Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/7AAFF88446BA11ECB8463B6AC4F9AE02.roa
File: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (raw, json)
Hash identifier: 99qqJ/9zYRnGxyVxwuHlA7p9+YSeHXLL4eIfJ57Oqyk=
Subject key identifier: A7:40:90:AD:5D:EC:46:71:07:46:12:8D:C7:E9:51:62:8F:06:A2:DA
Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Certificate serial: 0461
Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/7AAFF88446BA11ECB8463B6AC4F9AE02.roa
Signing time: Thu 12 Dec 2024 23:43:33 +0000
ROA not before: Thu 12 Dec 2024 23:43:33 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 9744
IP address blocks: 103.203.48.0/22 maxlen: 24
116.213.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1121 (0x461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Validity
Not Before: Dec 12 23:43:33 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675b7525-706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:24:8b:37:1d:93:ad:6a:37:42:7e:5d:c4:
86:d5:bd:76:c7:f8:72:04:1f:5a:87:1a:ef:93:f4:
5a:e0:d5:d2:c0:dd:79:a6:bd:d5:8a:06:36:de:82:
a3:1e:17:1a:91:f3:08:82:0b:b6:24:f0:3c:fd:4c:
47:29:0c:33:45:cb:33:f7:7a:8d:6b:ae:3d:8b:dc:
cd:b3:5c:86:48:b1:17:54:6b:5a:e3:40:c7:4e:f2:
f9:0b:d4:17:42:9d:d0:da:94:5d:4f:9e:a5:31:85:
de:48:82:5e:85:d2:98:d9:d0:da:f6:21:31:4c:e8:
d8:be:b7:f8:47:1f:6d:92:f9:ee:e0:3a:db:b7:c7:
bd:70:da:6f:ee:3a:60:fa:dc:20:ed:b8:84:bb:31:
b4:1e:d1:5a:cd:cd:b6:e4:7e:c4:25:9d:34:ef:e3:
54:8c:9c:dc:28:19:74:1f:d9:5f:de:1d:bb:fc:a3:
94:e9:f7:1d:52:de:f9:3d:90:b1:a4:86:be:5d:ce:
90:74:67:cc:b0:9f:df:7d:ef:aa:03:92:ab:0b:5f:
a0:df:08:82:9a:a3:e7:05:19:3e:fa:7b:1a:85:db:
15:53:63:d0:8e:16:0b:44:5b:fb:3a:b0:8e:db:6f:
aa:ce:13:b2:a3:28:0e:95:18:4c:0f:d2:fc:ef:48:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:40:90:AD:5D:EC:46:71:07:46:12:8D:C7:E9:51:62:8F:06:A2:DA
X509v3 Authority Key Identifier:
keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/7AAFF88446BA11ECB8463B6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.48.0/22
116.213.36.0/22
Signature Algorithm: sha256WithRSAEncryption
52:cc:eb:de:a3:12:9a:7b:f9:b5:0a:75:4e:b0:c0:5f:69:98:
54:58:00:5c:3f:3a:36:04:23:4f:b3:ce:63:79:7e:ac:37:97:
8b:18:82:c2:8e:9d:ed:f4:34:4c:5c:36:d4:5a:38:33:60:84:
bf:a2:6f:8e:f2:61:61:74:b7:03:66:99:31:00:3a:97:df:b6:
01:93:46:db:e7:96:4f:16:4d:79:06:99:12:2a:b2:c6:0c:63:
bb:01:2d:a8:76:c2:18:d8:fe:09:31:03:34:ef:c1:0e:fc:fc:
a9:5b:02:ba:92:a9:09:de:3a:da:3c:1f:6d:35:03:f6:b2:b9:
99:18:90:db:2b:4a:16:45:9a:ca:7b:37:9c:17:f5:35:14:79:
68:3b:af:a5:de:66:f9:00:b8:b5:a2:2f:c6:9a:82:f8:9b:27:
bb:00:4c:c1:97:3f:13:f0:84:e6:3a:c9:4f:b2:3f:73:ff:16:
57:b6:b2:7a:85:a2:06:54:08:23:9b:20:34:dd:01:29:c3:e9:
d9:4e:c1:3b:f5:4b:8c:88:f2:e9:9d:93:87:23:68:dd:1b:4e:
3d:37:3a:f8:d1:47:13:c1:9e:8d:96:99:51:f4:54:c8:e6:73:
7b:6b:f1:b2:9a:ad:f9:4e:eb:93:e6:ec:09:26:35:79:08:13:
d2:90:43:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:44 2025 by rpki-client