Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/FCF99042301011EFBC350682C4F9AE02.roa
File: FCF99042301011EFBC350682C4F9AE02.roa (raw, json)
Hash identifier: w6V5zVhSWP7KHaVRuECmZWSRiBZBcxO4NF/bu4dDU1U=
Subject key identifier: 9A:6D:72:EE:5A:15:71:0D:F9:EF:00:98:6B:37:61:A4:8D:0B:E0:5C
Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial: D3
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/FCF99042301011EFBC350682C4F9AE02.roa
Signing time: Fri 28 Mar 2025 20:27:33 +0000
ROA not before: Fri 28 Mar 2025 20:27:33 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 53813
IP address blocks: 167.103.110.0/24 maxlen: 24
167.103.111.0/24 maxlen: 24
167.103.118.0/23 maxlen: 24
167.103.122.0/23 maxlen: 24
167.103.124.0/23 maxlen: 24
167.103.160.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169
Validity
Not Before: Mar 28 20:27:33 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67e70634-e7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:f1:32:0a:02:6d:12:bb:81:69:30:64:4c:
68:02:e4:12:ab:2c:99:67:6e:ff:f4:14:64:ba:fa:
38:f4:26:a0:e5:a7:f4:5e:45:84:a0:10:5a:ef:6a:
03:fe:dc:bd:78:62:3d:0b:1a:f4:22:0d:d5:79:7d:
1f:98:77:32:b8:dd:6f:04:c3:10:82:b6:50:a1:6e:
af:50:7b:6b:1f:91:c9:ed:f1:4d:52:4f:61:55:06:
43:aa:d9:95:49:a8:57:7e:ef:ad:8d:34:83:12:14:
d2:47:b9:e7:e5:12:e0:45:5f:6c:5c:51:08:a5:96:
eb:33:c7:57:93:97:77:b0:56:42:67:e9:e1:2a:6f:
23:b9:be:7b:2d:24:d7:b8:14:0d:66:f5:10:34:d3:
da:04:85:f8:a9:b3:ac:a3:09:16:16:b3:d7:94:8a:
16:f7:a9:c8:a7:a3:90:c0:5b:c5:08:e9:46:e4:be:
b0:b5:89:ce:7c:89:ab:97:9c:57:0e:c8:ed:1d:93:
2c:a3:51:87:b9:7e:23:13:8c:cb:33:56:d6:fc:bc:
9a:04:94:23:eb:55:9a:a2:6e:fb:e8:78:61:4c:55:
4c:56:ad:28:11:61:3c:1f:5e:f1:1f:1e:88:04:fe:
d5:06:62:c0:43:66:67:1a:f8:27:63:0e:59:a4:46:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:72:EE:5A:15:71:0D:F9:EF:00:98:6B:37:61:A4:8D:0B:E0:5C
X509v3 Authority Key Identifier:
keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/FCF99042301011EFBC350682C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.103.110.0/23
167.103.118.0/23
167.103.122.0-167.103.125.255
167.103.160.0/23
Signature Algorithm: sha256WithRSAEncryption
72:4c:d4:69:59:08:00:79:48:69:c1:ea:78:e5:42:f8:53:e0:
ce:12:b0:23:99:40:cc:9b:f9:b4:45:90:68:9f:ce:39:e9:38:
3a:88:54:11:4f:47:51:5d:0a:2b:f8:1d:37:3b:1c:db:f3:b4:
17:2b:ca:16:b4:a4:77:ac:4a:a5:6d:cf:80:35:ae:94:88:f5:
30:c2:f3:54:b6:85:fc:d6:94:a4:ac:6c:89:71:a4:3e:43:b7:
76:28:1c:16:2b:2b:b0:af:eb:31:7e:e6:49:80:22:5d:96:a7:
50:5d:e5:82:5b:5c:8b:47:dd:f4:80:c5:5b:f6:4a:52:ea:1c:
2d:6d:f8:7f:a3:68:ca:64:f3:de:e7:5e:d9:f9:1b:c6:78:00:
a4:82:f0:31:fe:82:32:97:c6:4a:d0:1d:e4:c1:e1:fe:d5:cc:
2a:5c:c9:9b:d3:72:03:f1:6b:1d:ee:b8:44:1e:28:5c:5a:2e:
29:8b:fa:7f:98:a9:9e:09:7a:64:d7:6d:b0:45:d5:e3:9e:f7:
66:25:e1:99:61:00:be:24:45:56:f4:92:03:38:78:c8:c6:ee:
b3:95:35:41:1b:b7:4d:f6:f5:a7:18:3f:07:8d:72:97:5b:15:
2c:42:db:a0:13:6f:1f:0d:0f:06:a1:13:db:8c:0a:44:0c:99:
4b:b2:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:41:55 2025 by rpki-client