Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/AD8C3CF46FC111E9B6D55F15C4F9AE02.roa
File: AD8C3CF46FC111E9B6D55F15C4F9AE02.roa (raw, json)
Hash identifier: UGdrD+Fj3OGme/NPTMZlIOifFIHxe9Nr5mv/WePp33Q=
Subject key identifier: 4D:71:B0:6C:61:8A:A8:76:21:56:1C:E3:A1:70:75:45:CA:54:01:40
Certificate issuer: /CN=A91A489D/serialNumber=1F281EFA405C8BBB3D9DF8D581D8C5831AA19AE4
Certificate serial: 0F0A
Authority key identifier: 1F:28:1E:FA:40:5C:8B:BB:3D:9D:F8:D5:81:D8:C5:83:1A:A1:9A:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hyge-kBci7s9nfjVgdjFgxqhmuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/AD8C3CF46FC111E9B6D55F15C4F9AE02.roa
Signing time: Thu 30 Jan 2025 18:06:17 +0000
ROA not before: Thu 30 Jan 2025 18:06:17 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 136783
IP address blocks: 103.80.36.0/24 maxlen: 24
103.80.37.0/24 maxlen: 24
103.80.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3850 (0xf0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A489D
Validity
Not Before: Jan 30 18:06:17 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679bbf98-a406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:8b:60:01:e5:0d:84:e0:74:c0:db:c2:23:
6a:27:ef:a6:b8:97:2a:87:b6:bc:3a:b6:86:d3:16:
54:c5:1f:14:41:b9:1f:7e:1d:7f:16:ae:80:8b:35:
04:fd:cb:46:9a:98:e1:d3:fe:54:80:c6:b8:4d:e9:
95:4c:17:36:df:59:08:b4:c4:73:44:11:99:1a:40:
dc:71:7a:8d:95:bd:59:09:de:67:c9:db:02:8f:69:
d1:cf:18:2e:d1:cf:ce:3f:40:31:18:d6:a0:cd:41:
79:ac:1d:0c:e1:b5:86:a3:38:27:87:8d:04:3d:86:
df:fc:dd:42:86:6c:bb:ae:a8:cd:28:fd:4c:c1:53:
26:47:46:19:96:ee:25:f9:52:e1:0c:0a:60:b1:1f:
f5:61:58:6f:6a:1c:ff:80:ba:b1:d3:b0:9a:62:9d:
fb:0c:f2:aa:e7:37:84:13:a6:92:1e:a3:5a:ab:36:
b2:79:4d:aa:9f:08:a3:59:df:27:56:eb:52:03:0f:
f6:ec:f9:e6:da:53:a1:fa:52:79:94:3d:83:51:c0:
41:e7:24:f9:a9:6d:7f:a8:64:e0:a6:47:89:01:11:
97:de:bf:f3:9a:6f:73:b7:d3:1d:ea:84:16:b9:bd:
e4:96:a6:b3:8a:b8:c1:26:6a:69:61:53:d1:57:da:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:71:B0:6C:61:8A:A8:76:21:56:1C:E3:A1:70:75:45:CA:54:01:40
X509v3 Authority Key Identifier:
keyid:1F:28:1E:FA:40:5C:8B:BB:3D:9D:F8:D5:81:D8:C5:83:1A:A1:9A:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/Hyge-kBci7s9nfjVgdjFgxqhmuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hyge-kBci7s9nfjVgdjFgxqhmuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A489D/200D3E6A6FC011E9A07D1B12C4F9AE02/AD8C3CF46FC111E9B6D55F15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.36.0-103.80.38.255
Signature Algorithm: sha256WithRSAEncryption
af:6f:1d:23:03:46:f9:d5:ef:f8:bb:ff:74:eb:8f:56:87:ec:
67:2a:f9:99:a3:93:ae:06:06:9c:8d:3f:6a:73:a9:94:55:12:
c1:51:c9:bd:a2:ae:81:97:0b:64:d8:a9:14:4d:fd:97:7b:b3:
50:45:1b:e8:ba:1a:4f:82:67:aa:31:1f:f7:6f:1d:89:67:c2:
18:5b:e2:05:59:19:b2:f4:31:03:c0:04:f2:8e:6e:57:44:a7:
1a:75:8e:a3:2f:f7:bd:8f:77:02:cc:bb:ef:49:25:4d:c9:ab:
0d:0f:83:00:c1:3c:a1:20:b5:05:35:24:0a:46:78:19:2b:de:
d9:55:bd:f3:88:cb:bb:9e:07:b1:c8:94:63:53:0f:f9:b5:fc:
1d:ec:92:3c:02:b9:e7:7a:17:3a:90:b4:04:6e:58:39:1a:0a:
83:e0:2b:0f:92:6f:e8:3a:11:c2:ef:c4:ae:71:39:a4:16:2b:
5a:8b:26:77:82:b7:aa:bf:a6:89:76:41:d2:74:5d:e1:c9:a6:
4b:60:31:73:f3:73:e9:5e:c8:b0:bb:74:32:b4:3c:0a:e0:51:
e1:67:62:e4:ed:59:e1:72:5d:fa:1a:b6:ab:73:a0:dc:10:91:
67:53:cc:5c:95:e2:dc:8b:c9:41:e5:eb:d9:62:d4:2d:41:fc:
b2:c2:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:03:31 2025 by rpki-client