Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/730171E2E8DF11EFB3A9123EC4F9AE02.roa
File: 730171E2E8DF11EFB3A9123EC4F9AE02.roa (raw, json)
Hash identifier: SnA8bDAcgUrywbJzKpVMtCFVnPQvHiapP/bwJlmTCzg=
Subject key identifier: DA:C4:C0:4D:51:FA:BE:9F:24:74:3F:15:4B:41:36:86:18:1B:F9:46
Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial: 21C5
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/730171E2E8DF11EFB3A9123EC4F9AE02.roa
Signing time: Wed 12 Feb 2025 01:19:48 +0000
ROA not before: Wed 12 Feb 2025 01:19:48 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.111.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8645 (0x21c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4845
Validity
Not Before: Feb 12 01:19:48 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67abf733-edd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:39:fa:36:82:84:ad:0c:ba:1d:e2:94:d8:
a0:d8:46:23:c0:d9:14:55:84:96:a6:e2:e8:9e:ab:
f5:9a:07:9e:38:88:37:2d:1b:73:bd:b1:1d:44:0b:
1a:09:e7:e4:94:f6:d1:7e:25:45:68:23:33:29:74:
4f:e8:4c:3e:51:23:a7:96:3f:c1:05:9f:b5:c9:02:
fa:31:58:60:af:f6:ba:bd:f1:39:14:45:0f:5f:21:
4f:a3:1d:73:4b:46:28:5f:c2:18:d0:3b:79:15:2f:
86:ee:1b:a8:ab:6f:5c:69:4d:9d:ec:02:f7:bb:3c:
36:b5:0a:22:77:3e:30:8d:71:52:01:ba:8d:ff:4e:
78:5d:91:c2:07:38:0a:1f:21:cf:c5:92:ec:ad:c9:
53:90:61:f6:0b:89:02:b2:75:ee:c2:65:a7:59:74:
d1:98:b8:55:b2:85:dc:d4:dd:0c:f0:d0:13:a1:dd:
c3:13:37:7a:f7:aa:a0:c1:5c:fd:9f:ba:9a:44:9f:
6c:79:92:99:50:4e:6b:b7:ef:e1:52:dc:54:bd:cc:
e0:67:05:c2:c2:b4:d4:8a:f8:6a:4d:61:fe:5a:bf:
11:31:43:12:88:6f:89:06:00:05:01:01:cb:99:78:
0e:9a:e5:bc:d3:3c:a0:03:94:6a:1a:ba:d0:6d:97:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C4:C0:4D:51:FA:BE:9F:24:74:3F:15:4B:41:36:86:18:1B:F9:46
X509v3 Authority Key Identifier:
keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/730171E2E8DF11EFB3A9123EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.89.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a0:8b:16:ef:0d:10:d0:0d:64:45:3f:f6:8d:19:72:75:7d:
0a:db:df:f6:4c:e2:4e:4b:9c:91:f6:07:76:dc:6e:6f:ee:98:
3e:37:fb:03:4d:b1:91:12:bd:68:a7:38:a0:58:e0:32:09:a7:
dd:f3:60:06:4e:d1:1c:57:5e:56:72:7f:4b:8d:80:f3:3d:38:
d3:e1:b3:cd:82:67:d4:c6:1d:33:9c:14:d6:4c:e0:d9:5d:1e:
d7:a7:e8:a9:3b:06:46:d8:42:31:6d:28:bb:4b:32:86:dc:90:
b2:08:02:93:32:44:b1:32:5c:1b:d9:f9:45:0e:2e:1f:d9:36:
86:65:ce:ea:3a:05:c5:24:8b:05:1f:83:10:20:19:ec:29:4b:
0e:b6:91:54:25:1e:b7:08:ca:41:20:a7:95:c0:be:c8:02:d8:
40:10:e8:bf:11:5b:56:6d:cf:3a:5c:02:b5:1b:87:a6:14:59:
07:b4:75:7f:71:73:41:06:02:7c:72:5c:6d:71:69:70:39:2d:
0d:a1:b1:78:1f:c0:bb:99:ed:40:37:dc:77:c2:38:38:2c:09:
fb:99:38:b8:62:09:5f:31:17:32:bb:3d:79:cf:9f:e4:de:be:
fe:c4:d0:a1:e2:21:a7:83:d2:b3:b6:93:ae:bb:9f:d6:f1:0a:
c9:71:16:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:00 2025 by rpki-client