Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa
File: 51FD604CE08711EFA06D6434C4F9AE02.roa (raw, json)
Hash identifier: doR4Y7/9fJwk4I8rzXTdhySC0dSmOygHgP5L2cehpw4=
Subject key identifier: 32:70:10:FC:ED:DE:99:EA:2C:4B:D7:99:56:E1:1B:BF:69:E3:D7:2E
Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial: 0472
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa
Signing time: Sat 01 Feb 2025 10:28:47 +0000
ROA not before: Sat 01 Feb 2025 10:28:47 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 135341
IP address blocks: 103.176.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1138 (0x472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B74E8
Validity
Not Before: Feb 1 10:28:47 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=679df75f-af04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:ff:a3:21:18:46:42:78:50:aa:75:a9:99:
2b:d1:f5:87:42:21:0c:72:1a:e2:7f:1f:65:6c:b7:
3e:86:89:38:2c:9f:7c:8e:d6:b1:b1:dd:ba:9a:2e:
ff:24:85:83:3d:9f:64:ad:22:a5:b4:4f:2c:ee:37:
61:52:4c:75:21:12:a3:e8:f0:6e:be:e9:a6:a0:44:
83:41:bb:db:fc:df:03:09:6b:63:eb:6d:c1:35:fb:
65:cb:3b:02:bc:e7:76:83:34:88:ca:42:bb:4e:04:
1d:fb:82:36:86:ee:4e:aa:af:98:13:3a:cc:d6:88:
2e:cc:be:7e:4b:b3:d0:7d:92:87:70:55:e0:f1:d0:
0d:f0:d8:c8:ea:54:7f:9a:43:9a:b4:8e:58:32:49:
74:9a:33:9c:01:c9:b1:e2:06:42:eb:86:2a:8e:79:
fc:bc:e8:7e:b1:76:c2:c9:4d:e9:db:e4:1b:2a:1f:
80:3f:0f:48:e3:a5:fe:25:f9:89:73:94:07:9b:6f:
b2:30:c9:d3:13:07:98:1e:ea:13:38:e6:8b:cf:fd:
80:aa:fa:cd:48:fb:f0:55:53:83:39:10:67:52:10:
84:c6:86:b0:45:fc:5c:3a:1a:b0:27:29:56:f7:c4:
30:ef:be:88:a3:c3:de:3c:1d:4c:6c:36:9b:9f:e2:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:70:10:FC:ED:DE:99:EA:2C:4B:D7:99:56:E1:1B:BF:69:E3:D7:2E
X509v3 Authority Key Identifier:
keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/51FD604CE08711EFA06D6434C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.3.0/24
Signature Algorithm: sha256WithRSAEncryption
93:80:df:a2:6c:14:71:18:05:c7:6d:6f:b4:05:c4:be:07:ae:
0e:82:20:35:50:07:10:e7:bf:01:99:b8:fa:d8:61:2e:45:eb:
4c:c7:e5:6d:90:b6:7f:0c:1b:11:4c:d0:8b:56:c0:15:9e:8a:
81:ba:3f:5e:3d:6b:85:a9:dd:21:a3:e5:64:49:35:d5:bc:8c:
9b:22:66:59:d2:08:08:a0:8a:3c:c0:39:d3:fb:7c:02:f9:5e:
0d:f9:18:d6:c5:f7:e1:73:ce:7d:d0:ac:fc:57:68:0f:5d:90:
b5:9a:f6:c7:90:d1:00:1f:07:d1:25:2e:6d:69:73:94:69:71:
d8:3a:a5:aa:70:7d:bb:54:50:84:d4:16:47:72:88:6d:0b:20:
e5:7f:0a:cd:a1:a4:d0:cf:c5:3f:44:c2:d4:0e:d8:48:5f:20:
12:3b:58:5e:cb:47:1d:f8:ee:3b:f2:7d:44:b9:4e:52:30:ee:
d5:ec:c5:4f:9e:d3:db:f8:e8:26:f6:a9:60:bd:2f:be:d9:c9:
a3:f0:96:c5:10:51:c7:96:ed:da:3e:3c:3d:06:a4:a2:26:b9:
55:32:a9:ec:91:84:84:65:3d:e7:c7:71:ee:c2:32:4b:5d:36:
2b:06:a9:bc:0d:3c:27:7a:2d:8c:a3:9c:49:5e:79:e3:5d:ca:
db:0e:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:37:59 2025 by rpki-client