Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/17A27C7E116211EF8FC7E061C4F9AE02.roa
File: 17A27C7E116211EF8FC7E061C4F9AE02.roa (raw, json)
Hash identifier: cztAbxO48iiXYnmlMNinP2Teys3bNMwe8+H32sjLLV0=
Subject key identifier: 52:43:37:97:CF:AC:A2:14:43:B3:EC:AA:5A:07:3F:BF:7D:8B:06:5B
Certificate issuer: /CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Certificate serial: EC
Authority key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/17A27C7E116211EF8FC7E061C4F9AE02.roa
Signing time: Sun 01 Dec 2024 04:07:16 +0000
ROA not before: Sun 01 Dec 2024 04:07:16 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 151844
IP address blocks: 103.249.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0C33/serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Validity
Not Before: Dec 1 04:07:16 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674be0f4-71ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:35:6e:a0:2c:ca:1b:84:d9:06:ac:c2:17:
2c:06:03:13:dd:31:3b:00:31:7e:e4:b7:88:40:f9:
f4:5c:0e:df:f7:e3:56:5c:78:ad:7d:ba:a5:1a:d2:
0e:98:ea:fe:3f:25:0b:d5:68:f0:78:44:b8:e8:42:
34:85:26:0c:40:65:0e:f8:60:57:75:54:8f:dc:7b:
e2:3e:bc:6b:f3:89:9f:14:c7:cc:21:41:53:81:d1:
3d:6f:b9:b4:5d:e8:13:c5:95:b3:83:b4:8d:9e:48:
92:5d:bd:36:bc:5c:0f:d9:02:ec:8a:c7:ea:2b:39:
46:d1:df:c8:0a:51:a4:3c:5c:63:87:27:5d:75:65:
6e:c1:7a:a5:11:0d:59:22:16:39:46:b0:5d:ce:b7:
5e:8a:48:65:45:ac:07:34:18:44:30:51:ae:de:9b:
1b:5e:c9:fb:db:94:97:eb:fd:ee:be:47:51:0e:da:
10:f3:13:c0:f3:29:74:41:20:9c:c3:d9:7a:89:10:
59:f7:7c:d3:07:c2:a1:69:50:95:79:23:c4:31:2e:
ff:e5:22:a9:ba:fe:c2:e9:8a:7c:58:c5:fe:01:b0:
01:95:b0:7e:b1:f5:1b:c1:97:7a:61:9e:c2:ee:a4:
c1:e2:e7:51:be:19:09:98:61:88:f5:19:cb:da:87:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:43:37:97:CF:AC:A2:14:43:B3:EC:AA:5A:07:3F:BF:7D:8B:06:5B
X509v3 Authority Key Identifier:
keyid:80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/17A27C7E116211EF8FC7E061C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.249.114.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a7:d1:26:2f:a3:ff:41:9c:d4:29:23:4a:6f:ec:35:fd:78:
f9:12:65:69:fb:a9:17:36:ac:c6:c4:08:32:d4:58:ad:ba:79:
49:04:db:a5:c2:aa:ab:69:86:87:2c:3f:a9:19:53:29:1d:2e:
ef:e1:a8:72:5d:87:bf:7e:9a:31:82:59:a8:c4:23:44:23:6e:
64:19:70:32:79:14:7d:c8:ef:f9:ff:28:66:7b:5d:f0:20:ba:
48:e3:88:fd:7c:2f:61:32:61:1a:de:5b:58:0a:00:e5:bf:e7:
3f:b0:f1:ea:b7:15:44:37:5b:fd:6a:38:2c:f1:4f:d1:23:2f:
a1:8a:25:42:39:34:45:c1:77:3f:54:2f:43:f5:4f:9b:fb:ea:
db:e2:6b:19:37:44:12:35:0b:eb:67:8d:40:b6:a6:82:a3:07:
77:22:ea:b7:db:4c:83:c8:a4:ec:46:cf:23:e5:8f:72:78:c2:
be:2c:b0:90:23:c6:84:92:de:ff:38:d1:2e:68:8e:79:8b:35:
41:8c:43:68:96:98:63:5e:05:08:24:a3:ca:45:0d:a8:ef:84:
fb:0b:6d:7d:5c:18:c4:1b:1f:18:c5:81:34:c7:22:d0:e3:e1:
4f:da:59:1f:ab:bb:da:1f:d5:84:c3:77:8f:91:e9:79:df:00:
f7:78:59:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:25:52 2025 by rpki-client