Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/FEDE0F2066C611EC93A73A3DC4F9AE02.roa
File: FEDE0F2066C611EC93A73A3DC4F9AE02.roa (raw, json)
Hash identifier: OrbaAoDN+OT8Q5oOwIoJmcxxZsgOvnH47cr4vwyZT3M=
Subject key identifier: B7:C3:79:CA:EE:1F:76:AD:3D:B1:79:88:DD:1A:F2:87:32:40:E8:1E
Certificate issuer: /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
Certificate serial: 03E8
Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/FEDE0F2066C611EC93A73A3DC4F9AE02.roa
Signing time: Fri 31 Jan 2025 00:45:25 +0000
ROA not before: Fri 31 Jan 2025 00:45:25 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 133585
IP address blocks: 103.178.100.0/23 maxlen: 23
103.178.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1000 (0x3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
Validity
Not Before: Jan 31 00:45:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679c1d25-9d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:93:8c:1a:45:0f:79:59:4a:b6:37:9e:a0:
9f:f5:73:23:c7:0c:21:92:01:e9:f7:3d:b1:a5:e9:
c0:d7:5d:8b:7e:85:8c:10:d4:0a:38:5b:c5:aa:da:
51:7b:93:55:f5:26:4f:49:76:b3:46:9b:c7:ad:c3:
ae:18:65:4f:b3:d6:7f:18:96:b6:4d:f5:de:ef:b9:
2e:46:24:e9:c5:97:14:c7:6a:e4:1b:70:5a:10:33:
52:68:96:94:7d:ff:c5:dc:e9:14:89:d5:73:7a:6f:
75:9a:02:97:77:75:ee:11:2e:46:cf:91:a0:c7:50:
75:4f:23:5a:2b:07:3e:06:21:ed:30:e8:80:93:a2:
68:17:d5:63:9e:aa:7b:ab:7f:09:b0:ca:04:98:f4:
86:1b:f7:4f:f7:f2:88:68:60:dc:4b:56:ae:2b:cb:
a7:2d:3c:1d:02:6e:69:c6:e8:b6:c4:36:26:74:dc:
6c:0f:5f:5b:06:8d:5a:1c:6e:a5:07:9f:15:2e:2f:
2c:c8:04:3f:6c:00:64:9c:3c:41:71:76:e5:01:77:
82:16:6a:34:8c:8a:5f:af:74:f5:de:a5:08:93:c5:
9b:79:01:b6:de:22:56:db:eb:b9:93:19:e3:98:17:
6a:f3:c8:d2:f3:85:35:a3:86:61:88:c5:1a:4f:59:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C3:79:CA:EE:1F:76:AD:3D:B1:79:88:DD:1A:F2:87:32:40:E8:1E
X509v3 Authority Key Identifier:
keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/FEDE0F2066C611EC93A73A3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.100.0/23
Signature Algorithm: sha256WithRSAEncryption
59:c2:1a:dd:e9:e1:28:2f:c4:bf:ef:d7:26:c2:df:53:b8:88:
f6:ae:12:54:4b:c2:68:80:55:d9:de:1b:62:7f:f6:63:28:b8:
20:57:35:d2:2c:b4:d6:37:02:0a:90:ec:6e:6a:09:b3:43:95:
8e:b3:c7:b5:4d:7b:db:ae:e9:11:5a:80:dc:dd:99:9d:11:cb:
b8:e5:f3:02:4b:8f:51:1d:5c:46:3d:d3:73:e0:56:cf:e9:15:
1c:8c:cc:04:44:1c:bc:0d:c8:65:1a:13:21:fb:d3:0e:4c:ac:
e2:13:04:02:8f:d1:19:11:7a:8b:49:10:3c:c3:e3:fc:64:8b:
24:00:26:f1:18:c5:5d:d5:d3:c4:06:61:c7:1c:d9:92:5b:4a:
c3:c7:0c:2b:07:dc:44:33:80:7f:07:8b:3b:77:b0:5a:b2:ad:
ab:dd:5b:a1:cb:e6:c4:b2:56:b2:6d:5b:9b:93:c0:66:58:bd:
c1:84:b5:24:b9:68:99:b7:d2:5e:cc:25:29:71:16:7d:46:ad:
c9:9e:13:42:35:25:5e:d7:39:5d:a0:91:7a:d9:36:45:62:a5:
7a:0a:ae:14:66:b5:50:b3:b1:d2:c0:28:2c:cc:ec:c2:cf:06:
a6:7c:a6:c8:a7:62:fe:72:f6:a8:c0:c9:80:f2:b9:df:2d:d6:
c6:77:f6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:46:34 2025 by rpki-client