Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa
File: AFED106A9E1511ECA4B98E73C4F9AE02.roa (raw, json)
Hash identifier: IKsBlPoiBaV1Y/8FMivKysodYXv24LUe7kGHbrSaUFc=
Subject key identifier: 55:20:C0:01:59:B8:77:FF:55:16:05:BD:02:07:6C:DD:9F:4E:D8:88
Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
Certificate serial: 033E
Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa
Signing time: Thu 05 Dec 2024 00:53:54 +0000
ROA not before: Thu 05 Dec 2024 00:53:54 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 149494
IP address blocks: 103.181.50.0/24 maxlen: 24
2001:df0:6840::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
Validity
Not Before: Dec 5 00:53:54 2024 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6750f9a1-127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:be:0a:40:d0:f9:e9:70:d0:6d:4a:55:2f:
a2:e3:37:13:3a:2e:b9:00:71:7b:b5:6a:6d:dd:9b:
ec:f2:51:b0:17:83:56:ad:40:0b:fc:46:7d:d3:27:
22:4b:05:10:ce:da:de:f7:4d:32:5b:e5:d5:27:08:
21:06:74:45:19:85:7d:0e:f2:06:7a:86:2c:40:87:
01:ef:23:41:9e:89:df:cc:f8:9b:92:fa:0c:d0:ba:
4e:2c:98:e5:ef:85:d6:7b:99:20:b7:f7:2e:ff:6a:
16:8b:0c:51:53:43:90:97:44:1b:b0:2e:e6:50:14:
06:85:7f:e6:45:a2:f8:31:f3:da:97:4c:4d:68:2a:
a1:49:e9:fa:5b:80:ec:ea:83:27:41:d2:14:b7:d8:
d7:09:a2:b2:0b:d4:f7:59:03:ed:9b:c6:7a:83:19:
8f:b6:36:a6:d0:4c:da:7f:aa:21:8c:85:3f:91:62:
2e:0f:15:8e:1c:31:c6:41:4c:48:e7:85:53:25:b0:
af:c3:3f:09:e3:23:f8:95:7c:8d:55:97:b9:a2:d4:
47:d0:90:50:f9:d1:eb:b9:39:01:5d:2d:5a:cb:e6:
3c:23:0c:76:aa:bb:9c:9b:7b:80:4f:ae:18:ef:21:
e3:d1:c2:0d:3a:44:d5:fc:3e:df:e3:25:b0:67:0a:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:C0:01:59:B8:77:FF:55:16:05:BD:02:07:6C:DD:9F:4E:D8:88
X509v3 Authority Key Identifier:
keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.50.0/24
IPv6:
2001:df0:6840::/48
Signature Algorithm: sha256WithRSAEncryption
05:6b:7f:b1:cd:c0:49:11:8a:1f:e2:c1:88:50:37:10:ab:08:
8a:ce:0a:01:23:5c:2d:70:4d:b6:80:a3:d9:63:5f:54:78:35:
e4:9b:0c:e7:5f:bb:96:a8:67:fa:c4:f0:88:dd:9a:4b:96:2d:
f2:20:1a:ba:ef:49:6e:3b:a8:bd:a2:7a:14:5d:66:b1:0a:ea:
cc:b1:30:13:c2:11:e5:3f:ab:a7:94:42:65:96:0d:ea:0d:5b:
a2:c3:20:bc:a6:97:f1:ce:92:7c:08:5e:ea:f3:fd:cd:73:63:
91:bb:18:ca:b9:bd:0d:61:15:fa:57:48:67:4e:69:9e:87:7a:
0d:d1:6a:e3:cc:eb:5d:6f:ea:26:e9:12:5e:ca:c2:a2:d5:95:
a3:2b:d1:3a:13:94:30:1d:7f:68:f4:68:b9:d4:07:15:f3:20:
91:5d:a2:a4:86:ce:d4:53:44:da:23:5e:3e:89:59:dc:83:c7:
30:68:b7:44:af:95:9c:46:3b:4a:17:14:a3:c8:ac:c0:50:3e:
76:6f:b5:f5:ac:54:63:36:b7:28:34:be:00:ba:4c:6a:62:a8:
af:09:e7:bf:fd:99:ee:c0:b3:58:89:77:48:10:c5:86:11:9d:
57:fd:11:6d:01:aa:8d:ed:e4:0d:c3:aa:fd:52:3b:6e:3c:9f:
fa:73:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:09:24 2025 by rpki-client