Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/67030B7889F111EFB3186A7BC4F9AE02.roa
File: 67030B7889F111EFB3186A7BC4F9AE02.roa (raw, json)
Hash identifier: jpoA3nOwURms9S72GBWIhr5w5HiTb8jNg/HLvSF6ab8=
Subject key identifier: 91:98:AF:B3:22:53:BA:E2:96:F6:4E:BF:E5:0E:36:A5:AA:C5:2A:40
Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524
Certificate serial: 1F
Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/67030B7889F111EFB3186A7BC4F9AE02.roa
Signing time: Tue 03 Dec 2024 06:40:33 +0000
ROA not before: Tue 03 Dec 2024 06:40:33 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 150399
IP address blocks: 103.30.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524
Validity
Not Before: Dec 3 06:40:33 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674ea7e1-da5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:84:03:53:b8:47:db:b0:31:e0:35:1b:1c:
d1:db:66:85:ce:25:b9:1f:9c:2f:9a:59:b7:65:63:
fc:35:fe:10:83:9c:97:93:2b:5b:3a:da:ff:3a:cc:
64:6a:52:1c:b2:25:f5:f8:05:d2:b2:12:e3:92:e3:
23:c4:44:c6:c8:78:5f:c0:e4:58:ad:e1:b4:2f:ad:
48:e4:2c:e2:06:78:bc:0a:ee:be:26:24:e0:e6:2b:
74:c1:83:6b:7c:74:73:22:a1:55:86:af:71:2a:6d:
8c:f0:86:36:6a:0b:8b:01:5c:64:07:db:e8:b7:a1:
01:81:93:1d:16:e3:1d:c5:8a:0c:7a:96:55:16:10:
da:48:df:38:0c:a4:58:5a:a6:21:a6:04:00:cb:90:
75:6f:27:ef:ec:97:e8:59:e0:f7:ab:6b:85:55:c2:
7c:29:eb:fb:fc:24:39:7e:dd:0d:f7:bb:c4:44:55:
73:49:68:30:37:2a:ca:32:f3:54:5c:60:bd:de:e7:
8c:b3:23:07:84:9c:15:51:f2:4f:8f:a6:77:00:c6:
29:a4:f5:28:fa:85:a0:f1:d7:f6:b7:12:4f:84:4b:
a1:19:c6:97:8c:99:34:87:03:eb:f8:d5:b0:fc:3d:
1d:09:ea:2d:00:ff:98:60:2d:b6:a9:ce:0e:b6:42:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:AF:B3:22:53:BA:E2:96:F6:4E:BF:E5:0E:36:A5:AA:C5:2A:40
X509v3 Authority Key Identifier:
keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/67030B7889F111EFB3186A7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.60.0/23
Signature Algorithm: sha256WithRSAEncryption
55:ae:79:81:e0:bd:ae:85:1b:69:c7:a0:49:cd:20:9e:86:b9:
cd:81:31:10:3f:8f:a2:0c:73:07:b3:ca:6e:09:f3:1b:9f:d0:
f0:c4:03:cd:05:90:87:33:18:cc:8a:ba:f9:2f:cb:e0:ac:62:
9f:15:48:1f:c7:d3:17:d3:87:80:d4:7f:7b:33:ac:86:9a:d1:
b0:90:b6:ee:f3:5e:4f:78:7c:62:3a:5d:80:c9:ca:c3:ad:0a:
0d:2c:0a:00:86:94:2e:79:5d:11:87:9e:ff:21:36:d6:95:71:
c2:2f:4a:b5:f9:63:57:53:b0:16:8b:0a:f9:bc:1b:20:5f:e7:
d4:71:b1:be:5b:74:d4:5f:0d:48:6b:99:1b:f4:b2:00:91:cc:
57:af:d4:d2:3a:0f:6d:17:0e:e5:54:59:27:76:43:a4:bd:64:
f8:34:34:e0:00:ee:f9:f2:53:d5:d0:e0:b9:4b:9b:18:ee:88:
d7:18:9c:9f:bd:88:e1:63:86:d5:45:cf:f7:03:96:04:bc:8b:
02:fe:11:3f:69:36:a9:33:d0:25:19:d8:90:84:eb:5e:bb:6f:
82:2c:9a:40:e8:e4:43:b9:18:3f:1a:27:17:63:97:5c:30:ed:
3b:57:81:88:d1:ef:fb:33:ba:44:9f:3f:9b:76:5d:9b:77:fa:
fd:1d:ec:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:34 2025 by rpki-client