Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/C657777835BD11EEBBA15F71C4F9AE02.roa
File: C657777835BD11EEBBA15F71C4F9AE02.roa (raw, json)
Hash identifier: dBKzmRV5kLqxEgnT/9vEMvol4LmNVdPd79i3sVZVmJg=
Subject key identifier: 4D:35:7F:95:31:D3:FC:20:6B:22:32:34:C1:DE:CD:E6:4A:71:54:F7
Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial: 0395
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/C657777835BD11EEBBA15F71C4F9AE02.roa
Signing time: Fri 21 Feb 2025 02:14:48 +0000
ROA not before: Fri 21 Feb 2025 02:14:48 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 139820
IP address blocks: 103.180.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE567
Validity
Not Before: Feb 21 02:14:48 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67b7e198-a1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:e8:a2:be:13:13:96:07:be:14:75:1f:9b:
0d:c5:f2:39:38:7f:72:c5:4a:46:b2:c7:d4:6a:1d:
48:db:5c:4f:07:1a:e4:7d:c8:99:f8:6c:b2:da:3a:
b8:d5:d1:d8:97:87:40:46:22:1c:8d:6e:88:a1:9a:
d8:0f:2a:e0:b6:6c:88:63:7f:06:a2:eb:e4:eb:c3:
9e:13:de:1f:26:c1:1a:60:fb:1f:6f:fa:68:9e:b5:
c1:44:5a:39:b5:0e:e2:9d:ab:c7:b6:22:23:55:c3:
93:05:ca:af:70:08:4d:bc:76:cb:27:50:b0:fe:30:
e7:b0:11:11:29:3a:ec:ec:a0:39:ae:37:73:c8:81:
26:e5:0e:1d:74:ff:4e:b7:c8:f1:dc:ba:e8:5e:fb:
fa:d3:ff:cb:1f:c6:42:02:b0:af:f4:70:b4:84:f9:
58:b5:d6:df:d1:34:5f:2d:08:b6:86:6a:4a:9e:1c:
d9:c7:4d:67:84:74:d9:8e:cf:e1:10:dc:0d:b2:94:
b2:83:33:7f:02:0b:4e:a4:48:ae:d9:69:de:61:ba:
cf:e8:d8:91:d7:4f:9c:64:a8:6c:ae:d0:b5:c0:35:
0a:55:28:b0:f0:0d:f2:4c:ed:c2:84:0a:6b:15:86:
cc:fa:2a:a7:b6:b0:df:3f:02:50:99:5a:0b:23:c2:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:35:7F:95:31:D3:FC:20:6B:22:32:34:C1:DE:CD:E6:4A:71:54:F7
X509v3 Authority Key Identifier:
keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/C657777835BD11EEBBA15F71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.242.0/24
Signature Algorithm: sha256WithRSAEncryption
07:34:70:82:0d:f8:2c:f3:d4:55:32:91:a4:1e:32:4a:41:2c:
30:5c:63:85:2d:b0:8d:1c:65:c8:ed:ef:36:da:66:46:c1:0e:
17:ef:54:0e:e0:a7:cf:27:82:0c:9e:d2:64:fb:45:a9:79:ab:
96:6a:77:1e:9d:52:31:0c:4d:bc:bf:19:76:9e:68:18:2d:3a:
1e:cd:13:b4:d8:56:7c:43:ea:98:8e:3e:ad:0e:b0:85:56:a8:
9d:ef:2e:84:25:b4:9b:80:2f:21:ea:b2:92:4a:a6:e8:08:c0:
f6:5c:7b:e4:8d:32:63:af:9d:7d:1d:79:fb:4a:12:6e:8c:5b:
6a:14:b0:66:c6:70:e2:28:af:be:55:08:5d:64:f0:57:98:2a:
57:b7:f4:a5:e7:ba:92:4f:84:ff:60:b0:44:ca:2f:58:dc:f2:
c6:92:c3:4a:1d:64:9b:71:82:98:03:87:bd:7a:61:26:a9:a1:
2d:49:d7:7c:ca:89:97:80:67:b1:a9:ac:dc:f3:f4:d7:41:51:
00:69:12:6b:e6:27:70:a0:74:29:b7:e7:90:a7:5d:c0:39:9f:
14:31:54:cd:99:4f:a7:54:42:41:ca:c0:df:f2:40:e9:c5:c1:
67:9c:92:6a:57:24:e5:3f:16:e9:b9:a7:3a:04:3f:d1:eb:c4:
f1:ab:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:33:45 2025 by rpki-client