Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F9B7A3BEB0A911EF8706BE26C4F9AE02.roa
File: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (raw, json)
Hash identifier: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI=
Subject key identifier: 6B:CD:2E:D5:B4:9A:A1:A8:80:97:60:90:15:05:4F:38:4D:3C:1D:26
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2850
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F9B7A3BEB0A911EF8706BE26C4F9AE02.roa
Signing time: Mon 06 Jan 2025 15:42:16 +0000
ROA not before: Mon 06 Jan 2025 15:42:16 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 141681
IP address blocks: 103.254.120.0/24 maxlen: 24
103.254.121.0/24 maxlen: 24
2401:ae0::/32 maxlen: 32
2401:ae0::/48 maxlen: 48
2401:ae0:1::/48 maxlen: 48
2401:ae0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10320 (0x2850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9
Validity
Not Before: Jan 6 15:42:16 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677bf9d8-3312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:1f:6a:c0:c8:d2:d4:e9:58:5f:a4:ca:d2:
77:12:a0:db:e0:4e:77:81:77:02:67:e4:95:54:73:
74:b7:fa:92:2c:5e:43:17:b4:6f:bf:ea:1d:ed:85:
e6:54:a3:5c:5c:89:65:95:4e:e4:24:98:0f:7b:4a:
95:0a:4b:3f:89:d0:ad:b1:60:69:c7:ea:ef:c4:dd:
8e:cc:64:9a:b9:5c:6a:41:ac:68:bd:f3:0e:50:47:
ae:75:36:1f:43:4a:2c:c4:c7:13:bd:a9:4d:85:1f:
12:f6:ad:8e:21:b8:b3:3f:a2:a1:0c:e9:23:a7:f1:
88:c5:94:8c:71:ac:d1:c3:4d:26:b5:0a:de:ca:42:
84:79:c4:2d:7f:c0:eb:ab:f0:c3:9b:5d:67:56:64:
0a:12:16:d8:c4:e3:ed:32:dc:b4:cc:e6:24:4f:05:
e1:f1:55:17:ec:3f:20:6d:2b:22:c4:f5:a5:ee:02:
78:59:16:a2:74:de:06:ee:d7:4d:d9:6f:b2:10:0b:
e1:0f:56:44:47:21:02:2e:43:f1:c9:1b:86:f3:73:
a3:be:ab:d5:1a:36:c0:80:ab:77:ef:9c:e3:c7:f3:
26:0f:42:f1:51:87:2c:bf:08:b3:58:c0:1e:4b:60:
64:07:c9:cf:07:c3:f5:4e:20:16:11:7f:34:69:fd:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CD:2E:D5:B4:9A:A1:A8:80:97:60:90:15:05:4F:38:4D:3C:1D:26
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F9B7A3BEB0A911EF8706BE26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.120.0/23
IPv6:
2401:ae0::/32
Signature Algorithm: sha256WithRSAEncryption
87:2d:02:20:aa:07:8d:75:85:52:f6:05:78:5c:c1:e3:e5:ad:
f6:de:75:34:06:ed:30:65:26:a9:f3:28:66:64:ad:92:69:da:
a8:52:4f:fe:63:60:76:42:01:f9:26:9a:7c:db:24:3f:e4:e2:
bf:fc:c7:52:04:ef:5c:ff:47:ae:7b:7f:09:d7:fd:75:f8:94:
ae:f9:d3:28:0a:95:67:c6:83:f1:4a:0d:a3:02:6f:e7:a3:24:
cc:f4:9a:b1:fc:05:76:3d:43:82:4c:34:b1:2b:76:18:46:26:
bc:59:41:fe:77:9b:20:26:e7:a7:4e:03:10:66:db:0d:14:b5:
b5:52:48:6f:c8:7f:29:f4:a9:12:98:9c:74:46:2b:9e:13:7c:
98:8c:b6:6b:f6:cf:7c:b0:42:6c:7d:47:ee:8f:e1:47:78:c2:
56:aa:9b:04:15:94:ff:3b:68:a8:16:0a:f7:6a:1c:6b:06:9d:
71:0d:e2:8a:24:d6:89:02:5a:67:39:6b:cf:1e:09:ca:2c:d0:
2d:42:09:71:5c:b0:75:76:96:69:ee:aa:97:3c:b1:9b:2b:ed:
54:9e:5a:4f:20:7b:a4:3b:e5:16:7f:7f:b6:0d:65:9d:70:68:
1b:47:40:d2:c2:85:57:b9:aa:e7:8e:94:a5:18:49:c6:01:b4:
b0:e3:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:12:42 2025 by rpki-client