Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/FB160E5C81D511EEAE1FCF11C4F9AE02.roa
File: FB160E5C81D511EEAE1FCF11C4F9AE02.roa (raw, json)
Hash identifier: Y1WmvqsPlnX94a53nz3O+0Y13t6x8H2WENWhbHMcMHM=
Subject key identifier: D4:89:38:29:A5:C9:81:4F:B5:03:43:F2:2E:7C:03:B2:64:B2:1E:18
Certificate issuer: /CN=A91AACDB/serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C
Certificate serial: EB
Authority key identifier: B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/FB160E5C81D511EEAE1FCF11C4F9AE02.roa
Signing time: Fri 27 Dec 2024 03:57:37 +0000
ROA not before: Fri 27 Dec 2024 03:57:37 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150335
IP address blocks: 103.104.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AACDB
Validity
Not Before: Dec 27 03:57:37 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676e25b0-fbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:4f:b3:8b:a6:05:32:aa:2f:3a:c3:cf:b5:
66:5f:a3:cb:7c:75:64:8d:93:d9:94:05:50:69:02:
22:56:55:7e:a5:97:f2:5f:88:88:fd:8f:d4:9b:71:
94:83:7c:5b:10:bd:73:14:61:18:3c:f0:10:66:72:
cd:44:61:db:35:02:0f:6d:12:72:be:dc:b7:d3:1b:
a8:d4:98:0f:a2:a4:40:ba:97:27:fd:6b:16:c8:1b:
85:01:4d:63:a4:57:ed:29:48:18:82:d7:53:b4:b3:
5a:91:c4:63:b0:67:25:8c:01:91:d6:dc:b2:71:9f:
14:51:3b:40:a9:02:d8:e6:8a:99:65:97:7d:86:b8:
3c:35:3a:03:b1:0b:ad:7b:10:24:d4:b8:e0:79:6a:
de:c1:64:1e:34:49:92:51:18:96:49:a3:a5:e5:79:
5d:0c:8b:5a:49:ac:7c:c2:02:80:ab:d1:9f:3b:a0:
7c:5d:6c:33:12:1e:f6:3f:8d:a0:3b:cb:d7:35:1b:
f2:02:70:b1:69:53:61:6c:50:3a:9e:e7:83:a5:2e:
f4:6b:01:3e:f0:cc:e9:31:a1:55:1d:ea:59:cc:42:
b4:4d:43:88:5a:6f:88:9d:2a:da:49:bf:1c:a8:ed:
f0:3c:d1:96:dc:46:28:61:55:06:2c:93:c4:78:e6:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:89:38:29:A5:C9:81:4F:B5:03:43:F2:2E:7C:03:B2:64:B2:1E:18
X509v3 Authority Key Identifier:
keyid:B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/FB160E5C81D511EEAE1FCF11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:0d:4b:f8:41:75:85:6e:59:49:71:62:a1:92:b8:17:f1:8c:
7c:fb:11:a6:67:9c:f4:30:7a:1f:05:05:55:9e:51:ce:6a:81:
f8:5b:46:68:51:68:3d:fd:e6:c4:e6:93:c9:f5:cb:0b:91:62:
98:83:17:08:7d:79:dd:bd:bc:bc:45:26:33:44:7f:75:d2:ec:
49:2a:7a:64:a2:9d:08:8b:01:9e:0b:3a:12:8f:5c:4e:3f:d4:
fe:a3:10:f6:99:f6:de:92:6b:0c:8e:9b:d2:9b:f5:cd:1b:a8:
aa:21:b8:44:0d:1f:9c:88:d6:bb:12:5e:26:ff:cf:b2:23:a8:
7d:fb:de:25:71:1a:b5:3e:b3:03:a4:82:31:2d:76:ee:eb:dd:
6f:3c:10:94:57:d8:4c:af:e6:08:96:6e:de:1c:1f:bc:e4:33:
5f:88:4a:93:48:ed:25:0c:65:22:75:ae:1a:52:a1:ed:42:6c:
ab:b2:58:f5:09:5d:fc:fe:8e:d1:e8:83:7b:0e:19:a5:28:e4:
a0:4c:78:08:a1:57:d9:ac:cf:c0:63:44:ad:a3:92:10:da:9d:
c4:d9:41:e7:95:83:97:2a:c2:c5:df:49:cf:9d:30:5e:e2:db:
6d:7d:27:e3:54:a4:62:d6:2f:a5:9b:e5:d3:46:8e:08:30:c4:
3f:2a:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:02:57 2025 by rpki-client