Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa
File: 6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa (raw, json)
Hash identifier: UPzNqHZtzAjVZqphmOfv2Hp1UJdFW2/M83hc9R8RBqA=
Subject key identifier: 85:C9:41:2F:B6:08:2D:92:77:3E:A0:F7:AA:B2:D4:B2:11:AF:DA:02
Certificate issuer: /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA
Certificate serial: 0184
Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa
Signing time: Fri 13 Dec 2024 02:36:01 +0000
ROA not before: Fri 13 Dec 2024 02:36:01 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 53766
IP address blocks: 103.48.252.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA
Validity
Not Before: Dec 13 02:36:01 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675b9d91-816f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:eb:cc:88:5a:aa:3e:55:0b:2e:43:58:71:
9b:b3:89:28:2a:c8:3e:12:ab:0e:c9:b1:98:7f:9b:
b1:de:22:23:66:67:da:78:8d:da:6b:63:43:be:61:
7b:c0:e3:c9:0c:22:96:19:54:66:14:22:84:f1:ce:
75:78:39:e3:81:ca:db:05:02:dd:43:29:da:0e:19:
76:2c:54:34:80:18:e4:38:59:a0:e4:0b:58:a9:59:
50:9d:c3:d5:3b:61:92:3f:cf:b0:f0:ec:a3:36:fe:
b5:57:bc:96:5d:d8:cb:93:79:c9:5b:29:78:2f:06:
2c:0f:ed:a5:eb:b2:42:ca:6e:34:d9:46:05:03:e9:
e3:b6:2e:60:53:07:4a:15:ec:d5:08:05:f4:b9:f5:
cb:7a:dc:7a:6f:f0:4c:71:6c:6c:23:5b:17:57:e6:
71:8c:56:0c:53:dc:9e:ee:51:89:33:46:dd:ce:93:
af:8c:a4:ef:52:d9:6a:e6:de:5c:9b:d5:32:ed:9c:
e5:8c:cd:a1:78:e9:5f:4a:7a:9d:8e:35:35:d4:ff:
8d:4c:4d:ec:18:8f:8c:11:03:f2:a1:54:bc:d8:7c:
0e:a8:68:71:19:43:60:2f:32:b1:06:5c:1e:40:43:
97:ab:85:68:45:a1:b7:d8:c8:26:be:9a:98:5b:33:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C9:41:2F:B6:08:2D:92:77:3E:A0:F7:AA:B2:D4:B2:11:AF:DA:02
X509v3 Authority Key Identifier:
keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.252.0/22
Signature Algorithm: sha256WithRSAEncryption
63:6b:3e:1c:30:c4:50:9a:9a:fe:60:1e:30:68:31:94:84:c4:
53:cc:66:fb:35:c1:c9:15:ad:1a:26:21:2e:ea:1f:ee:c3:30:
cb:df:09:4b:59:ff:bc:1f:52:5d:f8:00:56:55:8f:5a:62:cf:
e2:4f:4c:8d:14:4f:d8:84:ba:6a:09:be:20:91:fa:b7:a9:16:
79:c4:ef:60:cd:f9:04:60:fd:e2:90:6c:38:c4:e8:ea:cb:c1:
e9:0b:10:84:a0:b6:75:e1:cf:dd:34:db:d9:3c:3b:98:24:37:
4d:ac:27:61:9f:57:47:ef:2f:3d:66:a7:4a:82:3e:c1:5b:8d:
c1:bd:39:b5:3b:39:a5:48:b5:95:76:31:3e:61:df:32:c9:65:
dc:38:2c:48:53:c6:a4:75:dd:8e:72:b3:ab:66:f8:44:e5:7d:
c3:f9:74:6b:ef:72:44:db:ed:a9:03:9a:9e:6a:cb:90:70:2d:
2a:d3:b3:f5:5f:3d:a4:55:73:9b:99:bb:9e:a7:d8:1d:2e:99:
f4:a7:b2:72:0d:cc:84:71:b7:08:94:a3:52:74:7a:a5:3e:70:
6f:0b:81:d3:d9:02:5e:00:d8:a6:42:fb:d5:34:75:65:c8:7f:
ff:c4:84:39:71:71:00:cc:37:fa:e9:ca:99:2d:51:58:e8:db:
34:1d:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:02 2025 by rpki-client