Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/EE851FDEEC0011EFADA98F2DC4F9AE02.roa
File: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (raw, json)
Hash identifier: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=
Subject key identifier: 37:0A:2E:4E:94:15:CB:EE:F9:3D:FD:11:CB:4E:20:D8:65:D0:C1:A4
Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1
Certificate serial: 02
Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/EE851FDEEC0011EFADA98F2DC4F9AE02.roa
Signing time: Sun 16 Feb 2025 00:57:02 +0000
ROA not before: Sun 16 Feb 2025 00:57:02 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 58507
IP address blocks: 103.254.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F98B5
Validity
Not Before: Feb 16 00:57:02 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67b137de-2636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:fd:7f:bd:15:f8:68:03:26:55:a8:7d:ba:
9c:77:e9:d8:e9:86:44:c4:c6:93:46:71:db:d9:c2:
13:d7:cd:c1:c0:b5:1e:1d:f1:e8:25:f4:c5:ca:f9:
1a:09:43:b1:fd:ea:8f:dd:7b:fe:f8:ee:56:0a:33:
02:61:40:ef:16:f7:bf:d3:fa:d4:4a:57:b8:83:15:
c3:c3:6a:a8:57:be:c6:48:d9:82:eb:c0:e4:46:c7:
e5:db:3b:2f:e1:1f:b3:fb:f0:0d:ad:55:69:f3:87:
78:10:77:a4:d9:69:b3:85:d5:c2:40:70:29:bc:83:
d6:26:e9:0e:e0:87:10:a3:85:59:c8:40:d9:12:96:
15:12:8b:e9:45:28:1b:df:79:10:08:b4:ad:44:d1:
a7:88:ac:3b:8f:3e:dd:38:e7:ed:e2:8e:62:2b:96:
3b:e1:d6:e3:90:69:cd:f9:82:b1:b7:6b:a0:be:d9:
45:4b:c9:2c:32:a1:02:fe:2f:71:a1:8c:08:ac:7c:
17:a3:fd:55:d6:6d:40:f5:d3:7b:c9:30:5a:ab:93:
23:e9:80:e5:37:cd:81:b7:c4:80:cc:38:a4:83:a3:
41:cc:8e:39:5d:1e:ab:41:a1:18:5d:5d:ec:73:cd:
b0:c9:0b:f4:49:d4:61:54:4f:e2:1a:4f:16:68:9b:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0A:2E:4E:94:15:CB:EE:F9:3D:FD:11:CB:4E:20:D8:65:D0:C1:A4
X509v3 Authority Key Identifier:
keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/EE851FDEEC0011EFADA98F2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.7.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f4:37:37:dd:b7:62:08:55:9a:49:1d:ac:96:a5:fe:80:08:
a2:84:06:84:b6:66:5a:5d:d5:85:52:8a:4a:be:27:bf:e9:da:
25:3f:22:31:56:6d:0b:ae:e1:7c:4b:80:f4:27:ff:cb:74:db:
36:21:72:39:91:00:1c:a5:09:74:8c:5f:b3:37:6d:f7:d8:16:
78:48:b7:52:bf:6d:b7:5d:5e:94:2a:6e:78:1d:c6:dd:df:7d:
a9:73:8e:48:f2:bb:96:d3:32:90:ae:69:bb:70:1c:a8:30:e0:
b7:08:d4:95:34:ba:73:04:0c:65:43:aa:8d:2c:b3:c3:e2:07:
50:b8:3d:38:01:b6:55:c7:89:00:37:2a:d5:e0:6f:44:bf:b5:
57:d6:99:88:b0:f1:41:13:09:0d:99:c4:1c:76:47:5d:4e:0d:
14:3a:2a:77:07:ba:74:72:05:60:4e:39:d2:48:fb:ca:bd:70:
18:4a:e8:c8:c0:c0:da:f4:cd:f8:5d:6f:c3:ba:86:96:63:0b:
f1:93:bd:38:c5:de:33:22:c0:72:74:99:92:bc:d8:a2:a5:d6:
29:ef:a1:33:f7:d0:35:a5:5e:5b:33:4a:c9:40:4a:af:fc:50:
b0:06:52:ff:71:f1:6b:18:12:85:49:3e:b1:53:fc:5f:5f:97:
53:3d:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:19:22 2025 by rpki-client