Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/B780E2A097F711EF89B09770C4F9AE02.roa
File: B780E2A097F711EF89B09770C4F9AE02.roa (raw, json)
Hash identifier: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=
Subject key identifier: 27:31:28:54:61:27:24:11:28:4F:AF:CD:5A:6D:C2:9F:0D:A0:38:A4
Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial: 0184
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/B780E2A097F711EF89B09770C4F9AE02.roa
Signing time: Fri 07 Mar 2025 02:48:55 +0000
ROA not before: Fri 07 Mar 2025 02:48:55 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139880
IP address blocks: 103.163.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF4A1
Validity
Not Before: Mar 7 02:48:55 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67ca5e97-db1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:5e:91:0f:5c:0f:5c:f5:b0:74:41:25:c0:
cd:54:34:2f:a5:b9:9a:55:41:98:dc:fa:82:09:99:
7d:4e:f9:44:3e:27:5c:ab:d6:4d:21:e0:9d:ca:d3:
03:dc:8f:63:f4:85:4d:49:ac:5e:42:a2:02:d4:78:
3f:86:ad:15:73:79:b1:58:cc:84:16:41:04:06:5d:
dd:a3:2a:75:13:c9:d9:d5:cc:55:5a:31:ac:d0:9b:
ac:22:9e:2c:36:a7:dd:4b:25:19:bb:4d:c0:2d:3a:
f1:5e:10:28:9c:33:71:25:2e:a0:6d:47:bf:94:d0:
3e:52:b3:28:2a:79:62:a3:7c:bc:02:1a:32:41:e4:
89:c8:cb:b9:dd:e0:1c:b1:c2:2f:a1:89:a9:f2:76:
98:31:f7:6a:4e:3c:6c:e6:25:d7:0f:6f:69:ea:e9:
31:e6:c1:93:db:69:db:ff:3d:99:25:27:bf:57:da:
8d:94:19:27:0c:83:dd:d6:0f:b4:43:45:9f:20:c4:
67:c7:90:c5:c0:38:bf:1f:ae:14:89:81:2f:c8:e4:
6a:9c:cf:71:ae:66:35:04:9e:5e:85:b3:6a:e1:df:
f2:5f:29:f1:f1:82:54:f9:a2:6d:45:67:f2:d2:ab:
55:4a:7a:7d:6d:d6:d2:05:55:5c:17:96:56:86:6c:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:31:28:54:61:27:24:11:28:4F:AF:CD:5A:6D:C2:9F:0D:A0:38:A4
X509v3 Authority Key Identifier:
keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/B780E2A097F711EF89B09770C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.208.0/24
Signature Algorithm: sha256WithRSAEncryption
03:04:5d:b0:5c:97:31:c2:c3:9e:69:56:09:fd:b5:8f:f4:e5:
77:e1:d2:24:28:2c:ee:d2:fd:91:8e:8f:c1:e5:ec:e3:63:13:
58:77:e8:5c:90:89:e2:a6:82:86:0b:b9:21:81:d4:28:83:69:
6b:a6:3e:cc:c0:c9:ac:3a:c6:2b:03:1b:cc:52:d4:51:78:2f:
65:75:f0:3e:7d:f9:c8:5b:7e:91:96:9a:c9:59:12:9e:3b:df:
8d:19:34:97:5f:2c:14:16:f3:b7:b8:47:d1:9e:cb:ad:61:c3:
82:35:cb:b0:fe:7f:00:e7:27:57:73:0f:87:8e:25:17:be:66:
ab:6d:22:56:22:1c:ea:41:71:8f:88:a9:a8:9b:bb:29:20:6d:
7d:36:37:01:52:f9:9c:a4:e0:22:73:f6:e8:bb:6a:d0:df:aa:
df:52:73:91:a2:4f:c5:c6:be:8a:09:ae:4c:c1:92:78:e0:e1:
2f:1c:9e:3f:1c:4a:54:1b:76:62:cf:0f:49:82:c0:e7:69:9c:
8d:51:e8:3d:71:d6:89:2c:59:8b:47:51:fe:c9:30:42:97:b1:
3b:86:be:6f:3a:03:44:61:b6:eb:71:ba:58:88:8b:1f:06:82:
5d:43:a3:d2:48:88:27:4e:06:9e:c0:ff:bb:1b:65:12:a6:3f:
ac:0f:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:10:53 2025 by rpki-client