Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/7E50DB58DE1E11EF96BAF829C4F9AE02.roa
File: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (raw, json)
Hash identifier: /ycT0LeM2B6SfJOIcutt73CO4dhLu842cRCTArO5hco=
Subject key identifier: 6C:8B:26:05:7E:47:FD:CA:BE:CA:3D:9E:12:83:87:52:F9:0D:6E:F8
Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15
Certificate serial: 3457
Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/7E50DB58DE1E11EF96BAF829C4F9AE02.roa
Signing time: Wed 29 Jan 2025 08:53:22 +0000
ROA not before: Wed 29 Jan 2025 08:53:22 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 153397
IP address blocks: 103.80.41.0/24 maxlen: 24
103.80.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13399 (0x3457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD8CB
Validity
Not Before: Jan 29 08:53:22 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6799ec82-35ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:ec:f3:c6:a8:d5:ee:a9:64:f0:67:41:4e:
b7:91:94:33:c5:92:a3:2c:ac:4a:29:4d:be:22:e2:
c0:18:19:39:7f:00:86:fc:36:62:28:6a:5f:87:8f:
4b:02:58:3a:5c:ac:b1:57:0f:cf:aa:1f:c9:3c:b5:
57:c1:ec:46:9d:e7:e8:54:2f:4e:d1:6b:c1:a0:06:
61:f6:5b:c3:06:4d:fd:6d:ab:27:b7:42:08:ca:fe:
71:9b:7a:dc:45:f3:c2:86:c4:ea:22:f7:1f:c4:90:
61:e1:6c:f8:7d:f2:fb:93:fe:0f:17:a5:9e:c5:3c:
a3:fb:67:dd:d8:c1:92:02:4c:2c:e6:fd:e9:e9:da:
d9:96:19:c0:45:f3:b3:a7:91:40:71:d2:bd:68:77:
dc:56:24:95:7c:15:6f:48:7b:19:a3:16:fa:55:55:
0f:3b:5e:e9:b0:4a:9b:5a:d1:b3:68:c4:36:f9:64:
e5:00:06:4f:02:6e:6f:cc:5c:de:71:86:06:90:dd:
aa:b7:be:4c:f9:9e:bf:4f:b9:77:b3:84:1a:95:ea:
b9:ab:b3:f9:a4:72:c8:45:6a:70:25:f9:18:87:71:
92:da:68:9d:ff:cd:4e:37:1c:a3:45:7a:40:54:dd:
dd:ac:16:41:71:de:7c:7f:82:6f:50:88:f2:e8:94:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8B:26:05:7E:47:FD:CA:BE:CA:3D:9E:12:83:87:52:F9:0D:6E:F8
X509v3 Authority Key Identifier:
keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/7E50DB58DE1E11EF96BAF829C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.41.0-103.80.42.255
Signature Algorithm: sha256WithRSAEncryption
8a:3b:67:25:a9:50:86:11:36:c9:e9:42:0d:1d:d3:4d:70:9a:
9b:46:0a:e1:b8:34:e8:60:78:4c:51:ca:8e:e8:91:31:14:10:
8f:36:45:6c:d1:3e:16:47:e6:d1:95:80:51:f1:c0:8a:65:ca:
d2:1d:f2:d9:aa:68:0a:0c:d4:15:28:e0:4a:21:50:ad:10:71:
d7:52:d4:98:07:05:a0:a0:a2:19:7b:29:d2:a9:4c:39:4b:2a:
fa:7a:35:24:d5:8c:08:0e:46:07:95:f9:b5:0d:a6:e9:bd:2d:
09:eb:86:ae:79:df:40:f0:1f:52:ef:87:6d:f6:6d:3a:a2:b6:
bd:2c:48:f4:35:8e:e6:f7:6c:97:da:e8:7f:df:77:1e:7b:63:
7d:9e:07:90:5a:95:9e:6c:22:50:5c:bf:89:f7:ac:d1:27:0d:
47:1f:a5:0b:1e:76:d3:61:64:34:09:67:5b:45:09:62:f0:28:
60:67:34:9a:a1:d0:1e:f6:f5:49:21:24:14:9e:90:bc:18:58:
e0:ea:95:d9:3c:12:a1:19:d0:6c:3f:fe:5b:a0:a0:22:bf:eb:
e6:0e:28:78:53:94:17:22:bd:32:8a:bf:e7:13:e8:ba:86:75:
a1:e0:27:a0:76:be:b7:e3:07:c3:30:8a:35:37:1d:5a:8a:ad:
fe:2a:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:22:09 2025 by rpki-client