Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/DC32812203E911F099ED6083C4F9AE02.roa
File: DC32812203E911F099ED6083C4F9AE02.roa (raw, json)
Hash identifier: J4XsQqIXXNrH3AjPKCK2loEl+rnRQyBlEzKkOSyTXKc=
Subject key identifier: 1E:34:62:FF:E5:36:9E:3D:79:F5:53:50:59:F5:E5:CB:10:67:D6:C6
Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial: 03CA
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/DC32812203E911F099ED6083C4F9AE02.roa
Signing time: Tue 18 Mar 2025 11:12:21 +0000
ROA not before: Tue 18 Mar 2025 11:12:21 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 142150
IP address blocks: 103.179.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 970 (0x3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCF8
Validity
Not Before: Mar 18 11:12:21 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67d95514-4b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:b8:f8:35:ad:f4:f8:39:fe:4d:9e:a9:3c:
39:4f:ab:55:ec:85:d7:ab:b3:80:50:ff:a5:ab:4f:
19:37:db:c1:a5:c9:ea:4f:f7:e5:ff:e4:c1:dd:8f:
50:dd:c8:44:f7:db:a4:6f:8a:a8:a7:36:be:2d:4e:
ae:a1:dc:97:eb:65:91:e8:8f:fa:b5:9a:57:ee:fc:
d3:8a:31:f5:53:1f:a7:14:ca:7b:f9:2b:75:ac:ed:
32:93:70:c9:67:e2:24:96:58:28:8e:8f:45:44:40:
dc:31:dc:f2:98:c7:84:bb:f7:c5:99:9a:df:a9:13:
8a:5c:55:39:9f:84:0f:7e:39:6b:cc:47:36:28:82:
4c:96:14:5a:e2:1b:29:86:f0:db:45:ce:6c:92:61:
4b:fe:08:53:17:7b:b5:ff:54:a2:ed:4e:8e:55:09:
22:e4:d5:cf:4e:9d:cf:11:da:3f:ff:38:6e:20:2e:
a5:b1:d0:ff:0e:04:5b:a2:64:55:ae:8e:97:51:73:
5f:50:4a:86:af:f5:a1:81:e6:d5:30:b3:d6:5a:e1:
b0:2a:c1:68:8f:3a:02:4f:a7:6b:06:45:27:60:56:
40:4e:fa:e1:dd:38:8f:27:d4:40:a0:7c:26:5c:66:
35:13:ba:6d:9a:15:b7:df:c7:d2:93:ec:14:b0:d1:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:62:FF:E5:36:9E:3D:79:F5:53:50:59:F5:E5:CB:10:67:D6:C6
X509v3 Authority Key Identifier:
keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/DC32812203E911F099ED6083C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.240.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3e:02:02:a9:fe:25:8d:4a:10:f6:25:39:df:0a:ff:9b:7f:
cf:d0:e3:27:9e:8c:fb:96:9c:d0:c9:4b:59:ff:1f:3d:fa:fc:
98:38:4a:51:82:22:e5:fa:b1:c2:c8:a2:a5:14:d0:e4:d7:ba:
7c:5c:e5:cb:6b:6c:02:58:98:8b:72:60:70:10:ed:bd:4f:a7:
d0:b1:bc:3d:25:39:45:0e:4d:62:d3:ca:16:9e:68:27:36:5e:
31:35:1c:4b:6a:ae:31:5b:50:89:29:91:13:37:e0:99:ff:17:
3f:dd:a1:91:c6:3b:70:0e:29:b5:56:0f:d9:55:62:97:1d:e9:
0b:97:da:c3:b4:00:86:4d:ee:6d:c6:0e:b3:65:22:0b:fe:2b:
01:20:62:c6:9d:11:52:6e:00:cc:04:e0:c5:a9:f1:8e:cf:17:
ea:18:3c:30:52:d4:d7:92:01:0e:1c:94:7e:2e:40:50:0c:a3:
04:4f:a6:60:99:95:60:67:e4:02:e5:03:92:63:16:d4:b8:6f:
f0:dc:22:91:89:80:39:58:fe:de:84:92:65:3d:b4:d8:a4:82:
62:af:e2:f3:0c:8c:d6:0e:d8:0e:dc:2e:17:b5:92:a1:e0:ba:
cf:56:a0:cb:b2:68:7f:8d:02:fd:d0:42:9a:87:54:31:5c:c4:
7e:17:05:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:12 2025 by rpki-client