Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa
File: 8C48B22C47E711EE91530D28C4F9AE02.roa (raw, json)
Hash identifier: wKqJN3HUJdyX5elWCqbGG36RonSJ+MBkLKESMLKx2qQ=
Subject key identifier: 11:F8:5E:22:D6:DD:76:80:2B:3C:E2:0B:22:5A:4A:15:1A:3D:40:96
Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E
Certificate serial: 01A0
Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa
Signing time: Tue 04 Mar 2025 05:50:25 +0000
ROA not before: Tue 04 Mar 2025 05:50:25 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 138640
IP address blocks: 103.61.240.0/23 maxlen: 23
103.61.240.0/24 maxlen: 24
103.61.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4C30
Validity
Not Before: Mar 4 05:50:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67c694a1-8317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:db:1d:26:c9:6e:ba:28:52:99:99:91:89:
ee:4c:1c:46:8a:3f:5a:e8:bd:56:24:d3:69:0a:84:
a9:09:5a:50:e3:50:8e:d7:21:f3:fc:9a:23:df:53:
77:9f:2d:dc:b0:e0:aa:23:4e:27:cf:52:e9:39:ad:
f9:bc:f9:f0:17:d4:18:1e:b7:44:25:32:f1:e6:94:
72:6c:ee:ab:2a:02:c6:4b:a9:30:68:2f:4e:c7:a7:
06:cd:03:f6:fa:73:0c:a6:6c:f4:fc:fc:b4:66:25:
16:18:28:d0:9d:92:e3:32:ba:49:10:d6:cc:68:b0:
1a:fd:09:25:5f:a2:0c:4f:a5:f2:9b:cb:ef:e6:cd:
1d:0c:57:b0:de:e8:8d:9c:6d:72:8c:d8:ed:49:1d:
a0:60:de:b1:44:16:b4:6e:b9:9f:c6:1b:f8:ba:e8:
8a:d0:b3:ca:bc:62:e1:46:68:5d:48:9d:61:ce:df:
fd:fa:8f:da:b3:a7:cb:c8:d6:b6:3a:ec:d0:e5:3f:
cf:23:4a:b8:85:9b:0e:51:7f:fa:60:0c:50:eb:eb:
03:5d:8d:45:1e:04:66:e8:5a:45:26:58:8f:fc:fa:
ce:ad:22:32:ee:90:54:de:81:a1:25:8d:04:bc:57:
8d:f7:35:e4:9b:3b:c7:6f:96:dc:84:69:c9:64:00:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F8:5E:22:D6:DD:76:80:2B:3C:E2:0B:22:5A:4A:15:1A:3D:40:96
X509v3 Authority Key Identifier:
keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.240.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:72:b3:b1:63:41:fc:57:60:b3:bd:e6:c2:c3:ad:7f:5a:29:
ca:4d:fc:d3:43:cc:6c:26:79:fe:74:31:d4:f5:b4:0a:4e:5c:
c3:1e:98:fa:c8:43:10:1d:1f:bc:47:35:03:95:09:94:ba:2a:
88:34:bf:c3:aa:3f:a5:39:3f:c0:95:fe:91:c9:78:6d:b7:e3:
77:4e:16:7c:9c:40:d8:1c:97:d6:91:52:9a:a0:28:59:51:2e:
71:13:94:c2:76:84:1d:99:21:de:ae:28:22:c7:dd:3b:7b:66:
a5:07:95:2e:1d:92:35:a6:97:27:57:6c:28:8d:85:f3:f3:e0:
5b:2e:07:b1:04:bf:15:29:33:e6:37:8f:18:03:c0:03:d9:a3:
44:87:c7:79:0a:2b:b2:a6:00:56:b6:16:a1:b6:27:45:86:48:
17:b4:d8:94:62:68:e9:03:58:e8:af:ff:55:e2:ce:aa:29:e1:
79:32:4c:d8:ad:e1:9c:8e:c5:e0:45:32:bb:d2:d7:ff:9a:2d:
3c:bf:fa:f4:5b:0b:87:ab:94:08:ef:a2:5f:b1:85:93:71:0f:
67:85:15:74:48:af:94:ae:28:f0:46:a5:78:f7:73:e0:ef:9d:
72:d3:66:98:ae:85:ca:37:4d:60:d2:c7:62:6e:5a:80:09:e2:
8a:e6:4d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:20:32 2025 by rpki-client