Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/D0103496FD6611EE9188C568C4F9AE02.roa
File: D0103496FD6611EE9188C568C4F9AE02.roa (raw, json)
Hash identifier: PxpNeamT7nJAO8ypf86mF4tTFHjbBgphhBI0WaQ2K6I=
Subject key identifier: 79:94:5F:DD:B2:80:39:14:87:A4:3C:7A:FB:F8:C0:C9:39:7E:8F:03
Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657
Certificate serial: 017A
Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/D0103496FD6611EE9188C568C4F9AE02.roa
Signing time: Thu 27 Feb 2025 05:27:22 +0000
ROA not before: Thu 27 Feb 2025 05:27:22 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 17941
IP address blocks: 103.83.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAA91
Validity
Not Before: Feb 27 05:27:22 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67bff7ba-af3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:87:8b:e2:1a:98:81:2f:24:17:7c:8f:e1:cc:
f4:d5:90:e7:ee:79:ec:98:d1:ff:15:50:e8:01:7f:
0a:5c:8e:9f:b8:d9:70:bc:5c:d0:3d:35:12:b2:51:
f5:5c:a5:f6:5f:29:68:9e:6d:5e:52:f4:d6:3f:1a:
79:47:5f:59:23:f3:66:d1:9d:ff:ec:52:22:71:ce:
76:12:36:89:a3:53:88:5a:f2:91:d3:fd:41:be:50:
f6:b7:02:cb:13:24:ec:df:46:93:2e:a7:52:7f:92:
10:ce:f6:c3:46:8b:8b:18:3e:b0:9e:7f:c5:6d:27:
3d:63:a0:8a:30:ae:4a:9d:01:5f:d5:1c:02:25:4f:
16:54:ba:9d:5a:86:50:ae:82:aa:1c:43:82:9f:18:
22:54:0a:66:7c:92:96:46:02:55:9c:35:25:19:eb:
9c:1e:be:5f:d7:33:59:c2:30:a8:7f:73:c0:85:bc:
60:34:db:16:e8:e3:ad:df:b0:9f:0f:20:b9:54:69:
25:94:11:2d:fa:94:fa:45:32:da:3c:7f:c7:7d:bb:
f4:05:38:a5:87:03:2d:bb:08:6f:53:67:ea:f5:9f:
2d:66:1d:66:f0:02:43:0d:7f:af:78:c6:9f:17:d3:
cd:9e:75:a3:f9:ad:11:be:72:96:c7:45:e2:72:d8:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:94:5F:DD:B2:80:39:14:87:A4:3C:7A:FB:F8:C0:C9:39:7E:8F:03
X509v3 Authority Key Identifier:
keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/D0103496FD6611EE9188C568C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.40.0/22
Signature Algorithm: sha256WithRSAEncryption
27:b9:05:f3:f7:fd:ac:15:48:47:8a:31:4a:28:27:70:b0:fc:
1c:27:14:9f:01:ba:80:91:80:90:94:4a:63:cf:eb:53:92:86:
1f:51:22:7d:69:95:4f:12:b2:31:ac:b2:13:48:77:99:e2:99:
d6:3b:ec:0c:58:16:a4:23:e4:46:eb:fe:11:17:01:b5:00:ce:
0d:f7:61:47:7f:42:2f:4f:23:9c:af:d0:b7:24:5e:d6:4a:37:
b6:d8:3a:39:49:a3:86:c2:27:6f:55:73:26:7c:b6:49:32:c3:
01:eb:0e:bb:38:69:04:46:9d:bd:cd:a3:25:99:a4:75:3b:73:
21:75:69:a2:51:d5:28:3a:88:30:ee:7e:3e:27:65:98:d3:fa:
96:67:be:5f:5e:d3:07:29:1e:e9:46:f9:30:ef:54:29:79:1d:
1d:5e:5b:e1:47:80:3b:68:53:45:bc:bc:82:3c:13:ee:bb:e4:
c5:d6:55:16:f7:bf:41:c0:56:64:25:26:33:b1:29:d8:06:71:
77:d6:ba:28:9f:0e:28:80:04:ad:b9:e0:19:8c:a7:4c:dc:5d:
76:14:d6:a9:75:1c:72:d1:c4:b4:7c:88:cb:bc:37:fd:bb:f4:
b0:26:29:30:7a:e1:83:e5:e0:b7:5a:4e:e3:b8:95:8d:2f:a8:
d6:1a:60:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:06:03 2025 by rpki-client