Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/F2C774B2AEF611EFB2FDA54AC4F9AE02.roa
File: F2C774B2AEF611EFB2FDA54AC4F9AE02.roa (raw, json)
Hash identifier: E3jdAv1bCMzb7IYg3TqO8Epjql+e1J7Ssimn4jMQAyk=
Subject key identifier: 1E:3C:6C:19:82:A7:94:F8:A6:26:93:A4:E8:55:FE:0E:A7:D1:1A:73
Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
Certificate serial: 025A
Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/F2C774B2AEF611EFB2FDA54AC4F9AE02.roa
Signing time: Fri 31 Jan 2025 02:16:12 +0000
ROA not before: Fri 31 Jan 2025 02:16:12 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 139016
IP address blocks: 103.159.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0
Validity
Not Before: Jan 31 02:16:12 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679c326c-3f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:c0:b2:42:0b:0f:3b:cd:1d:69:6d:5e:eb:
52:78:b2:18:00:bf:90:ca:5f:49:d8:b6:f6:61:c9:
71:7c:d4:d2:35:ae:08:e7:2b:05:81:42:eb:c8:cc:
54:fd:f7:88:cd:cc:d2:c5:ee:2e:6e:9e:0e:ce:47:
20:5e:3e:38:b8:95:a2:d6:02:6c:a1:15:db:cd:97:
68:46:47:62:e6:9a:dc:17:8b:c0:48:27:d9:de:08:
9d:47:a1:dc:f1:26:ac:71:05:25:54:4f:0a:c4:12:
d4:ba:a3:a2:45:14:6d:18:a1:10:91:ff:23:02:ef:
25:6e:c7:c8:f1:51:1b:0b:47:dc:1a:8e:26:00:d8:
e4:9f:0e:b7:70:ae:25:5f:5b:a2:5f:44:2d:2e:38:
12:61:9f:33:d8:ce:c1:d7:6f:bd:8b:c8:e5:17:3a:
19:5e:6f:4f:ab:c9:e4:50:8d:4e:c3:3c:36:8b:ed:
68:e0:2c:43:6b:f8:23:4e:c3:42:5e:3a:83:6d:55:
7c:05:f0:d2:13:e8:c3:6c:4e:37:40:75:2a:be:7b:
be:6c:9c:6f:52:a9:5e:ba:21:90:67:94:56:fc:37:
c9:a0:cb:50:10:ee:07:66:cd:a9:01:e6:06:42:63:
ec:66:fa:e4:27:4b:a9:e8:b9:77:0a:87:9c:f1:c5:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3C:6C:19:82:A7:94:F8:A6:26:93:A4:E8:55:FE:0E:A7:D1:1A:73
X509v3 Authority Key Identifier:
keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/F2C774B2AEF611EFB2FDA54AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:14:f6:53:07:9b:37:76:97:72:89:7e:04:14:ee:3e:1a:b3:
11:97:23:ec:ac:2c:7d:24:26:ca:ae:63:77:39:27:96:0c:3c:
ab:55:f5:fc:7d:21:dc:36:b7:34:5c:47:c0:81:0e:c4:fb:e5:
a8:62:71:38:d4:7c:0c:06:7d:e9:a7:ee:ca:a5:44:9d:f8:df:
a8:fe:91:e6:58:1b:71:1e:1c:42:12:4d:ee:b9:ae:2c:b8:61:
f7:9f:ba:e0:57:0a:c4:4d:a3:9c:dc:d6:ba:d0:5c:51:2f:4f:
a2:80:19:85:03:4c:6e:78:d0:a4:63:01:7a:92:15:f2:4b:62:
d2:57:07:39:8c:fd:f0:f5:39:46:46:1b:45:f2:b1:c3:6b:2f:
6f:91:6f:e5:0f:34:7e:18:94:9d:6b:7a:00:c4:86:ca:24:a7:
a7:b4:b9:83:b6:7f:e8:86:ba:7c:ab:1f:66:41:e2:29:36:99:
bc:79:f9:26:00:d7:eb:04:4a:6a:1f:c3:a9:44:eb:07:86:22:
0c:e2:ba:67:c9:4c:3d:50:ea:ea:bb:b0:6a:d9:6f:a7:0f:e4:
81:19:09:a2:69:f4:9f:d7:9e:48:d0:f9:ef:4e:33:19:0f:e7:
7e:12:39:94:ec:59:1a:8f:09:0e:73:74:03:ed:fe:11:df:eb:
ef:52:23:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:44 2025 by rpki-client