Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/71C26BD039D211EB84B9FD6BC4F9AE02.roa
File: 71C26BD039D211EB84B9FD6BC4F9AE02.roa (raw, json)
Hash identifier: 1uZF2QAxlIwO0QnFgrG3CrAusMfAKjQaAjjZhLnhprI=
Subject key identifier: D4:AF:98:BB:1B:B4:A1:24:73:A1:50:DC:55:C1:98:D8:BB:1E:7A:B0
Certificate issuer: /CN=A91C4060/serialNumber=E21F24E0C54DBB93F667814402D66AD408071114
Certificate serial: 06D7
Authority key identifier: E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/71C26BD039D211EB84B9FD6BC4F9AE02.roa
Signing time: Mon 06 Jan 2025 21:41:19 +0000
ROA not before: Mon 06 Jan 2025 21:41:19 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 137388
IP address blocks: 103.107.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1751 (0x6d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4060/serialNumber=E21F24E0C54DBB93F667814402D66AD408071114
Validity
Not Before: Jan 6 21:41:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677c4dff-36e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:c2:a3:69:fd:09:68:a3:14:f0:12:92:18:
c9:d5:50:85:e6:a1:36:59:10:2e:80:63:54:23:67:
50:ae:b8:0c:73:f0:09:6d:f6:cb:a9:69:b2:39:19:
14:a1:f1:5a:81:76:cf:42:f3:24:9e:41:1e:1f:dc:
be:5c:de:bd:19:d4:fc:a1:f9:b0:a8:8a:cc:3c:a4:
24:3a:db:59:f7:4a:01:9d:90:84:74:a9:6b:90:f4:
e9:e8:f1:b0:4f:9a:a9:64:8f:b9:a6:9f:f6:61:b3:
81:df:a1:4f:52:92:e6:92:b1:dc:99:ff:b4:52:3b:
34:a1:5d:7b:25:29:4b:ac:e5:90:55:ba:a6:0c:76:
1c:36:fe:95:8d:31:6d:f6:06:f3:84:d6:0b:3e:12:
65:07:ce:17:b3:6e:f3:d6:03:8c:4d:a0:82:1f:4c:
04:dc:d0:32:69:ea:87:0f:2b:9e:b5:b1:15:90:80:
e8:28:a1:2b:96:9c:69:da:b0:78:ff:0c:c6:4a:82:
23:57:77:05:7b:ec:63:d9:13:b5:09:c9:b3:77:69:
f4:bd:d3:ef:6d:ac:cf:7c:98:99:76:fc:75:2b:07:
63:56:44:a0:ac:2e:c3:a6:6d:35:29:44:a8:b9:9e:
fe:ba:f3:02:74:bc:e3:0c:5c:3b:d9:9a:6c:95:7a:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:98:BB:1B:B4:A1:24:73:A1:50:DC:55:C1:98:D8:BB:1E:7A:B0
X509v3 Authority Key Identifier:
keyid:E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/71C26BD039D211EB84B9FD6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.39.0/24
Signature Algorithm: sha256WithRSAEncryption
66:78:27:19:c1:8a:57:df:51:22:fc:7f:59:38:e6:c4:65:1c:
49:05:ca:d8:57:61:f6:d9:76:56:76:f0:d1:ed:10:35:bc:6d:
f9:28:bd:78:14:51:a8:08:46:20:ab:e6:c4:86:47:32:09:40:
f4:d2:40:a2:cc:21:0c:63:18:5c:88:77:16:45:aa:09:78:2a:
e5:97:2e:6c:30:17:70:92:19:94:d0:c2:e8:97:7b:89:da:d5:
09:51:b4:4d:17:0b:fc:01:aa:c8:55:40:2f:5d:03:aa:2e:37:
80:8b:83:cf:57:d2:f4:19:b3:c9:fe:cc:26:c0:35:89:6b:25:
e9:98:46:58:cb:22:4c:9c:1e:90:e5:7b:0d:ea:37:8f:cc:0b:
42:d5:a5:0c:94:a9:fc:bf:39:87:77:bd:77:c4:d5:8e:e6:98:
ec:a9:ac:ed:d0:97:9b:01:a2:fb:e7:39:b4:67:28:24:04:82:
92:ef:61:18:70:da:a8:71:f0:11:b3:21:36:50:09:32:59:a2:
2a:35:63:7f:3c:da:fd:17:2c:95:83:10:bf:71:96:5f:29:0e:
06:02:39:54:21:f3:7f:5b:f8:71:c1:16:5c:31:e7:a4:12:85:
38:5b:05:00:d4:2b:77:92:23:55:0f:1e:02:3e:16:61:b6:f5:
25:3c:61:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:22 2025 by rpki-client