:b3:
24:9a:3e:6e:6f:cb:66:73:e6:c6:a4:47:65:fb:47:45:fc:01:
9d:24:99:bb:76:3d:75:a5:10:1f:00:e6:ab:99:f1:68:1a:ce:
61:ee:fe:2b:9c:a0:57:ad:c4:22:6a:c4:92:f1:15:da:62:ae:
9a:3b:f4:ab:95:12:96:a8:7e:ab:c2:9a:05:c2:e0:bd:7c:1e:
5d:91:df:6d:63:b1:4a:91:88:38:8b:f0:2d:7f:46:f7:6e:a9:
39:59:21:4b:d9:d7:ef:9c:d3:8f:73:4c:bf:5e:0d:fc:b0:7d:
ee:5a:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:57 2025 by rpki-client