Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/84706C70D12411EBAD06CD48C4F9AE02.roa
File: 84706C70D12411EBAD06CD48C4F9AE02.roa (raw, json)
Hash identifier: +VQvv+uWVXkQstiOmhvQpZ3+r0zEs8UArQ0Y/mZ6P60=
Subject key identifier: D6:F3:AA:74:23:8D:D1:E7:FE:30:BD:76:76:4F:BA:AF:7F:1D:CB:11
Certificate issuer: /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Certificate serial: 0565
Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/84706C70D12411EBAD06CD48C4F9AE02.roa
Signing time: Thu 30 Jan 2025 23:42:50 +0000
ROA not before: Thu 30 Jan 2025 23:42:50 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 134479
IP address blocks: 103.160.252.0/23 maxlen: 23
103.160.252.0/24 maxlen: 24
103.160.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Validity
Not Before: Jan 30 23:42:50 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679c0e79-1e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:f9:22:09:27:53:08:f7:e4:e0:32:80:68:
d4:60:0a:a3:14:1c:04:eb:9d:1c:a4:e9:c9:6c:6f:
b1:cd:f2:2c:21:c8:93:36:cb:37:a6:e6:25:fb:f7:
a6:38:91:6f:ed:fa:30:82:a8:49:81:df:b0:1e:3c:
21:a3:f1:0b:8e:13:05:5b:72:55:b9:25:06:01:db:
c6:a6:5d:d6:b6:ae:9e:40:37:f8:db:a3:05:11:e4:
8d:d0:92:84:3d:fa:9c:ef:3e:98:c6:23:4e:40:ee:
e5:ef:b5:44:1d:e9:2c:3e:50:b8:b4:08:84:a4:1c:
fd:32:13:84:25:69:4f:cd:61:50:06:f8:aa:b4:03:
03:b0:5c:9e:e1:64:ee:38:af:93:ab:02:9e:0d:09:
b5:37:79:8d:f0:87:a3:5c:60:3c:7d:a1:e9:1b:4d:
76:2d:d5:64:76:55:9d:0e:17:04:f9:66:e0:9f:58:
cf:c1:90:78:05:11:b8:a4:57:4b:70:b3:f2:a2:ca:
04:0b:2c:80:98:69:32:7c:70:f7:27:b7:34:02:5d:
93:da:43:65:9d:cb:58:e2:0f:fe:ff:6d:83:15:31:
29:6e:c5:46:9f:82:02:0c:d0:37:56:06:8b:03:b1:
97:17:30:7c:05:68:d8:c1:41:84:8b:f2:6b:20:e2:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:AA:74:23:8D:D1:E7:FE:30:BD:76:76:4F:BA:AF:7F:1D:CB:11
X509v3 Authority Key Identifier:
keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/84706C70D12411EBAD06CD48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.252.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:1a:a9:d8:57:3a:b6:21:eb:22:60:97:73:4f:74:50:5b:1d:
db:03:fa:4f:ea:6c:4b:17:0c:b7:c8:88:98:82:f5:d6:4e:47:
43:6f:0b:14:cf:13:76:7a:b2:6b:20:74:6a:15:96:a0:08:b4:
c8:75:2d:0e:bd:7c:3d:e2:95:33:be:73:a0:04:e0:9a:a1:49:
b2:e6:f9:38:fa:79:42:67:62:d2:c4:23:00:4a:e9:10:92:c6:
71:7c:71:89:e0:62:7d:99:6b:db:04:d8:60:6a:a5:07:56:f5:
8a:60:e3:09:e3:cd:f2:48:bb:d8:fc:d6:d2:77:79:c7:a1:31:
76:57:64:c7:26:bd:31:d0:a2:c0:cb:d0:95:7d:1f:84:71:7f:
ca:44:04:7d:c7:83:65:2d:90:fb:44:c8:c6:e7:c7:cd:dd:ca:
bb:dc:9f:d1:22:b2:a1:64:80:c2:4a:2b:9e:af:06:e4:fa:1a:
2b:b5:d7:f4:d1:c4:ae:2d:47:0b:55:30:ea:cd:eb:9e:6e:f0:
d6:0d:d5:ca:e3:ff:32:f7:12:5c:0f:6c:9a:49:66:85:1e:bf:
e6:c0:bf:a2:2b:b6:f3:a3:10:1b:d0:f6:ca:16:aa:eb:53:35:
d2:eb:99:c4:9f:ad:27:0d:96:0d:1f:41:dc:03:7c:b1:66:63:
d0:ed:cb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:08 2025 by rpki-client