Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/F1E9B236718E11EEAF67DB48C4F9AE02.roa
File: F1E9B236718E11EEAF67DB48C4F9AE02.roa (raw, json)
Hash identifier: 1MgG7WTwswH0kCn616eOpfwXJOyuod5SbIGbahzjBCY=
Subject key identifier: 4F:57:AA:0E:B9:47:3B:D0:2B:C4:30:F2:2E:2E:39:13:22:CF:8B:88
Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Certificate serial: CC
Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/F1E9B236718E11EEAF67DB48C4F9AE02.roa
Signing time: Fri 15 Nov 2024 03:47:37 +0000
ROA not before: Fri 15 Nov 2024 03:47:37 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 151981
IP address blocks: 103.67.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Validity
Not Before: Nov 15 03:47:37 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6736c459-e63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:04:cb:84:0c:f7:61:48:88:99:49:8d:4b:
3e:34:c4:18:6b:c0:ac:f1:65:25:49:d9:9b:81:5b:
39:58:fd:f1:7b:c1:ee:97:f4:5b:bc:aa:6a:cc:80:
7e:99:e1:6a:a3:69:01:c7:8e:27:7a:48:09:2e:5a:
4a:3f:e1:3e:56:62:b8:e0:8e:55:53:14:2d:7b:93:
3a:c6:f2:d6:38:be:a9:a7:e9:b4:08:be:65:be:91:
f5:cc:cf:3e:75:7c:07:8e:3c:d7:63:45:21:1f:04:
73:ad:20:71:1a:6e:95:54:0a:6c:5e:b9:26:91:ee:
33:b3:72:2f:4d:5a:81:a7:35:18:31:f3:da:8d:e8:
46:3c:a1:13:ba:f0:7d:a3:1f:99:80:4b:e9:fc:10:
94:fd:85:3b:89:a5:79:31:d0:58:38:d5:ae:4d:25:
c9:a9:00:8a:40:f7:db:3e:bd:48:5a:4c:27:b2:33:
22:fc:42:fb:a8:27:f5:74:cd:fe:da:60:03:30:a2:
a4:c5:1b:39:90:a3:07:b6:96:30:5a:78:27:57:f1:
9d:45:5d:34:5f:9b:87:8f:ac:4c:f9:91:e0:bc:5d:
b4:7e:47:0a:a1:fc:1e:6f:e8:e3:b1:53:97:aa:80:
3d:bc:cd:2e:bf:e6:e8:59:0b:64:5d:86:77:4d:58:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:57:AA:0E:B9:47:3B:D0:2B:C4:30:F2:2E:2E:39:13:22:CF:8B:88
X509v3 Authority Key Identifier:
keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/F1E9B236718E11EEAF67DB48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.66.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:a0:33:f4:b9:51:c1:96:1d:ca:f7:f1:a3:af:8a:1d:01:3a:
65:7d:80:63:c8:c9:0c:c4:7b:74:48:2a:6b:9e:89:74:54:1f:
4c:ee:8d:87:31:ea:32:5b:da:eb:37:f6:62:90:e5:9f:49:31:
38:3b:0a:e2:f2:20:a8:83:f4:4b:eb:52:bd:df:46:1f:48:8c:
7b:c6:0a:50:73:c5:0a:6e:0d:67:a6:0e:9c:94:e7:a6:64:f6:
cb:2a:3d:33:0b:64:2b:55:6b:bb:da:72:26:5d:68:c2:a6:b9:
bf:aa:d8:16:aa:b6:5c:e2:db:99:42:61:2c:21:ba:03:64:39:
43:56:b6:6b:05:ac:3f:7e:09:c5:36:94:65:e9:b4:99:36:c3:
ff:d6:c4:65:bf:99:ae:6f:51:53:78:95:b0:fa:2f:43:2c:f8:
0e:4d:d2:c8:05:3f:2e:ef:b0:bb:a6:35:c2:41:39:7a:b0:6b:
25:8a:8c:cc:c8:a8:19:e6:f1:7d:14:6b:99:ce:0a:0b:09:6e:
f4:3a:d0:29:8a:93:b2:41:54:81:fc:aa:15:f8:79:60:cf:45:
c2:a9:3c:6f:34:5d:09:f6:f9:3e:fb:a9:92:53:30:17:f0:71:
90:7c:64:38:d2:b1:fa:82:a6:30:a2:93:17:92:fc:28:cb:81:
9b:13:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:22:11 2025 by rpki-client