Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/F1C686AA1D5811EFA8D26E3EC4F9AE02.roa
File: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (raw, json)
Hash identifier: TkoNa9ji5ztcG7b34KFx+YNM0+7Oo5t7XfdNpMfZbEo=
Subject key identifier: 3E:28:B9:C3:3C:86:86:4C:11:F1:FC:ED:0A:9D:5F:E9:AA:F6:B3:6B
Certificate issuer: /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
Certificate serial: 071C
Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/F1C686AA1D5811EFA8D26E3EC4F9AE02.roa
Signing time: Tue 28 Jan 2025 21:50:41 +0000
ROA not before: Tue 28 Jan 2025 21:50:41 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 58507
IP address blocks: 103.81.124.0/22 maxlen: 24
2400:70c0::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820 (0x71c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
Validity
Not Before: Jan 28 21:50:41 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67995131-0cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:65:4b:6b:94:ae:53:17:cd:6a:c2:f4:5e:
2f:43:ea:34:11:30:d6:7b:64:48:db:15:98:29:ae:
02:6f:d6:cf:0e:58:15:c7:b1:7a:18:e6:2b:8d:94:
c2:34:4d:7d:2e:5a:79:37:d2:59:62:28:11:e9:20:
72:f6:1a:d8:0e:c2:16:6d:d6:d6:a9:2a:6a:4a:c4:
20:35:48:78:df:37:b4:10:94:54:f6:a5:46:c4:6d:
d6:20:28:9a:6e:f2:6a:46:20:78:8c:c0:2b:84:ad:
4e:05:1f:7e:b6:40:f3:db:2b:71:83:8c:36:e6:51:
bf:70:a5:0b:35:92:f0:c9:e6:0a:24:83:19:f1:79:
61:f2:35:32:e3:fc:86:3c:ef:b7:78:2f:94:1e:57:
08:98:21:44:ea:8c:1a:6a:0c:f0:1b:6d:57:dd:ec:
a6:4a:89:89:b0:2f:c7:35:81:ff:db:27:e3:f2:5a:
ee:5b:45:aa:6d:84:18:af:a3:60:b8:6e:71:c9:de:
19:75:81:4f:8b:b4:36:73:97:d3:d7:5b:05:2b:76:
98:53:64:52:49:bf:43:77:4f:07:9c:6e:32:e6:d7:
f5:0f:79:88:fb:c5:97:24:21:e7:59:47:3e:77:b6:
6f:51:06:f4:b5:4f:40:12:c2:ff:d3:5a:db:22:5b:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:28:B9:C3:3C:86:86:4C:11:F1:FC:ED:0A:9D:5F:E9:AA:F6:B3:6B
X509v3 Authority Key Identifier:
keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/F1C686AA1D5811EFA8D26E3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.124.0/22
IPv6:
2400:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:7d:12:e4:01:55:1d:1a:fc:43:77:b7:32:f2:bb:df:2e:25:
15:8b:b1:0c:03:88:f7:78:36:b4:dd:93:06:a4:db:29:65:85:
b5:4d:c7:d4:fc:36:3c:ab:74:41:85:e7:2c:46:b0:e0:76:bd:
36:dc:d4:eb:34:83:1a:91:3b:9a:0e:80:b9:38:11:17:62:c0:
97:e4:f5:d1:d5:72:b9:2c:9e:bf:44:c1:0d:5e:85:4a:2f:55:
b6:0f:3e:b6:6c:fa:20:f7:49:09:13:a5:a7:e8:ac:4a:5b:81:
b1:c8:72:27:a5:61:b9:03:bd:3e:60:ab:a6:e0:f5:cb:10:63:
00:38:f4:da:b3:dc:9e:6b:ae:bf:62:8c:71:69:8b:a0:26:42:
c5:59:58:0f:4b:ea:75:ba:22:c6:a4:0c:43:cd:59:63:d4:a8:
43:c9:2a:47:f1:56:67:a7:31:ee:c3:e1:9b:8f:5a:7a:1e:87:
fe:a4:81:24:05:1e:e5:c5:2d:ad:f0:80:7f:23:bd:d5:86:1c:
f1:74:44:31:1b:88:71:99:e7:e1:d9:c5:12:db:e9:ce:3d:c8:
1a:c8:53:3d:bd:25:41:e8:23:18:ca:84:f3:e0:47:7e:34:16:
9b:5c:ae:34:a6:14:99:50:55:f6:ef:53:84:17:8c:ae:15:e5:
ed:07:2d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:59 2025 by rpki-client