Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/105CB01A830711ECB472CA0AC4F9AE02.roa
File: 105CB01A830711ECB472CA0AC4F9AE02.roa (raw, json)
Hash identifier: P0BhZPNBq4fF0iWoLAGwiGCR4fuUazibBS/DViNXhlI=
Subject key identifier: 3C:E9:42:65:67:3A:E1:0D:01:A9:66:30:A1:9D:34:3C:B4:5D:A4:0F
Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Certificate serial: 05FF
Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/105CB01A830711ECB472CA0AC4F9AE02.roa
Signing time: Thu 02 Jan 2025 22:52:20 +0000
ROA not before: Thu 02 Jan 2025 22:52:20 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 23930
IP address blocks: 203.175.1.0/24 maxlen: 24
203.175.2.0/24 maxlen: 24
203.175.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D91
Validity
Not Before: Jan 2 22:52:20 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677718a4-ad5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:b3:a4:f5:46:c4:36:9d:b7:4d:db:37:66:
86:6e:2c:59:a6:38:f6:a5:12:2b:4c:2c:f5:58:9f:
be:5b:3f:9b:2a:eb:f6:45:38:be:57:49:16:93:f1:
bf:e7:7e:04:60:9b:09:9c:0a:79:ec:44:cc:29:90:
ec:ed:f0:ca:13:30:02:12:a8:12:31:85:e2:24:82:
ab:bf:30:23:9a:30:2e:9e:ce:71:7b:1f:9a:56:0d:
be:de:28:88:c0:b3:a9:4b:03:1f:2f:d2:32:75:80:
5b:ce:ac:40:b6:47:77:03:23:da:a1:e4:5a:34:29:
1f:f7:37:e2:b9:63:43:41:a3:0b:74:98:50:2e:51:
6d:8c:c3:fc:28:09:e7:65:23:f3:2f:2a:c8:9b:e1:
8a:fb:7c:f4:1c:72:99:3a:09:d7:9b:8a:af:3a:ce:
63:35:a4:15:35:a0:bc:9f:e3:01:e2:44:06:97:c2:
e9:29:fe:91:16:59:c5:c0:62:1f:55:70:34:0b:0a:
6a:bd:45:b8:25:6b:5d:d4:17:e1:de:f4:4c:4d:2a:
a8:b3:8e:8c:f9:d0:ae:20:a3:17:8e:8a:7e:f1:9f:
ca:c3:4f:c3:c3:47:1b:d6:eb:db:49:fa:0f:0b:a8:
56:20:ad:3a:0f:9c:ab:93:ce:05:b3:47:df:8d:53:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E9:42:65:67:3A:E1:0D:01:A9:66:30:A1:9D:34:3C:B4:5D:A4:0F
X509v3 Authority Key Identifier:
keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/105CB01A830711ECB472CA0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.175.1.0-203.175.3.255
Signature Algorithm: sha256WithRSAEncryption
3c:2c:fe:6a:76:90:af:f2:10:5b:b0:8c:b6:8f:97:51:c9:ea:
b3:30:06:48:3a:33:07:da:b8:9f:8a:ef:59:8c:16:fe:eb:53:
ed:40:6c:96:fe:83:8c:1f:c3:61:09:0b:b9:54:95:41:f8:97:
cc:9e:37:c6:3b:02:59:ec:7d:ff:bd:46:41:0c:9f:55:3a:6a:
9f:16:35:e5:cc:73:f8:77:66:e1:f5:33:50:f0:36:02:07:bb:
b8:ec:47:30:0d:3f:91:f0:72:ee:09:95:50:54:b7:fb:e8:d3:
ee:69:0f:7d:75:b1:a0:fe:f6:a9:73:ca:e4:53:3b:25:85:32:
90:fb:f0:a8:78:dd:a4:4b:13:2d:99:c4:f6:db:86:c1:5f:6f:
88:40:d2:2c:56:b5:4f:8a:a1:e6:8f:32:84:5f:0b:28:b0:3a:
a7:bd:59:f1:66:31:33:d3:65:a6:a4:3f:ef:c6:3f:e3:b1:ed:
9e:2d:9f:33:8d:2e:b8:7d:86:07:77:8a:84:39:27:8d:4c:30:
b8:c4:2d:18:9a:45:b5:8a:df:58:37:82:ed:74:b0:8a:57:dd:
9f:10:ad:f3:ba:39:95:4a:5d:60:da:20:04:87:f9:92:d4:3f:
36:5d:0d:4f:39:62:a6:f8:f1:b3:7c:cd:37:4f:82:c2:4b:70:
9d:81:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:39:52 2025 by rpki-client