Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/09DA4C5E1B6911EB9D105D47C4F9AE02.roa
File: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (raw, json)
Hash identifier: RjQP2jIcBfXSvlr7oBois/UfqLtM6CkMs+5WoViA88w=
Subject key identifier: 04:4F:F5:C4:0B:7F:22:A2:5B:57:A4:6E:D8:1D:FB:20:FA:70:D4:D6
Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Certificate serial: 0710
Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/09DA4C5E1B6911EB9D105D47C4F9AE02.roa
Signing time: Wed 04 Dec 2024 21:40:36 +0000
ROA not before: Wed 04 Dec 2024 21:40:36 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 141375
IP address blocks: 103.157.202.0/23 maxlen: 23
103.157.202.0/24 maxlen: 24
103.157.203.0/24 maxlen: 24
2001:df5:2c80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Validity
Not Before: Dec 4 21:40:36 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6750cc54-f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:97:c1:ee:01:0a:c6:2f:d2:9c:4c:44:1d:
ee:0a:eb:16:de:01:3e:22:94:5c:6e:1f:fd:52:7f:
31:3e:0c:9e:f7:bc:12:89:ce:89:96:dc:23:ee:5f:
82:f9:2c:94:23:7e:3e:a3:aa:93:c1:09:5b:8d:d8:
bc:5f:3e:c9:d5:b5:7b:21:e5:1d:cb:6a:d8:eb:fe:
e6:e2:11:27:f8:9a:34:83:6a:38:12:93:77:96:c9:
94:5a:e5:bc:81:c9:11:e8:4b:27:c3:ad:9b:07:14:
d6:88:87:9f:be:fc:cf:2d:86:a6:d1:e4:ef:91:7d:
2c:79:ba:cd:52:40:21:40:ac:4a:9e:86:4f:e5:f0:
cb:84:10:72:64:26:10:ce:64:57:be:f4:4b:b8:37:
b9:3e:21:ec:9d:b9:9a:b3:60:63:7b:db:c9:6d:09:
29:9d:b7:f4:9d:e2:ea:89:32:76:4d:de:5b:79:f0:
a5:d0:ea:da:78:74:6a:98:7d:08:c0:76:f9:07:79:
f0:af:c8:85:07:28:6f:41:4e:a5:bc:bf:bd:3b:84:
55:de:c9:86:10:dc:71:1d:30:6c:62:a2:ae:5c:82:
d4:55:c7:db:21:c9:ee:5e:97:9e:3b:1f:df:18:83:
ab:22:57:bb:b5:04:7f:f1:a8:32:dc:69:43:7e:bc:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:F5:C4:0B:7F:22:A2:5B:57:A4:6E:D8:1D:FB:20:FA:70:D4:D6
X509v3 Authority Key Identifier:
keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/09DA4C5E1B6911EB9D105D47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.202.0/23
IPv6:
2001:df5:2c80::/48
Signature Algorithm: sha256WithRSAEncryption
98:a5:13:1c:ca:3b:e8:bb:31:a0:c2:06:a8:49:84:ba:a7:12:
db:de:56:ab:f3:54:d9:05:e8:cb:1f:71:a9:d4:29:67:95:e9:
e7:2e:28:9f:64:5e:a5:5c:09:78:ff:1a:b7:5c:1e:34:f0:b1:
54:33:0b:a6:fe:97:66:dc:0c:b6:3e:e7:32:82:a5:91:68:55:
f9:01:73:63:e3:94:b8:d3:c6:13:4b:62:0d:c9:83:bd:02:65:
ea:02:92:b1:d7:54:b3:76:fb:9c:1c:f7:9e:4c:7d:19:b8:ca:
db:2e:bc:f5:65:d0:4b:84:94:c1:0e:ab:75:e0:f8:6c:c1:86:
93:a9:54:7b:77:99:b4:66:91:57:a4:a5:7a:89:13:de:40:fb:
95:71:41:81:d6:38:8a:09:37:3d:fd:9f:a4:bb:c0:51:04:e9:
fb:08:85:6f:0d:f5:c3:10:96:0e:e7:2e:7b:7e:17:0f:4a:ca:
52:35:75:0e:51:d7:5e:47:5e:93:68:3e:28:6b:3c:d9:97:f7:
cf:dc:85:71:cb:62:64:56:92:89:cd:6a:d8:46:d7:03:93:a1:
f7:12:6c:cc:61:f4:1d:47:de:c8:ae:70:91:68:bc:c7:41:7d:
06:5d:04:ed:52:91:d9:22:0b:9c:d5:8f:4c:5f:c4:5b:df:96:
33:77:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:56:56 2025 by rpki-client