Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa
File: FFE0F998101511EDA7D8F271C4F9AE02.roa (raw, json)
Hash identifier: RnL32mbH2nfGSeBF5CgeDIySAoSrBSDNFXrw7LKGyjA=
Subject key identifier: B5:06:3D:E4:C5:DA:43:DE:5D:C3:BF:B0:6C:A2:06:48:AB:74:B8:A9
Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial: 18FF
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa
Signing time: Sat 22 Feb 2025 16:54:08 +0000
ROA not before: Sat 22 Feb 2025 16:54:08 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 149781
IP address blocks: 103.101.175.0/24 maxlen: 24
2001:df0:d00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6399 (0x18ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBA26
Validity
Not Before: Feb 22 16:54:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67ba0130-cb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3a:d9:c6:c6:8b:c6:0d:1d:78:be:92:f6:ca:
38:f7:54:2d:69:5a:d8:b3:d8:a0:f7:24:b2:b2:ef:
a8:6e:6b:80:40:e1:b6:51:85:c3:74:8d:fc:32:1f:
4a:50:da:01:10:fa:d3:cb:69:8f:ee:1b:ca:a4:dd:
d5:2e:0d:e2:2d:84:d0:a0:41:75:76:1a:cd:f2:45:
86:85:10:ce:92:f3:0f:95:a8:af:7a:5c:a0:60:2e:
65:a1:17:31:60:63:32:18:6a:79:b0:20:4f:a9:46:
10:4d:b2:eb:b0:92:8c:0b:61:11:89:cf:2b:e8:10:
e0:cd:9e:3b:9d:16:5c:03:7f:a2:63:1e:b7:57:d3:
29:1d:b9:fb:25:9e:e2:71:27:de:7f:e1:cf:0a:b5:
de:1b:54:17:49:14:76:8c:4b:8c:4c:e4:39:80:41:
2b:2b:96:2b:c6:4d:08:7c:c9:95:21:7f:04:cd:05:
96:2a:72:5a:2e:17:96:01:90:01:22:f6:77:cf:aa:
0e:30:71:52:92:8d:14:f9:ad:34:6f:18:1f:d2:2d:
4a:84:2e:76:fa:3f:2d:09:ee:51:56:df:aa:27:35:
8a:ff:0d:2b:1f:3a:02:94:ae:ef:27:cc:48:6c:80:
58:fd:35:11:9e:a8:ff:92:70:2c:10:35:6a:c0:88:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:06:3D:E4:C5:DA:43:DE:5D:C3:BF:B0:6C:A2:06:48:AB:74:B8:A9
X509v3 Authority Key Identifier:
keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/FFE0F998101511EDA7D8F271C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.175.0/24
IPv6:
2001:df0:d00::/48
Signature Algorithm: sha256WithRSAEncryption
40:a2:19:6f:fe:26:82:2c:c7:d5:3e:18:bb:e8:e8:58:95:93:
1a:42:8f:d5:be:36:53:90:1e:2f:4e:ee:af:35:81:0e:37:42:
97:7f:49:04:d1:8d:ca:13:54:5a:61:f6:8f:38:f9:17:6b:eb:
f8:99:42:9f:49:33:38:58:d0:0a:a2:9e:b9:f7:0d:e1:57:2a:
b3:5b:85:2c:76:17:9e:10:b7:9a:14:9e:46:13:ba:9b:b3:31:
7d:2c:69:5b:a8:e0:8f:97:bd:dc:31:cf:56:6b:ec:ee:6e:31:
53:71:65:20:12:c4:d0:0d:b0:f4:e0:97:89:e5:cb:eb:a5:6a:
ad:c0:59:38:5f:4d:c5:d8:a7:9d:a6:b5:25:21:1c:95:6c:f1:
8b:6a:58:a7:63:3f:22:92:5f:be:9d:a8:f5:8b:a6:ac:db:67:
7c:65:88:8c:76:7b:17:36:ac:36:e9:03:57:76:7c:47:ec:43:
97:f3:15:32:73:70:b6:18:30:29:0e:52:d8:2e:0c:84:55:43:
d0:6a:6d:96:9f:15:c7:26:ab:c8:20:77:ce:4a:69:2d:c7:14:
d5:39:d0:42:df:09:c0:96:42:40:2b:2b:ba:a2:71:b1:4f:b2:
ad:0e:73:db:8d:65:f3:11:5f:2a:81:18:3b:60:b2:ec:82:75:
ed:88:cb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:56:07 2025 by rpki-client