Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/F696F52C8C7311EF995EA751C4F9AE02.roa
File: F696F52C8C7311EF995EA751C4F9AE02.roa (raw, json)
Hash identifier: IVAag2n39OgPxLOhqGGK4t8maSAxh28CoPmeH83pRE4=
Subject key identifier: DF:F6:CC:15:5A:03:85:C4:28:41:55:7F:D9:CE:EA:38:33:A5:48:D6
Certificate issuer: /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
Certificate serial: 61
Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/F696F52C8C7311EF995EA751C4F9AE02.roa
Signing time: Wed 19 Mar 2025 06:24:13 +0000
ROA not before: Wed 19 Mar 2025 06:24:13 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 932
IP address blocks: 103.224.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2364
Validity
Not Before: Mar 19 06:24:13 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67da630d-5e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:2e:6a:32:1c:fb:4a:7e:2c:3f:49:24:80:
ed:8f:8d:f4:e7:ee:6e:25:ff:dc:17:34:6e:2f:1a:
9c:0a:a7:d6:81:8e:e6:86:21:92:31:68:a9:1a:9e:
9d:a0:57:21:c3:e7:5e:66:2b:4d:b6:51:98:2f:bd:
36:e7:2f:2c:61:8b:96:a3:5b:4d:d7:5f:3d:c8:81:
6d:c4:2b:1f:8e:85:17:43:a3:13:c1:21:88:05:97:
46:73:d0:3d:60:6e:8c:03:05:ec:8f:17:db:3c:9c:
4f:f3:a8:42:8f:e7:ae:bc:cb:5e:40:a7:d6:29:bf:
1b:a3:1a:e6:3d:64:bf:33:45:4d:4a:df:90:6e:d2:
78:a5:3c:25:98:bd:e6:42:b1:04:0f:2f:b0:73:a2:
12:8f:5f:9a:5f:44:36:b3:44:e5:21:4b:9a:22:64:
33:3a:e3:a5:92:2e:9e:a9:55:8c:9f:5f:52:f7:79:
8f:cf:46:71:5e:45:f2:64:3d:b5:22:a6:fa:95:f8:
aa:44:45:33:18:fd:2a:15:a8:d4:c3:0e:e2:2b:ac:
b4:53:88:80:f5:d8:51:37:f9:e7:07:ad:13:56:d2:
86:98:70:10:c4:3f:2f:55:30:44:c4:b4:85:6d:31:
ba:3f:e4:ee:c5:24:d4:68:fa:21:60:d8:40:50:1f:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F6:CC:15:5A:03:85:C4:28:41:55:7F:D9:CE:EA:38:33:A5:48:D6
X509v3 Authority Key Identifier:
keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/F696F52C8C7311EF995EA751C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.80.0/24
Signature Algorithm: sha256WithRSAEncryption
10:08:4f:d8:4f:a8:64:8d:dd:01:2f:ae:ad:45:c3:e2:e0:54:
90:b3:d4:84:b2:02:5a:9b:1f:b2:42:fd:11:32:d8:f1:ef:ee:
19:ad:85:3c:c4:19:ab:24:8b:72:84:d8:ce:61:3f:dc:d6:d1:
fa:fe:b6:d8:fa:bb:75:61:16:1d:9a:81:4a:92:66:e0:26:b3:
4b:4b:80:c1:5f:ce:5f:6e:19:58:94:71:b5:ce:c9:b9:54:4d:
01:4c:47:7f:33:8e:3e:65:db:bb:67:98:e5:c6:e9:b6:09:8a:
e0:aa:c7:0a:b0:9a:cc:ad:ef:42:d7:c2:52:bb:f3:df:e6:e5:
a5:63:d1:eb:b2:c5:b2:e4:a8:ce:b1:3f:f6:3b:3f:31:d3:cf:
63:8b:d2:16:25:0c:12:ef:a8:f7:5a:cf:0e:65:c9:3d:2c:33:
8e:92:be:30:c7:2f:85:7a:4c:d2:76:86:bd:ca:fb:f8:1c:97:
84:fe:50:47:79:11:bb:38:c7:1e:7d:b2:6d:91:99:0d:b4:c6:
41:4f:09:7f:9e:bd:7d:fc:f0:06:43:3e:bc:4a:e3:5a:8c:d0:
d5:7f:e6:c4:18:0e:cd:58:37:7c:2f:a1:a9:b5:2d:be:b1:a8:
de:35:4a:60:12:c2:e5:73:e2:ea:18:27:ff:99:fc:4a:64:23:
7f:5d:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:37 2025 by rpki-client