Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/01103988FB5911EF8B32E613C4F9AE02.roa
File: 01103988FB5911EF8B32E613C4F9AE02.roa (raw, json)
Hash identifier: R1vera/J21wpLzxHOvQ0xtue7DdueGMpTshOHPQT8vM=
Subject key identifier: 4E:0A:A5:39:2F:A9:4A:30:5E:7B:04:59:3B:36:7D:78:E9:3D:01:D3
Certificate issuer: /CN=A91A82F8/serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179
Certificate serial: 04
Authority key identifier: F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/01103988FB5911EF8B32E613C4F9AE02.roa
Signing time: Fri 07 Mar 2025 13:41:52 +0000
ROA not before: Fri 07 Mar 2025 13:41:52 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 135357
IP address blocks: 103.17.116.0/22 maxlen: 22
103.17.116.0/24 maxlen: 24
103.17.117.0/24 maxlen: 24
103.17.118.0/24 maxlen: 24
103.17.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A82F8
Validity
Not Before: Mar 7 13:41:52 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67caf7a0-3792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:cf:8e:e9:29:a6:76:09:ae:b4:01:11:00:
be:d1:96:b0:97:5d:b7:7b:1b:eb:7a:78:9f:3d:06:
f6:3c:d6:58:cc:32:34:b8:9d:d9:fc:ea:d5:70:a4:
0d:64:17:51:2b:7d:cb:2a:e1:37:dd:72:6e:a7:43:
86:b2:85:6e:93:05:01:e9:69:1e:3d:57:18:82:f9:
92:4e:f0:ea:27:91:9f:e5:65:9a:4d:39:42:9e:17:
b9:4c:6f:e0:31:66:b9:9a:f4:4d:35:c0:40:a2:e1:
ff:bc:0d:1e:11:ee:ec:ed:f7:9d:b9:3b:15:bf:99:
4e:f0:70:b4:78:8a:04:7e:b6:5d:a0:ec:4c:26:e8:
e0:18:82:1f:3e:66:66:b1:fd:d6:3d:11:28:46:0e:
82:e7:ee:6d:50:ea:4e:3e:39:32:f6:38:cb:ec:ad:
40:e7:37:88:b9:6a:a4:1c:e8:03:cf:bc:c8:9f:7c:
d8:51:3b:11:86:d2:68:8b:72:39:65:dc:c7:f3:b1:
0c:5f:5f:e6:72:76:36:bc:2d:27:2e:dd:59:46:19:
d4:0b:52:c1:b1:a6:32:db:97:49:e4:5e:c8:a7:fb:
30:d4:d7:00:88:f0:c0:0f:61:50:88:51:d1:63:a9:
eb:ef:8a:1a:a8:37:bb:3a:03:ea:51:e7:b2:32:7b:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:A5:39:2F:A9:4A:30:5E:7B:04:59:3B:36:7D:78:E9:3D:01:D3
X509v3 Authority Key Identifier:
keyid:F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/01103988FB5911EF8B32E613C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.116.0/22
Signature Algorithm: sha256WithRSAEncryption
88:a3:4d:db:23:e8:c8:d2:62:53:05:b3:1d:9f:eb:db:2e:23:
af:bb:ee:d3:45:d6:cf:e0:75:1c:26:01:ea:bc:1d:35:03:72:
3f:3b:70:db:23:2a:81:50:41:5f:4a:bc:d8:e5:bf:75:2f:5b:
a7:a0:a1:0a:1a:ef:fe:b8:41:2f:45:43:5f:b9:8d:0f:b3:6f:
7c:8f:dc:9b:fc:e5:62:2f:15:c2:fa:c8:90:27:6a:d8:f2:bd:
3d:29:60:ee:03:02:05:3e:13:3d:2c:16:3f:97:d3:ed:4d:3f:
20:a4:fe:ee:3b:7b:aa:35:7e:7c:7c:ac:8e:ac:0f:57:35:b9:
ae:a1:31:d1:1f:78:35:3f:22:81:3e:af:ae:5f:00:39:00:90:
89:8c:d8:a2:8c:be:1a:22:c3:30:f3:17:27:8c:97:b0:f7:15:
5b:c7:9d:cf:9f:98:2e:ee:db:b8:b1:8e:07:e7:f4:db:93:ef:
8c:71:a8:73:5e:a0:38:29:5f:2e:1d:7e:22:9f:54:cd:5f:00:
69:8e:13:fe:be:9b:15:11:bf:72:76:7c:3a:e2:5b:2d:e4:ac:
32:01:3f:da:b6:21:52:21:70:0f:1a:84:19:b6:f9:38:6c:d7:
18:45:92:4c:6a:1e:d0:d0:b1:91:6b:57:7e:80:bf:70:37:cc:
db:77:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:55 2025 by rpki-client