Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/081FECF0FFB911EF955BB727C4F9AE02.roa
File: 081FECF0FFB911EF955BB727C4F9AE02.roa (raw, json)
Hash identifier: i9koQs5gzKTA12WO2nbLKOn7G+eGstWSVbsuRXzqo6I=
Subject key identifier: 7F:AE:3D:F4:F2:2F:B3:5C:44:2A:17:F1:38:1D:AC:BE:E8:91:51:9B
Certificate issuer: /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial: 73
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/081FECF0FFB911EF955BB727C4F9AE02.roa
Signing time: Thu 13 Mar 2025 03:12:44 +0000
ROA not before: Thu 13 Mar 2025 03:12:44 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 26658
IP address blocks: 103.75.240.0/22 maxlen: 24
116.206.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B61A7
Validity
Not Before: Mar 13 03:12:44 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67d24d2c-aafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:53:9b:2c:f6:6e:84:8b:02:a4:1a:e8:35:21:
bb:2d:07:8a:4f:ea:cd:9c:c2:59:90:83:0b:59:68:
8f:51:69:97:18:11:cc:f1:09:3c:a7:12:85:b2:cf:
30:90:4f:6b:74:d5:a2:3c:f1:47:86:cc:de:b6:40:
ab:0f:2c:d3:4e:4c:e2:33:9c:3d:2a:60:96:16:5f:
36:ae:29:21:b3:7d:c7:2a:df:48:97:0d:36:19:ab:
12:8d:2b:ec:ff:57:55:75:f0:8f:aa:e2:79:cb:d3:
19:9c:e0:af:71:40:cb:ea:06:c7:f4:6c:7b:8d:12:
1b:b8:a8:d1:3b:4d:b5:a0:03:b4:48:c2:eb:f9:4a:
6f:d5:42:c1:4f:14:be:3b:b8:c4:84:ee:9b:ba:21:
eb:d7:0f:7a:b7:94:63:cd:88:7e:8a:05:67:1e:83:
11:a3:e6:a1:90:73:31:f1:80:28:43:f7:c5:70:2d:
de:1d:1e:db:35:98:fd:95:af:80:67:31:1f:c5:ab:
d8:cc:4d:75:58:52:9d:19:93:c9:d4:c6:4c:db:b7:
04:44:c5:75:f4:46:ff:11:c0:56:1d:41:5d:e8:e3:
9f:3b:7b:cb:1a:c6:f7:18:32:8a:f6:0b:bc:66:97:
ec:62:39:55:42:d7:55:fd:d4:65:dd:26:ae:d5:63:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:3D:F4:F2:2F:B3:5C:44:2A:17:F1:38:1D:AC:BE:E8:91:51:9B
X509v3 Authority Key Identifier:
keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/081FECF0FFB911EF955BB727C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.240.0/22
116.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:00:58:23:5f:5c:90:3e:fb:2d:79:5e:34:b0:c6:54:db:de:
1f:a5:9a:6d:39:45:a5:91:c0:b5:0c:4f:6d:34:ff:31:57:a1:
4c:87:77:34:42:64:14:4a:e3:a5:6f:e2:7d:f9:17:c3:46:9f:
83:32:d2:2c:f0:32:05:a0:e3:e8:89:f8:1e:5f:16:cd:61:0d:
96:9e:0e:75:74:de:4c:81:f2:1f:e0:03:ae:b6:e1:a9:49:24:
54:78:56:79:b5:60:72:bc:98:a3:39:bd:14:a3:17:18:8d:75:
7c:94:96:07:ae:ab:65:77:69:47:28:d0:e3:ca:af:08:51:3b:
cf:af:43:6c:ab:8a:99:84:7c:4b:7d:68:e1:99:e8:cf:91:2c:
01:bf:b7:f0:60:98:5f:bf:78:1a:30:49:54:e3:54:cb:d5:e9:
8a:ce:6b:da:96:49:9d:62:bc:6d:9d:03:a7:00:62:1a:3f:61:
66:ca:52:65:00:fc:c1:95:61:eb:a1:7c:19:26:2a:07:f8:dd:
d9:20:04:2a:7d:48:f3:d2:15:fc:8a:b6:78:81:13:91:35:f1:
aa:80:2f:9b:a6:85:eb:e5:86:a9:dd:98:c1:fd:cd:d5:b3:84:
82:cb:b7:ff:48:35:c2:a7:e0:1b:6e:07:46:45:4a:2f:9d:59:
3e:84:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:54:07 2025 by rpki-client