Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/1F642722FE4811EF9909DE6BC4F9AE02.roa
File: 1F642722FE4811EF9909DE6BC4F9AE02.roa (raw, json)
Hash identifier: fjRhLXJJ0RIRM6lvLSAGF3CQKnVhdWMlfTQ4/IFRRV8=
Subject key identifier: D5:6C:F0:C8:64:03:EB:D8:66:E9:45:EC:0A:DF:41:41:F1:C5:E6:A5
Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
Certificate serial: 05FB
Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/1F642722FE4811EF9909DE6BC4F9AE02.roa
Signing time: Tue 11 Mar 2025 07:11:59 +0000
ROA not before: Tue 11 Mar 2025 07:11:59 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 150675
IP address blocks: 103.249.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1531 (0x5fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A46B0
Validity
Not Before: Mar 11 07:11:59 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67cfe23f-6478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:89:b4:cb:6b:cb:47:13:52:b6:03:f3:a4:
c0:c7:16:1c:36:bb:e0:61:a3:b1:b2:74:3d:18:88:
ee:6a:75:11:6f:c6:8a:08:dd:6a:68:5a:b6:9f:d3:
51:2d:a9:7c:a8:3f:82:29:43:0d:81:bd:fa:59:ee:
ee:c9:bb:85:15:7c:d8:c6:e1:aa:f8:97:d2:1d:3a:
b7:89:95:a5:4b:61:d0:7a:4c:37:fa:5d:c0:60:fc:
ec:02:53:21:27:8f:71:fb:9b:cb:9f:29:e9:d2:39:
cd:c5:97:86:c6:e0:fa:66:9e:d5:3f:53:e4:c4:49:
12:aa:e1:cc:68:13:ab:59:7e:de:d8:b3:dc:5a:2f:
60:60:e9:d4:8f:fd:6d:d5:d2:26:86:f0:02:a3:f2:
95:63:b2:ba:bb:2a:d1:2a:93:49:01:2f:db:3d:2e:
ef:28:ed:ed:83:0e:f0:60:bb:f0:96:5f:7c:41:df:
8f:fd:58:ae:09:74:88:fd:14:c5:2c:0f:17:98:3e:
eb:4d:54:d7:b7:cb:fd:2a:a4:09:d5:5c:de:42:e6:
ef:74:2a:7a:63:0a:9f:13:6c:d2:1a:5e:18:10:61:
e5:bc:ff:4a:ad:3a:d2:56:c7:cd:f3:c2:8e:11:53:
e8:b1:7c:21:82:15:15:d1:28:79:a7:3d:08:db:a3:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6C:F0:C8:64:03:EB:D8:66:E9:45:EC:0A:DF:41:41:F1:C5:E6:A5
X509v3 Authority Key Identifier:
keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/1F642722FE4811EF9909DE6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.249.215.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a1:79:11:d9:63:e5:30:49:f9:27:a4:a2:9a:75:ed:c9:02:
3b:45:8c:b8:d0:8e:95:ae:99:6d:9b:0d:1a:9a:31:c6:55:29:
9b:c2:0f:b2:fd:d7:2c:d5:2e:47:4f:f9:92:d2:07:93:db:9e:
c5:54:73:8e:d1:f1:b1:2c:f1:fd:9e:4a:6f:54:96:06:2b:98:
5a:df:6b:c2:47:d4:21:56:bc:78:44:28:b2:61:24:1a:3c:49:
04:a3:87:8a:96:75:f9:f4:09:c5:53:02:df:19:ba:43:40:a9:
c2:ce:86:53:fa:ba:5f:25:00:28:cf:e2:93:c9:ac:2f:32:8b:
46:22:c0:54:c1:a6:71:1a:66:b8:e1:14:87:6b:86:a2:e5:30:
36:40:c7:2e:ef:38:35:3e:d0:14:87:40:61:32:a3:a6:34:0c:
a0:57:57:2b:ac:e6:35:f2:05:e3:6b:11:7b:a9:ae:a2:9d:0d:
cb:3d:b1:24:57:cf:8c:fd:b7:9c:bb:f3:ec:9c:d5:fb:0c:07:
f2:74:c9:dd:b0:ad:dd:f3:f0:34:2d:95:0a:70:0f:aa:75:8c:
66:0b:ea:d2:5a:35:5b:a3:18:cc:4a:f4:0e:0e:3b:19:62:ee:
d8:77:c6:84:33:3b:ba:30:8e:6e:fa:0b:4c:0d:1e:a7:08:2d:
f7:9b:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:35 2025 by rpki-client