Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/F0F97030612C11EF85AF817EC4F9AE02.roa
File: F0F97030612C11EF85AF817EC4F9AE02.roa (raw, json)
Hash identifier: 3kkH5EW9k5TTFg+XHHqI2feA7kJawsJC4SpKye1S2b4=
Subject key identifier: D9:9D:9E:7A:6F:78:7A:87:7A:1B:D6:55:2C:EB:51:38:61:F3:91:78
Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial: 1DD4
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/F0F97030612C11EF85AF817EC4F9AE02.roa
Signing time: Mon 18 Nov 2024 09:30:54 +0000
ROA not before: Mon 18 Nov 2024 09:30:54 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 138212
IP address blocks: 103.12.237.0/24 maxlen: 24
103.12.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7636 (0x1dd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Validity
Not Before: Nov 18 09:30:54 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=673b094d-679e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:4a:d1:48:13:63:c7:b6:3c:66:3b:3a:90:
71:a9:a3:dc:8a:0f:26:59:a4:10:ed:22:06:b1:59:
2d:89:6e:df:86:7c:93:05:59:08:d0:bb:36:33:d2:
ef:14:e0:12:5c:b4:c3:bb:44:89:7f:34:eb:e1:b0:
c3:8a:9b:ab:f9:a0:2c:22:b9:2d:d3:73:f9:af:29:
b6:0c:f3:97:80:6d:ae:5c:23:11:80:dd:e3:c6:2a:
35:20:32:be:0a:58:16:ff:27:6f:af:a9:a4:c7:e4:
cc:d1:cb:e7:a3:69:8b:28:64:88:44:f5:0f:d1:63:
73:fa:5d:f4:e1:0a:0f:5e:98:89:e2:1d:58:42:60:
d3:99:6d:96:c4:81:8e:38:00:6e:4b:4a:36:d4:3b:
13:f7:c5:d2:09:17:e1:b2:b2:5c:c9:6f:04:b8:73:
c3:de:4f:aa:e1:96:15:b3:fc:ed:0c:ba:99:ee:76:
eb:65:b2:db:1f:79:c8:46:ef:1f:89:86:b8:0a:f4:
ad:1c:b5:14:0c:71:d0:08:bf:87:2b:fa:be:f7:57:
fd:b1:b9:c4:7c:34:43:75:99:60:2e:19:80:09:14:
d7:15:3c:cd:75:82:fa:30:a8:7f:55:c3:3a:40:76:
6e:06:a7:c1:cc:cf:d6:13:06:b3:cc:74:ae:84:ee:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9D:9E:7A:6F:78:7A:87:7A:1B:D6:55:2C:EB:51:38:61:F3:91:78
X509v3 Authority Key Identifier:
keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/F0F97030612C11EF85AF817EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.237.0-103.12.238.255
Signature Algorithm: sha256WithRSAEncryption
74:33:24:c4:cc:e4:4c:95:53:2b:35:80:a9:d4:b3:e4:f0:b1:
7a:49:1d:c8:51:fb:c8:97:4b:81:df:8a:cd:71:c7:75:94:9e:
cb:b6:21:e3:7c:8b:04:ad:b4:b7:fa:58:14:ad:67:43:d0:07:
19:8d:39:c7:04:dc:78:f8:d9:0e:c6:2d:85:55:43:be:4d:ef:
1e:6c:91:61:d7:8d:74:ca:a4:4e:fb:c6:d4:8c:aa:f9:86:b2:
55:61:30:5f:4e:f7:d8:a3:07:a9:95:a6:98:ca:31:25:5b:e7:
ef:da:54:8d:48:53:e9:d3:b9:86:27:bc:11:15:f9:51:65:ee:
1d:5e:48:4d:9d:78:86:78:25:32:51:00:7a:18:fb:6b:99:17:
16:97:bc:a6:ef:c3:dd:74:65:47:ee:b3:4d:40:8d:f3:8b:eb:
81:a5:1f:04:ee:52:4c:41:46:2e:be:6a:e4:65:2a:4a:19:28:
85:0c:cd:09:99:1e:56:ba:4f:21:1d:b9:07:04:22:53:e2:60:
30:c9:e3:61:92:ad:74:a8:20:65:c4:2b:5f:67:0d:76:d6:3d:
7d:df:5c:20:ce:46:c9:8a:4c:2a:9b:db:3d:12:e8:54:53:30:
29:24:20:e8:8c:3c:2b:8d:10:ba:86:9e:34:b6:27:32:aa:38:
08:35:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:25:18 2025 by rpki-client