Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa
File: 204E25DADE9711EC9289256FC4F9AE02.roa (raw, json)
Hash identifier: V3IIVgu8sM8pxbgFzrATS42bCzZwX2u+wtWMVmriAKA=
Subject key identifier: 0F:0D:C5:E7:92:34:F4:58:F6:35:07:B1:E2:D5:AC:4B:42:7C:5F:FD
Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial: 03F1
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa
Signing time: Sun 15 Dec 2024 00:33:29 +0000
ROA not before: Sun 15 Dec 2024 00:33:29 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 205960
IP address blocks: 103.254.73.0/24 maxlen: 24
192.51.188.0/24 maxlen: 24
192.197.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1009 (0x3f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Validity
Not Before: Dec 15 00:33:29 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675e23d9-15ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:33:b4:1d:6b:51:76:f0:05:48:fc:6d:f2:
19:67:47:e6:0f:03:24:5f:5e:43:ff:d3:3a:72:1d:
33:f7:b9:93:93:50:c1:31:55:5b:43:bd:7e:12:2f:
68:d0:0c:fb:4d:3c:a6:6d:00:86:80:ad:59:c3:f3:
97:85:5a:11:27:90:33:45:45:f8:ec:d5:83:01:dc:
f6:43:a0:63:ee:00:f9:d2:2c:d9:a2:a8:f7:af:92:
50:ff:1d:b8:35:30:9a:de:5e:ab:6e:89:dc:54:e9:
f2:f3:ed:b2:1e:85:33:49:e2:85:ad:5d:fa:22:72:
79:eb:58:d8:a7:d7:75:75:38:c9:35:8b:f9:58:3b:
5f:4e:8f:29:b7:32:5c:ac:f3:c1:6a:dd:09:28:33:
28:eb:7b:4d:f9:2d:a8:23:57:4e:a2:35:ab:e4:57:
b4:5e:4d:15:25:0e:a3:09:58:82:a2:ce:62:68:7b:
0e:33:23:bc:38:e9:9e:3a:65:47:42:1c:e2:ec:c8:
bb:7e:b0:c1:01:37:15:e8:91:66:36:9d:39:28:65:
a2:ee:41:a1:52:bc:36:3f:e2:c4:6c:3a:da:56:eb:
29:0f:ea:d2:95:fd:77:b3:83:61:6b:56:80:1f:d8:
69:bb:94:86:92:01:ea:ca:e3:13:ee:dc:7d:01:f6:
0d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:C5:E7:92:34:F4:58:F6:35:07:B1:E2:D5:AC:4B:42:7C:5F:FD
X509v3 Authority Key Identifier:
keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/204E25DADE9711EC9289256FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.73.0/24
192.51.188.0/24
192.197.113.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a1:36:87:0d:10:ca:c8:39:f5:b9:09:d6:4f:27:53:6d:d5:
8d:47:47:7e:85:0b:11:d9:15:b2:15:01:d2:3e:ed:13:7b:48:
ba:88:01:39:05:95:8a:64:b5:48:4c:15:e6:18:72:c3:9e:ad:
7b:0b:bf:63:26:2e:8a:e8:6e:e2:ad:89:bd:17:1e:da:dd:bb:
47:ca:3a:4e:94:d6:98:d2:bc:1f:b4:0d:b8:16:f0:54:f4:c4:
17:8c:ed:5e:5d:82:71:ce:ff:b5:1f:07:be:95:d7:29:7f:c7:
4b:04:b0:db:9c:cb:5a:70:ab:13:8d:62:27:c6:07:f5:73:da:
c3:93:fb:fe:93:7c:3c:3c:4c:29:0f:e2:69:39:2e:af:87:8a:
1c:63:f5:ed:59:2e:a2:91:3a:5b:42:86:ba:ea:6c:12:fc:f9:
0f:f7:b5:a2:ca:4e:c5:45:ff:7b:5c:f7:51:16:43:c1:b1:af:
1d:b0:b7:70:60:ba:ed:ef:e4:72:1a:86:a8:7d:a6:53:ff:66:
e5:8c:ce:ce:2f:01:a0:48:e6:3d:bd:ca:83:fd:cd:3c:70:88:
86:76:e0:95:eb:e3:08:f7:68:7c:d2:1b:5e:e2:32:cf:62:83:
c1:2d:fe:29:4b:7c:a2:f7:2a:4a:21:b4:67:9d:2a:10:c1:d2:
21:2d:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:04:35 2025 by rpki-client