Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/D061270A9C5111EEB28AC931C4F9AE02.roa
File: D061270A9C5111EEB28AC931C4F9AE02.roa (raw, json)
Hash identifier: 5mZ9PYqFiRWlllPSMNs1uK+Kp1wHJpI6AB93rQ9LHqg=
Subject key identifier: 65:14:EE:99:3F:0E:EC:5C:6E:97:13:A2:15:D5:6E:43:37:4B:6D:E9
Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial: 043A
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/D061270A9C5111EEB28AC931C4F9AE02.roa
Signing time: Tue 07 Jan 2025 00:15:18 +0000
ROA not before: Tue 07 Jan 2025 00:15:18 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134480
IP address blocks: 103.175.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082 (0x43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D774B
Validity
Not Before: Jan 7 00:15:18 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677c7216-5f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:c7:fb:20:bd:95:ec:59:5e:51:db:d1:c4:
2e:52:4e:82:da:5b:fa:97:d1:9f:c7:18:2b:83:df:
b7:fd:0d:46:bf:38:2f:88:84:b5:a4:e4:06:8a:76:
95:5d:d6:6e:b5:ab:64:97:b9:f7:cf:3a:ed:e0:35:
23:23:12:85:bb:b0:cd:0c:3c:f3:43:ce:18:b9:34:
cb:31:a4:c5:57:aa:80:7d:9a:67:b9:23:3d:46:e9:
dc:61:0b:e9:d3:e0:9e:20:66:99:33:f0:49:1c:85:
1a:ea:b1:6f:1a:39:62:ef:e2:a3:ee:2e:1b:1b:bc:
fc:d9:c6:82:2a:5d:9a:93:80:18:13:7a:23:7a:53:
75:85:d5:ac:c6:63:7d:23:6d:ea:03:99:ed:9c:01:
50:53:19:49:50:e3:54:62:95:b6:02:6a:c8:f8:5f:
bc:02:8f:66:9a:b3:31:22:2f:c8:93:4f:df:c2:94:
37:52:43:f3:7b:2e:ab:bc:3c:eb:48:66:78:f6:aa:
d6:74:cd:e5:08:0a:1c:0d:26:b5:f2:df:5a:75:9c:
40:cb:17:ce:ff:5c:8a:ca:54:55:03:fe:04:f3:af:
d1:88:41:f7:75:9a:db:50:2a:61:8e:ba:38:9e:41:
73:4e:b7:25:a2:1a:a1:46:a3:5e:af:84:2b:61:96:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:EE:99:3F:0E:EC:5C:6E:97:13:A2:15:D5:6E:43:37:4B:6D:E9
X509v3 Authority Key Identifier:
keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/D061270A9C5111EEB28AC931C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.245.0/24
Signature Algorithm: sha256WithRSAEncryption
19:da:5a:9d:b4:ff:7e:6a:61:1b:b7:31:f3:f4:9c:cd:2b:f5:
19:a3:d4:c7:f4:39:4d:f1:33:8d:a3:de:36:52:c8:7a:ee:a4:
60:f5:fd:14:d4:5b:af:b0:f0:0d:f7:3d:d1:7d:2c:f8:4e:bb:
8d:f2:7c:ef:42:61:da:6b:0a:c4:11:7a:18:d0:97:f0:9d:25:
8f:29:50:7e:bb:c6:11:f6:c2:b0:ce:c5:bb:70:9d:6c:ee:53:
ab:89:a8:0d:57:49:3d:e7:0e:cf:70:53:1a:01:2f:6f:2d:47:
6f:f9:a9:59:4e:08:0f:45:b1:60:6e:e0:63:18:a5:ad:61:fa:
14:f5:02:f4:61:79:10:06:85:8f:ff:37:a3:68:d7:4c:b6:2d:
a4:d0:d4:b8:a5:79:5a:fc:91:fa:ee:51:1e:b6:de:bc:77:86:
e4:cd:73:e0:75:7d:db:07:16:d8:08:95:3d:4b:f1:60:74:fe:
c9:fe:38:9d:5f:61:eb:c5:ed:53:41:50:bb:8c:69:1e:64:6b:
b1:da:92:cb:5a:93:96:19:86:f6:6d:28:05:52:38:5c:4a:2e:
b6:45:48:1c:12:26:79:1d:42:5b:4a:7c:7b:ea:d4:a1:c7:c4:
9b:77:25:99:6a:e8:3d:b2:83:22:6c:c0:c0:b7:b1:57:14:84:
cd:f6:c5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:23:14 2025 by rpki-client