Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/FF9C9380E84D11EFBDF0C033C4F9AE02.roa
File: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (raw, json)
Hash identifier: kvvZHJ+rBQM95o3S977WvIAJHOTHGETq3gKpIBP9p3k=
Subject key identifier: 47:0B:0D:7D:0D:82:03:C4:91:2F:BA:F7:B0:75:A4:58:64:83:BD:A0
Certificate issuer: /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Certificate serial: 10
Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/FF9C9380E84D11EFBDF0C033C4F9AE02.roa
Signing time: Thu 27 Feb 2025 08:54:14 +0000
ROA not before: Thu 27 Feb 2025 08:54:14 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132835
IP address blocks: 103.250.60.0/23 maxlen: 23
103.250.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5208
Validity
Not Before: Feb 27 08:54:14 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67c02835-9e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:00:d4:f9:be:75:2f:d1:e1:a9:32:ac:9a:
0d:f3:55:41:9b:e7:a7:4e:3a:e6:de:9c:44:17:3f:
73:da:ef:03:59:37:43:9b:c9:77:6f:b2:c5:dd:bc:
8d:c9:ed:44:e5:c7:a1:54:a8:b8:e5:7e:2c:8b:83:
6a:2d:85:93:c0:ad:0f:0c:46:c5:d0:d8:90:16:22:
3e:67:10:78:6f:52:e6:53:e6:70:ef:78:68:27:11:
e4:5b:e9:8a:1d:58:39:f0:a0:9f:99:47:37:24:e6:
68:3c:3d:8d:8e:2a:36:8e:1c:ca:35:ea:6e:5f:6f:
9b:a7:be:fd:8f:80:8e:3d:82:6a:5a:25:01:78:c9:
c6:48:8a:19:4f:1f:00:d1:5c:ef:90:fe:45:f4:bd:
31:cc:b9:fd:90:1d:60:62:38:51:ea:3c:56:bb:30:
32:71:f6:36:f7:cf:ba:27:08:44:9e:b8:f3:ab:0e:
99:6b:32:05:f2:1a:7c:95:ae:c2:4e:84:b3:37:30:
6b:5c:d2:72:eb:b9:1f:ef:df:1f:7e:d2:54:08:9d:
7a:ae:da:f1:a2:a3:ae:bb:6f:0b:c4:7d:a7:14:90:
ae:9a:ed:66:22:a1:e0:ee:82:a2:3c:8a:bc:46:6e:
0a:f5:33:a9:0c:b2:73:2d:eb:b8:76:a5:a2:c8:66:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0B:0D:7D:0D:82:03:C4:91:2F:BA:F7:B0:75:A4:58:64:83:BD:A0
X509v3 Authority Key Identifier:
keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/FF9C9380E84D11EFBDF0C033C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.250.60.0/23
Signature Algorithm: sha256WithRSAEncryption
62:8b:73:0e:95:e8:46:c4:de:33:0a:93:c4:6d:a3:95:6a:e0:
63:1b:78:25:41:fd:89:8d:45:0f:42:66:9f:e4:cc:4e:7b:eb:
58:27:38:71:b2:f0:a8:3a:68:55:c9:8c:3e:94:bf:c1:5f:8f:
6c:70:92:35:a4:2e:9d:c9:e4:f4:13:16:54:e9:51:62:ba:04:
8e:a2:25:2b:47:20:d2:b4:6b:33:10:6f:31:75:96:72:a6:95:
40:1f:aa:db:6a:73:96:28:27:5d:d9:90:61:1e:f9:0b:6b:fa:
4a:80:21:b2:39:a2:9c:77:b6:24:9f:0a:03:d9:3e:07:ce:eb:
15:67:d8:cd:ed:64:45:25:44:83:40:3f:6c:ef:87:61:f4:21:
18:3b:56:b1:44:9f:5a:6e:c0:6a:71:b7:f4:f8:2f:7d:d8:37:
a8:38:bb:7c:f5:c7:3f:5c:fb:5d:69:4b:4c:c1:56:db:92:0e:
05:d5:53:a9:b1:dc:f9:59:59:5f:19:0c:d5:b2:49:70:24:a0:
7a:0b:aa:75:55:65:51:3b:70:b8:6c:b0:98:37:b7:02:76:4e:
e0:27:7c:e7:62:0b:b5:42:6c:3b:0d:5b:1b:e7:7c:9e:43:3b:
65:e3:00:0a:e6:61:26:11:d2:ea:43:7a:be:20:59:32:4a:cb:
8e:a0:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:19:32 2025 by rpki-client