Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa
File: B966D678C0C611EE8F5F0458C4F9AE02.roa (raw, json)
Hash identifier: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=
Subject key identifier: E9:26:08:03:02:27:01:ED:B4:10:F4:8A:1A:6B:29:8D:F9:3B:B7:79
Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Certificate serial: 018B
Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa
Signing time: Fri 31 Jan 2025 03:19:37 +0000
ROA not before: Fri 31 Jan 2025 03:19:37 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150715
IP address blocks: 103.66.230.0/23 maxlen: 23
103.66.230.0/24 maxlen: 24
103.66.231.0/24 maxlen: 24
2001:df1:ce40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Validity
Not Before: Jan 31 03:19:37 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=679c4149-6f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:86:07:d3:85:2a:92:58:f0:b7:13:44:66:
3a:f0:b9:2b:34:bd:92:ab:a8:6a:46:6c:50:64:5d:
42:cd:62:7c:b6:d0:0f:68:34:95:c1:3e:8d:7f:b3:
1b:bd:3c:98:d2:40:28:43:36:c7:df:5b:0d:b5:16:
61:2b:6d:c6:02:1f:fa:ce:65:1d:ae:34:23:9a:d3:
0e:94:e2:dc:7a:eb:4d:ab:16:98:b8:73:20:d0:70:
ad:d8:0e:45:4a:f8:b0:cc:38:fc:e8:4c:d4:19:d2:
68:55:49:f0:82:7c:ec:a4:82:2d:85:66:ad:5b:72:
a7:9b:ac:02:6d:74:59:83:cf:83:d7:1c:7a:83:5b:
df:b9:49:9f:fe:cc:ad:2b:f1:9e:10:62:50:5c:fb:
7d:47:9e:b9:b1:13:ac:5a:62:b0:97:16:78:5f:5f:
fa:f8:b2:19:01:85:22:a7:42:84:7b:a7:d3:6a:7b:
7d:40:2d:e5:f4:c3:92:2a:05:b8:cd:a3:c9:8b:6f:
47:37:26:90:a1:33:bf:2c:bd:5b:32:40:79:af:84:
b6:b8:f3:48:20:f9:17:95:e5:b4:b4:13:c1:59:57:
0b:74:2c:c2:63:96:37:94:92:3b:c2:ad:8a:06:51:
eb:ed:97:b2:ce:0b:b0:a7:61:66:3c:0a:86:95:0f:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:26:08:03:02:27:01:ED:B4:10:F4:8A:1A:6B:29:8D:F9:3B:B7:79
X509v3 Authority Key Identifier:
keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.230.0/23
IPv6:
2001:df1:ce40::/48
Signature Algorithm: sha256WithRSAEncryption
2f:45:e0:cc:ff:a6:63:13:fb:0b:5c:c6:b4:ab:4a:9d:30:af:
60:29:de:53:d8:56:bf:60:f7:40:ce:5c:24:c6:db:d5:df:e8:
b5:ed:4f:65:d5:00:88:50:17:be:39:e7:c9:00:c3:d6:38:f2:
b7:17:a1:3d:12:d8:d0:41:61:4a:c1:6e:c5:28:b2:e9:a1:df:
52:23:9b:1e:50:25:fe:51:df:f0:38:2d:6f:3d:29:82:1a:19:
36:a3:26:ce:b3:04:c9:8a:15:ae:4b:80:4d:bc:9a:d7:74:8e:
f9:5a:b3:c8:62:68:2f:0b:1b:88:07:ad:28:8f:02:ac:48:ff:
f9:5b:32:26:8f:af:00:8b:3b:d3:0f:80:b1:9b:c3:a8:32:bc:
64:96:af:5b:95:8a:a2:6f:c6:c8:3a:0c:3c:75:f2:d5:d1:b2:
3d:c2:55:1c:ee:66:97:07:21:55:50:ff:32:89:81:ef:7c:2b:
a3:87:36:0a:80:99:0f:aa:9d:4c:06:be:8c:60:12:57:c9:b9:
0c:4a:3d:89:46:7e:5c:db:32:e8:1d:0b:fa:f5:37:55:4e:2d:
cb:4f:9e:0f:52:78:4a:b0:44:4d:5e:10:ce:5f:09:f3:1d:0f:
3c:98:ee:8b:60:ed:1e:e5:3b:fc:5c:5b:35:88:29:61:5d:95:
a7:51:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:29:23 2025 by rpki-client