Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa
File: E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa (raw, json)
Hash identifier: 2xtpmScXXaLyUbphY2NiLQaHgKtiSj0MTkzGmtZ4L+s=
Subject key identifier: 15:B9:77:F1:D2:E2:88:36:62:87:D0:94:55:F7:88:8E:09:EC:7D:69
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 06F7
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa
Signing time: Sat 08 Mar 2025 22:13:14 +0000
ROA not before: Sat 08 Mar 2025 22:13:14 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 55933
IP address blocks: 103.242.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665
Validity
Not Before: Mar 8 22:13:14 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67ccc0fa-6eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:0e:3c:81:a2:cd:62:69:d1:e9:2a:7e:89:
73:79:97:fc:ee:89:d9:22:3c:3d:04:8b:25:1e:47:
f1:4f:e4:fd:8d:48:98:ec:a7:5f:e4:49:b5:97:90:
74:66:74:3f:b7:62:74:de:2f:4a:27:e7:6a:b3:f3:
cb:ee:95:e9:9e:9e:bf:8f:1b:32:55:be:57:12:42:
a4:67:b0:ec:e5:39:70:50:b8:03:dd:21:59:4d:11:
53:bc:4d:73:6e:96:d2:3f:06:b6:24:5e:4e:43:53:
5a:7e:77:61:b9:a9:05:9c:5f:a7:58:73:c3:02:2b:
9c:2e:95:23:68:45:c9:af:69:b6:0e:53:50:8c:9c:
82:70:20:3b:c6:00:d1:43:4a:2a:5e:08:4e:fd:2e:
d3:e7:36:b4:d0:32:8e:b5:91:30:bf:97:f9:b1:b7:
7b:5b:03:07:71:31:0c:91:f2:e8:46:19:7c:3d:c3:
f4:31:f0:da:18:9d:87:d9:89:02:90:11:96:14:0a:
1c:df:8f:db:12:60:96:64:33:75:2a:5b:a9:25:c6:
92:d0:a9:fe:1b:81:fc:7e:38:62:c4:36:57:38:3e:
ad:c3:91:fb:23:86:dd:10:0b:3f:7e:1f:9b:cc:c3:
36:46:91:b4:05:b0:c9:bc:e0:0e:79:23:04:92:1b:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:77:F1:D2:E2:88:36:62:87:D0:94:55:F7:88:8E:09:EC:7D:69
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E4E7B8DA4CF911EE8C66D25EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.242.0.0/22
Signature Algorithm: sha256WithRSAEncryption
04:62:33:c1:3c:12:ec:bb:df:7a:85:6f:a5:8a:82:69:ff:e0:
97:ca:2e:8c:4d:55:4f:04:23:ea:d9:be:07:b0:4f:56:af:15:
40:a0:d4:00:5a:3c:24:52:3d:83:e9:10:f1:bc:49:b1:9f:f9:
03:17:90:b2:a1:f1:39:7a:38:b5:ee:4a:c0:bd:69:e1:10:6a:
ed:d7:68:3d:46:f3:9c:54:be:21:04:e7:6b:6f:c1:9e:59:9e:
44:1c:d5:56:b8:33:57:11:36:1c:c0:5f:26:bf:d6:1a:b1:2e:
38:98:50:15:b1:f2:7a:0a:3f:0f:2b:31:8a:de:0b:93:e3:4f:
1c:06:bc:9d:08:37:b7:a2:76:58:5e:3b:77:e3:f7:af:0a:c2:
3f:92:c0:ad:54:c6:46:5d:d8:60:58:14:d6:3f:b2:32:c1:88:
5d:d6:c2:af:93:06:3e:a2:2c:58:c9:7d:ff:bc:f0:41:bd:70:
38:99:0d:83:73:8f:26:3c:f8:41:e9:bc:53:a7:88:a8:c6:f2:
0b:2c:60:e1:d5:e3:3b:81:5e:5c:92:e8:c8:6b:62:9f:56:5f:
2b:37:24:c7:7a:da:38:da:a7:80:56:da:2a:e4:bf:3c:aa:a7:
e0:00:5f:dc:13:c5:7a:52:9e:5f:c4:0c:64:84:ef:c5:be:d7:
53:98:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:24 2025 by rpki-client