Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/F2F0E3FE882E11EFB58CD069C4F9AE02.roa
File: F2F0E3FE882E11EFB58CD069C4F9AE02.roa (raw, json)
Hash identifier: xhTjRYAmVfOwQQSsGsr7HfgpLZrnPmaYeWIc+EpYBdU=
Subject key identifier: 6C:5A:A1:03:47:A9:E7:7E:70:87:BA:4C:B3:11:C9:8C:CA:A9:5B:45
Certificate issuer: /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Certificate serial: 0E
Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/F2F0E3FE882E11EFB58CD069C4F9AE02.roa
Signing time: Sat 12 Oct 2024 00:14:30 +0000
ROA not before: Sat 12 Oct 2024 00:14:30 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 140499
IP address blocks: 103.151.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Validity
Not Before: Oct 12 00:14:30 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6709bf65-3d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:c9:c2:f4:6e:cb:d0:a2:a9:26:23:66:85:
f7:99:5c:4d:80:ba:ce:a2:ee:6c:09:fe:48:d8:33:
f3:70:2e:9f:6f:ec:91:95:6e:34:b3:e7:10:a6:35:
3e:c1:c5:c3:92:a9:d3:36:bf:85:bf:ce:18:fe:b0:
c4:55:58:e6:6e:c9:55:96:c6:c4:b8:88:99:57:7a:
f0:e8:66:bb:bc:5b:39:bc:04:fd:ce:0b:3f:94:1e:
ed:38:ff:0e:20:ab:47:49:fc:6b:6d:dc:ed:b9:7e:
9a:6e:4d:3c:a0:40:ac:e9:dd:7e:b7:a8:78:df:9c:
22:0c:81:8a:a7:00:78:eb:b8:a9:51:ec:19:1a:f2:
5c:bd:9b:e8:31:a7:b4:ca:87:61:6a:87:a9:c7:98:
45:94:9a:8a:2b:4f:66:91:39:23:be:9e:0f:b1:9f:
2d:f9:74:05:b8:f3:a0:d2:77:01:9d:09:9d:51:d0:
d9:a3:d3:75:e5:f4:0c:a0:85:94:27:8c:28:0d:b6:
ce:4c:2d:35:1b:97:33:92:0d:1f:18:12:5b:40:fd:
81:8f:1d:2d:6e:19:da:f1:b3:a2:50:d7:3f:15:94:
79:b6:ea:0d:e5:ee:89:4d:6f:68:56:48:38:82:cb:
aa:ea:24:64:53:1f:74:e3:0b:97:7b:81:01:f2:36:
e7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5A:A1:03:47:A9:E7:7E:70:87:BA:4C:B3:11:C9:8C:CA:A9:5B:45
X509v3 Authority Key Identifier:
keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/F2F0E3FE882E11EFB58CD069C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.110.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:2d:09:52:26:11:14:f0:b9:b3:bf:55:c6:65:ca:04:c9:57:
4a:7c:78:39:d4:f0:f9:b6:63:61:c2:f4:45:75:eb:4b:83:0c:
f7:59:ae:b9:da:b4:41:3d:62:db:f0:ab:49:4a:bb:e0:fc:02:
24:0a:3c:f5:63:cd:2b:71:33:6d:af:8c:79:a5:90:33:3a:e9:
a2:6a:1a:b6:d8:9e:c2:b0:0c:c2:13:aa:27:77:e2:92:7b:c2:
50:ce:32:d5:31:e9:d1:28:08:f3:d7:6e:e8:36:8d:33:95:b5:
8d:2d:ef:76:52:dc:ff:5c:f6:a7:30:12:6f:2f:bb:49:24:ea:
d7:fd:03:73:9e:6f:a5:c5:b0:88:47:60:fe:f1:a7:da:e2:89:
c4:18:2a:26:4c:25:82:b9:c9:2a:70:2e:c1:c2:0e:2d:b5:e8:
ec:86:a8:84:cf:bd:b0:e2:9b:3c:41:00:ac:96:39:16:31:1e:
4b:fa:b8:60:ca:cb:05:8b:2e:74:b2:b9:cc:43:28:80:05:a3:
f0:ec:54:8d:3d:bb:4b:a2:98:5e:2b:53:38:5d:74:80:5a:09:
e2:9d:4c:82:f3:3f:d9:37:b1:62:65:f9:36:34:5a:e1:77:36:
25:be:27:9c:3b:30:fc:41:df:57:c8:73:20:10:d7:8e:c3:3a:
be:9a:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:29 2025 by rpki-client