Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/70C35E88B07511EA8C0EC372C4F9AE02.roa
File: 70C35E88B07511EA8C0EC372C4F9AE02.roa (raw, json)
Hash identifier: uh8Xk70gWxRTmNYaCNUAB+Hh9CL9zqsYHo9ULlX8dpo=
Subject key identifier: 7F:E1:64:45:A2:5E:1A:F6:CF:E1:DA:12:4F:4A:71:F9:4E:4F:E3:2F
Certificate issuer: /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial: 088C
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/70C35E88B07511EA8C0EC372C4F9AE02.roa
Signing time: Mon 30 Dec 2024 20:49:17 +0000
ROA not before: Mon 30 Dec 2024 20:49:17 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 136035
IP address blocks: 103.80.100.0/24 maxlen: 24
103.80.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Validity
Not Before: Dec 30 20:49:17 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6773074d-0d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:93:a5:6d:ec:de:e8:26:4b:3d:90:fe:f4:
04:34:7f:10:ea:e6:8c:6b:0b:67:2e:cf:bf:16:df:
2b:31:4c:00:27:4d:5e:b8:b7:b2:03:6c:11:0f:d2:
f7:25:13:c2:e5:07:6c:9c:22:13:b4:69:65:64:ec:
3d:bf:9a:ff:a3:a8:a7:43:5e:ec:54:0c:94:87:72:
27:19:df:ed:ac:59:d8:ae:ef:4f:df:86:b9:ef:0c:
00:a0:27:9d:ec:b6:1c:c7:4f:e7:0b:dc:de:ba:8a:
2c:80:13:d3:b8:f2:cd:8d:c5:93:61:f5:83:1c:d5:
5a:e3:52:91:e7:b4:31:eb:2c:a4:38:b0:59:5a:4b:
86:55:6b:e3:e6:d8:6f:3f:19:7c:fb:e3:49:f8:92:
db:ea:ed:88:4e:41:df:3e:9a:21:99:6b:3b:f5:89:
59:c3:61:b1:8b:7b:91:27:c1:aa:8b:8d:59:8a:20:
2c:1d:32:c1:9d:6e:65:11:c4:5d:1a:9e:c8:c5:e2:
84:96:02:a2:3e:9b:22:82:55:45:8b:52:e1:6f:70:
2c:80:69:48:d7:be:38:be:d6:23:91:67:50:db:3e:
b1:78:fb:ca:c6:f7:be:cd:b1:51:91:1e:3d:96:aa:
44:5b:2e:eb:f8:da:d5:b5:09:03:e9:86:67:f0:5d:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E1:64:45:A2:5E:1A:F6:CF:E1:DA:12:4F:4A:71:F9:4E:4F:E3:2F
X509v3 Authority Key Identifier:
keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/70C35E88B07511EA8C0EC372C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.100.0/23
Signature Algorithm: sha256WithRSAEncryption
08:4c:4d:41:16:bb:27:7c:2b:a7:f9:78:61:6d:c9:81:0d:5b:
45:3f:26:29:09:c9:40:6a:1f:a2:85:b5:4e:b3:66:9b:a1:c7:
64:06:50:4d:a7:d1:27:af:09:88:84:fc:a3:c5:b4:95:45:5f:
d9:b5:55:a0:40:b4:e6:8f:b5:14:42:d4:0a:65:02:ab:c6:43:
ce:36:1e:2a:e3:b0:d8:06:bd:c2:fb:a5:b0:08:0c:b6:32:f0:
c3:11:2b:57:d0:1c:ff:f6:aa:92:26:96:28:df:a9:20:f1:2c:
ea:87:00:12:92:71:76:bc:f1:11:75:3a:36:d9:0b:46:48:87:
7a:fb:55:4f:7a:54:09:f7:b2:63:b7:c8:0e:7a:9b:76:a6:6a:
f3:ca:17:34:90:0e:7f:df:61:4a:71:b2:69:35:61:e9:0d:30:
c8:2e:f8:a1:22:d7:92:be:b8:fe:12:7f:9a:76:a6:ea:e8:4e:
43:84:c0:ff:44:2e:53:3c:da:d5:3e:c6:22:cf:83:b7:38:29:
b1:74:ef:c9:3a:8d:41:4c:a9:4a:1c:1b:16:bc:dd:20:00:26:
10:25:e5:ae:38:4d:81:b0:04:1a:b7:e8:19:39:66:c6:d8:79:
ee:42:35:d5:30:d5:18:a9:e5:35:8b:62:ec:54:f1:0c:32:2c:
a4:20:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:20 2025 by rpki-client