Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/FACB1DC6595911ECBE6ACC6BC4F9AE02.roa
File: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (raw, json)
Hash identifier: sxCFtdRPysjFCbROcFadfDzJw+hZeGG75SF5L5NcahQ=
Subject key identifier: 5F:31:4E:53:C7:D0:45:A1:1D:1C:CC:AD:61:62:23:E2:FE:59:48:A8
Certificate issuer: /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A
Certificate serial: 0712
Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/FACB1DC6595911ECBE6ACC6BC4F9AE02.roa
Signing time: Thu 26 Dec 2024 21:40:21 +0000
ROA not before: Thu 26 Dec 2024 21:40:21 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 132058
IP address blocks: 103.158.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810 (0x712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A
Validity
Not Before: Dec 26 21:40:21 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676dcd45-699e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:d4:80:9f:78:a3:d4:6a:55:72:5c:a0:bc:
ce:83:13:9a:2a:59:1a:ab:47:ee:07:31:ae:b3:a8:
fd:a7:3c:3b:92:83:02:c2:c0:3b:49:13:15:3b:1a:
85:bf:f9:f2:ec:c6:31:7c:3c:cb:ae:8b:cc:52:85:
b5:80:7f:18:b6:4d:55:8c:ac:d2:69:d0:41:61:37:
47:da:80:ad:2f:75:c8:a3:a6:0b:5d:67:52:d0:84:
d7:01:98:cb:aa:11:96:5f:bd:05:ec:2f:dd:db:36:
6f:7e:83:df:97:6c:8f:67:e8:53:8b:88:8c:23:03:
82:54:5e:2d:3a:63:ac:de:7d:c9:95:f2:80:e8:17:
cb:99:2b:27:bf:32:16:54:09:96:b9:90:29:36:26:
b8:19:90:e1:ab:5d:78:43:3f:15:21:ca:1c:cb:55:
04:17:ae:8d:b2:bb:a2:ea:db:57:d6:8a:29:4a:7b:
79:d9:91:60:cb:b7:a8:b2:c4:8d:77:a4:13:67:cf:
d6:d0:df:38:d5:c7:d7:a0:18:f3:49:5d:00:e0:e9:
35:43:39:7e:da:24:6b:e8:c8:85:2a:68:f7:6f:4d:
81:db:72:be:39:23:e7:f6:64:83:70:ed:60:2d:0b:
e7:92:d4:a3:3e:cb:57:e7:87:aa:45:38:86:b4:f4:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:31:4E:53:C7:D0:45:A1:1D:1C:CC:AD:61:62:23:E2:FE:59:48:A8
X509v3 Authority Key Identifier:
keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/FACB1DC6595911ECBE6ACC6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.152.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:39:99:b4:e3:c6:de:b8:82:12:7f:f3:3f:d3:20:97:82:bc:
d5:07:21:dd:28:41:96:6e:f3:47:be:fc:93:fe:b1:ff:5b:74:
e6:14:c6:e5:b5:a4:ac:ac:e4:de:d7:70:4f:a4:6c:4d:7a:47:
fe:77:25:70:b6:ea:41:7b:fb:37:d0:79:44:f6:a4:a9:20:94:
e2:47:8c:78:48:33:01:84:d4:b5:29:94:12:f9:6a:46:24:7a:
dc:79:f9:38:e7:98:df:7d:49:15:36:cb:7e:45:a6:cc:25:2b:
fb:db:12:c0:d3:04:87:83:f1:e6:57:e6:76:24:9d:e0:4b:a6:
86:2a:31:20:cf:c5:d5:94:be:f8:fb:cb:bb:fd:99:8b:53:10:
96:c2:5e:a6:fa:f8:29:8a:7e:08:d5:51:81:6b:e4:17:95:bd:
b7:87:4c:7c:e7:d3:ad:d5:61:69:34:a8:ac:fd:06:8d:81:3d:
9c:69:b8:bb:1c:c9:64:41:f8:ed:81:44:d5:6d:c5:6f:90:f8:
99:54:42:1f:2a:63:9b:64:a5:3c:b0:68:82:33:75:36:4b:a5:
01:92:4f:45:ec:1d:8d:d4:71:8b:14:7d:d8:9f:2f:b8:e8:b3:
3e:3f:db:d6:62:67:f1:a0:49:19:19:2a:4a:c2:4c:2d:8c:37:
b8:0f:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:08 2025 by rpki-client