Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/5982C700E10811EE9C1E5D48C4F9AE02.roa
File: 5982C700E10811EE9C1E5D48C4F9AE02.roa (raw, json)
Hash identifier: Uf02OcrFBH/cqQMwYjHemDysmZduxe+ml4M5Pat75jM=
Subject key identifier: F6:15:74:5E:61:9F:EA:AF:54:25:89:37:64:E4:2F:3B:64:FB:58:21
Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial: 01C1
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/5982C700E10811EE9C1E5D48C4F9AE02.roa
Signing time: Fri 31 Jan 2025 02:46:22 +0000
ROA not before: Fri 31 Jan 2025 02:46:22 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 150435
IP address blocks: 103.41.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Validity
Not Before: Jan 31 02:46:22 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679c397e-f188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:8e:16:e0:23:a4:29:6b:2a:91:3b:b6:2f:
84:fd:da:83:99:86:ca:1b:87:7b:d0:bb:13:fb:f2:
f4:bd:6c:47:50:bd:ed:a9:2d:8d:74:70:0b:a8:4e:
21:7b:a0:33:fc:1c:23:7e:1b:2d:fc:ce:e5:15:52:
3a:5d:93:7f:d7:37:91:10:47:27:da:46:3b:f9:d6:
ec:ac:fd:72:58:4b:02:c5:8e:68:82:1f:3a:c4:45:
13:66:0d:34:34:8b:be:5c:3f:ff:eb:f6:c1:ba:9a:
3a:23:76:4e:be:47:f5:b6:87:ff:8e:55:28:01:25:
3b:58:10:10:2a:ac:d3:8b:0f:e9:c7:6a:9a:4e:29:
6e:1b:d2:19:60:1d:6c:52:1b:2c:39:cb:d4:9d:05:
59:a8:70:fa:24:48:2b:6b:9c:4c:1e:0d:67:16:be:
af:83:34:1f:9a:ad:6a:da:51:20:05:83:d2:c6:ab:
9a:61:41:72:34:6e:5f:99:2f:f9:2a:4a:f5:2f:2d:
40:7c:38:6b:1f:9a:9c:8c:79:c3:86:fc:63:c5:a7:
e7:c7:0e:65:52:e9:d9:33:9c:6b:c4:e4:2d:99:a1:
a4:33:70:7d:87:69:85:36:20:02:b1:a1:e4:3f:91:
0d:fa:dc:0a:c2:51:95:72:ae:95:e6:71:69:c8:bd:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:15:74:5E:61:9F:EA:AF:54:25:89:37:64:E4:2F:3B:64:FB:58:21
X509v3 Authority Key Identifier:
keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/5982C700E10811EE9C1E5D48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.94.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d5:53:47:5a:3a:90:d4:f0:eb:5c:38:6b:97:4b:4c:27:13:
39:8d:8c:5a:bd:96:2d:21:a4:0b:22:db:db:bd:da:40:30:72:
59:cb:2a:68:6a:13:6a:32:87:7d:21:a5:89:19:45:80:5a:ec:
8c:5e:b2:54:6b:8b:79:20:bc:00:8c:8e:d0:56:1f:c7:e9:d9:
9d:0f:7b:2d:7b:e0:b4:ce:ad:62:3c:12:7d:80:30:86:27:15:
05:bf:55:4e:58:c1:0e:62:30:d3:55:52:63:b3:56:bd:59:67:
b2:87:0b:dc:e8:e1:74:e8:d1:50:37:37:db:3d:05:34:fb:ea:
db:98:d9:e2:52:1e:f9:0c:91:8b:ae:50:ef:06:b6:d9:2a:be:
89:ed:0c:32:cb:9e:6d:17:d4:1a:f6:73:32:00:95:4c:d6:34:
e5:63:7b:92:3f:f2:fc:a7:30:94:08:15:70:8d:82:a9:23:dd:
7f:82:ed:eb:bf:51:89:1a:28:7a:ad:04:7c:8f:40:44:4d:2a:
47:5c:18:8d:f9:9b:09:77:50:79:6b:21:70:e6:55:72:ce:bd:
1c:cd:eb:b3:fe:f0:c4:28:a1:ec:52:88:5e:e6:b1:6b:35:c9:
29:01:4b:0f:4c:75:86:43:80:e1:77:93:60:b0:41:df:46:04:
33:53:28:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:19:24 2025 by rpki-client