Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/C7A9FD140A1811EABA1D8360C4F9AE02.roa
File: C7A9FD140A1811EABA1D8360C4F9AE02.roa (raw, json)
Hash identifier: sksRMVI3q7oJNtyDgmTVFUq7ceYvdVbVuSS4jEJcQsk=
Subject key identifier: 80:5C:54:2B:40:4B:6A:A3:B8:A3:E5:7F:BB:11:F5:DD:6B:C9:E7:36
Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F
Certificate serial: 0B75
Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/C7A9FD140A1811EABA1D8360C4F9AE02.roa
Signing time: Fri 08 Mar 2024 19:27:23 +0000
ROA not before: Fri 08 Mar 2024 19:27:23 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 137440
IP address blocks: 103.108.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2933 (0xb75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBEA
Validity
Not Before: Mar 8 19:27:23 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65eb669b-1ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:fe:a1:e1:62:d8:21:1a:94:d1:ef:e3:65:
2d:9a:f0:0e:1a:39:1c:79:2e:bb:0b:33:06:03:56:
a2:c8:27:82:38:3b:29:6d:86:03:62:15:bc:17:86:
89:bb:e4:57:b5:bf:22:56:2a:66:48:68:ad:84:4e:
84:a4:46:92:62:44:56:13:e9:fe:62:0b:b0:c4:94:
b0:5f:bc:72:fa:a8:48:8b:2a:38:39:0a:f2:b0:5f:
08:0d:50:1a:4e:d9:70:49:e3:ae:ac:dd:84:88:77:
ae:2f:e2:06:6d:3f:96:bf:c8:c4:d6:ff:fd:56:87:
bf:a1:61:e6:c2:db:e9:57:43:c1:32:cd:17:ba:f5:
e1:54:1e:17:5e:be:6c:b6:f9:78:11:cc:9a:1e:6e:
66:2f:5d:10:e9:9d:9c:c7:41:95:a9:a6:49:82:5d:
d8:40:6b:f8:1f:5b:17:34:6a:44:4f:cf:7a:dc:97:
58:eb:b3:b6:31:16:b5:8c:33:67:e3:d1:de:d5:16:
ee:ed:4c:c9:b5:9f:35:88:39:3b:59:db:14:ba:e6:
49:3e:32:7c:99:ce:8f:5a:7e:42:d7:99:2a:c9:00:
67:5c:46:17:c5:0c:29:af:f2:0a:38:c7:30:15:d7:
b0:26:6c:dd:82:95:c7:de:82:80:f4:a1:67:81:b0:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5C:54:2B:40:4B:6A:A3:B8:A3:E5:7F:BB:11:F5:DD:6B:C9:E7:36
X509v3 Authority Key Identifier:
keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/C7A9FD140A1811EABA1D8360C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.218.0/23
Signature Algorithm: sha256WithRSAEncryption
96:67:73:24:d8:c8:a1:09:6d:2a:65:dd:90:86:fa:ac:e6:d6:
2f:44:fc:a4:0f:ef:c3:e8:52:3e:da:e6:a8:4f:4c:d3:98:65:
3e:be:f8:71:fe:34:1f:45:b5:24:82:fe:25:07:02:5a:47:af:
f2:1e:81:f5:6c:0a:a1:b7:ae:76:f2:b2:61:2c:81:f2:64:6f:
f1:23:0b:ae:cc:49:07:cf:eb:b7:90:62:25:6b:e7:81:19:62:
cb:62:f8:9e:e9:4c:45:ea:0a:83:a0:99:99:15:90:68:aa:4e:
3f:97:23:d5:f8:2f:8c:5c:42:6d:78:01:b7:40:6a:a8:ec:9b:
dc:b1:05:13:84:ad:55:a3:b1:46:96:f3:97:d5:c5:de:f8:c0:
f3:87:52:0a:d6:71:27:93:e3:d8:9d:4c:57:87:66:d1:6e:ec:
b2:09:4d:3b:b7:db:fa:dc:8f:b6:b3:e8:f4:1d:2e:df:a6:80:
84:20:29:b7:08:37:24:d9:d3:d0:08:20:42:8a:57:f1:d6:55:
ea:be:9c:cd:92:98:7c:4b:d2:29:0d:39:b0:81:e3:c7:bf:f4:
d3:3c:19:0d:0c:ba:33:44:4b:c9:1b:cd:6d:13:3a:0c:08:26:
d5:25:29:ea:38:23:f6:5b:37:40:95:64:d4:83:b0:f9:3d:d8:
97:e9:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:16:53 2025 by rpki-client