Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/807778BA8F7711EF9703AD1BC4F9AE02.roa
File: 807778BA8F7711EF9703AD1BC4F9AE02.roa (raw, json)
Hash identifier: QExUV5UN6oyTGliDS68xpdnfyZxhvRfVebD8/Y+skR4=
Subject key identifier: FB:37:A9:ED:46:4B:73:EB:37:72:89:02:3D:66:8C:34:45:D8:0E:1F
Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Certificate serial: DC
Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/807778BA8F7711EF9703AD1BC4F9AE02.roa
Signing time: Sat 01 Mar 2025 06:54:51 +0000
ROA not before: Sat 01 Mar 2025 06:54:51 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150446
IP address blocks: 103.42.62.0/24 maxlen: 24
103.42.63.0/24 maxlen: 24
2401:ede0:0:1::/64 maxlen: 64
2401:ede0:0:2::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4E62
Validity
Not Before: Mar 1 06:54:51 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67c2af3b-6572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:94:3f:3d:a1:1d:5b:3a:1d:35:e3:06:11:
20:64:44:e2:74:7c:60:59:d3:0c:31:eb:a9:10:dc:
df:93:ed:b5:eb:8e:cc:47:f3:59:9b:a4:fc:dd:53:
95:f0:1f:f2:f8:0b:f0:9f:10:33:85:c6:b1:db:87:
e6:7f:04:69:28:cd:a8:72:fd:02:c8:58:56:d0:f4:
e9:37:18:01:4d:8a:58:79:41:0d:4d:a2:4a:25:97:
c5:f2:09:be:09:15:cf:61:fa:35:cd:ae:80:11:b5:
7b:c2:ab:04:c0:4c:12:79:a4:f3:36:78:72:67:5a:
e3:c5:7a:95:20:9f:1e:19:8e:8f:cd:b9:7b:ce:f0:
bf:86:bf:13:6f:56:4c:65:c7:fe:bf:4b:32:6f:58:
05:4c:b1:36:06:11:fa:59:33:f9:69:75:8f:34:c1:
2e:2d:5d:0f:60:20:e0:1a:18:de:e9:5e:a9:1d:95:
9f:d7:23:b1:04:1c:3c:bf:d9:a0:ac:3f:51:ba:b1:
4a:7a:85:b8:18:40:95:36:8f:75:02:ef:3f:62:8d:
7b:20:d0:5e:5f:bd:de:c5:94:f1:8e:4c:30:de:1b:
8f:84:c9:99:e9:02:ba:ee:c0:92:b3:43:d9:b5:3f:
67:d0:aa:ee:e1:8c:f7:18:be:b5:fd:c0:7a:35:42:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:A9:ED:46:4B:73:EB:37:72:89:02:3D:66:8C:34:45:D8:0E:1F
X509v3 Authority Key Identifier:
keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/807778BA8F7711EF9703AD1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.62.0/23
IPv6:
2401:ede0:0:1::-2401:ede0:0:2:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
10:ed:07:84:85:85:90:f4:d4:a8:4a:91:f3:01:1a:ab:6e:30:
cb:d2:61:c3:0d:a4:b5:ed:7f:27:d2:0c:6b:81:3c:31:4e:53:
a4:ce:83:0d:5d:02:bc:d5:b1:e9:88:75:76:65:98:ce:cb:8f:
64:ba:c4:85:9e:77:2d:f8:ea:18:a0:6e:5f:95:06:6c:42:d8:
7a:9c:e7:24:9e:d7:99:7e:fd:85:26:71:86:8c:07:41:e0:54:
ff:0c:da:91:76:59:a1:59:13:cf:2c:0d:26:bd:f9:99:48:69:
d0:8c:df:dd:76:04:75:09:cc:64:a1:ed:5a:62:ea:7c:8a:3f:
12:6e:d1:42:82:1e:ef:da:fa:5a:f8:d3:fa:30:0d:96:39:23:
8a:93:6f:84:66:5b:55:1f:29:3a:f1:c1:a9:0f:a8:92:bd:ba:
fb:87:e2:54:cf:fd:d2:51:af:43:ab:0c:25:c7:95:14:72:d9:
ee:88:5e:f4:fe:bd:0a:b3:26:a3:08:83:85:0a:32:49:e2:0d:
a7:cd:15:f7:e3:db:45:49:a5:ef:c9:96:d2:7a:2d:1b:a4:86:
05:98:3a:85:31:26:c3:b5:ac:62:a2:cb:b0:c8:32:2e:04:cd:
27:c0:8a:85:bc:15:3f:89:f3:0a:3e:92:4e:3c:3e:ee:83:9b:
b2:47:43:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:23:57 2025 by rpki-client