Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/ED685B8CDFA511EF8CC2890BC4F9AE02.roa
File: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (raw, json)
Hash identifier: NqrZmcVp/US1PncX6fEsquuB9U+PwjdNaQFtiMmKje0=
Subject key identifier: 03:0A:3B:B2:E5:8F:96:A5:84:00:09:F3:F6:24:7A:95:7F:93:A4:E9
Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Certificate serial: 01BE
Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/ED685B8CDFA511EF8CC2890BC4F9AE02.roa
Signing time: Fri 31 Jan 2025 07:43:54 +0000
ROA not before: Fri 31 Jan 2025 07:43:54 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 47172
IP address blocks: 103.104.245.0/24 maxlen: 24
103.104.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB8C9
Validity
Not Before: Jan 31 07:43:54 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=679c7f3a-4e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:89:d4:8c:6b:02:78:51:52:71:ac:0e:c7:
f5:65:58:93:90:f2:e1:68:18:f4:a0:ce:6b:2a:57:
c3:81:54:e7:08:87:5b:4c:66:06:6a:7d:49:1a:70:
c0:07:97:b4:b3:0e:ad:ab:36:2d:6e:e5:5f:07:58:
ea:73:a8:c4:ab:fd:ba:8e:27:2c:f2:88:77:38:84:
42:db:7c:60:e8:0d:4f:ea:e3:c4:d1:41:3a:b4:a1:
3e:b7:92:b7:7f:e3:92:29:de:a0:97:8e:d3:27:f3:
e7:cd:57:cd:e7:9c:e4:63:e2:bc:2c:e9:1e:41:7b:
c8:86:49:59:2e:49:da:9b:43:18:f2:64:6b:88:ac:
16:46:9c:ee:dd:b4:a3:fd:a3:6e:3a:a2:bb:cf:22:
9d:65:21:2d:ea:2a:d0:af:1d:95:6a:63:82:96:8b:
c4:96:87:88:a1:df:dc:d4:ee:5d:2f:f6:d2:97:86:
13:86:ca:73:c2:2f:14:f8:92:c3:89:ca:57:85:0f:
3e:2d:e8:b6:86:02:07:dd:35:c0:4b:17:86:63:13:
16:83:45:99:b4:ba:27:6e:89:81:e5:46:db:23:22:
13:ab:71:f5:7d:41:18:20:92:6c:66:86:e3:81:65:
2b:c5:28:97:6b:19:cc:5f:63:4f:51:b6:c0:8b:15:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0A:3B:B2:E5:8F:96:A5:84:00:09:F3:F6:24:7A:95:7F:93:A4:E9
X509v3 Authority Key Identifier:
keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/ED685B8CDFA511EF8CC2890BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.245.0-103.104.246.255
Signature Algorithm: sha256WithRSAEncryption
52:4d:72:ec:5e:99:7a:82:55:96:3f:d3:ed:89:3f:b6:d0:78:
6c:69:a9:7a:29:ff:35:41:31:92:8c:29:2f:c3:49:cf:4b:be:
6f:a2:79:b0:e4:0a:49:73:68:31:7f:e0:4b:d3:8d:25:67:c7:
a7:6a:7a:d7:01:b2:2e:50:70:d8:35:f5:91:ce:81:f8:c9:29:
35:8f:b8:36:cc:9e:f1:56:ec:00:7b:e4:d3:a6:46:91:8b:e8:
a4:b8:02:4c:64:67:6f:76:a9:82:67:59:63:4b:15:68:99:17:
43:9f:36:5f:93:58:34:2d:eb:bb:d6:41:2b:b9:2a:6d:a2:06:
f9:76:96:2b:c3:94:68:af:04:3a:74:b6:e2:2d:6a:4d:38:84:
28:e6:9f:35:e0:19:8d:ba:f3:8e:6a:1b:d3:de:b5:40:27:88:
a8:4b:60:bb:38:0f:40:03:3d:b1:1f:9e:92:e6:68:03:0d:3a:
37:74:fe:87:97:d1:8b:77:82:ef:31:c5:c9:28:58:cf:d2:c4:
db:92:d3:97:9a:10:70:60:36:dc:5b:d2:60:19:71:84:52:94:
a1:a8:7e:11:02:24:32:4f:a4:75:0c:6e:a0:db:16:9c:ad:60:
e6:1a:48:51:91:12:81:b9:97:85:29:7d:c9:13:7c:a7:98:7a:
6b:31:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:23:21 2025 by rpki-client