Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/173CA1AABCA011ED914D176DC4F9AE02.roa
File: 173CA1AABCA011ED914D176DC4F9AE02.roa (raw, json)
Hash identifier: ZtA42MiYiR48zZwCRwa0egur+P+IXymEJJp62pzAS3Q=
Subject key identifier: CC:78:7C:93:B7:74:37:70:C0:3F:FF:96:10:82:53:0F:19:61:CC:49
Certificate issuer: /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
Certificate serial: 2036
Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/173CA1AABCA011ED914D176DC4F9AE02.roa
Signing time: Wed 26 Jun 2024 09:15:37 +0000
ROA not before: Wed 26 Jun 2024 09:15:37 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 64072
IP address blocks: 103.25.120.0/22 maxlen: 24
2404:bc80::/32 maxlen: 32
2404:bc80::/48 maxlen: 48
2404:bc80:1::/48 maxlen: 48
2404:bc80:2::/48 maxlen: 48
2404:bc80:3::/48 maxlen: 48
2404:bc80:4::/48 maxlen: 48
2404:bc80:5::/48 maxlen: 48
2404:bc80:6::/48 maxlen: 48
2404:bc80:7::/48 maxlen: 48
2404:bc80:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8246 (0x2036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F
Validity
Not Before: Jun 26 09:15:37 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=667bdc39-2cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:b0:0a:d4:2b:de:94:a9:88:cd:4c:4b:07:
ad:8c:90:f7:08:9a:fe:fa:a3:fa:cc:8b:68:0c:4a:
a5:a0:00:3a:3f:6e:ce:d6:5f:0c:9d:2a:6c:5c:b1:
99:a6:26:d9:80:7f:d4:1a:42:29:40:5d:5e:00:95:
80:23:a3:08:0b:a0:bc:86:47:27:13:b7:2f:0f:42:
08:d1:7d:e5:cc:9f:39:4a:c3:47:e2:c6:94:a4:59:
9f:24:b4:6a:95:75:c7:d9:c4:41:67:26:d7:18:27:
f8:de:2f:0d:64:73:48:8e:7f:15:37:ff:16:ec:cd:
55:4e:9a:ad:45:13:29:aa:86:df:03:d1:7d:df:92:
8a:a1:c7:bb:b6:dc:d4:7e:02:65:22:0f:ff:4f:15:
2b:21:a5:f6:db:46:92:68:10:98:89:a1:2b:32:f7:
11:0a:c5:6e:65:17:45:6b:93:c2:30:2b:f3:d2:f9:
07:66:da:37:ff:7d:64:e3:73:3f:48:36:98:06:44:
1a:7d:6c:9c:94:1d:33:ad:0b:d4:9c:ea:1b:db:81:
58:fd:8a:c3:f5:76:7e:1c:dd:da:c5:c0:fd:f9:63:
41:a4:3d:2e:c0:c9:15:be:31:f3:3a:84:eb:07:c3:
69:1c:48:d6:da:9a:12:35:7c:da:54:43:02:54:1b:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:78:7C:93:B7:74:37:70:C0:3F:FF:96:10:82:53:0F:19:61:CC:49
X509v3 Authority Key Identifier:
keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/173CA1AABCA011ED914D176DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.120.0/22
IPv6:
2404:bc80::/32
Signature Algorithm: sha256WithRSAEncryption
3a:53:00:58:d7:91:01:d7:7d:14:ff:d9:e8:97:65:af:91:79:
73:f4:b9:d3:84:b8:98:76:47:9f:af:83:7a:e7:55:62:89:4c:
e5:dc:1e:4a:1a:08:49:73:c7:ab:09:8c:e1:e8:0b:f0:b2:e6:
07:6f:14:4e:97:14:b4:c6:9c:07:e6:f3:bb:fd:71:b6:60:5f:
c5:87:7d:50:65:ee:bf:7e:27:d4:99:41:eb:bf:48:16:71:86:
13:46:ca:ab:3c:46:e9:82:b6:62:f1:79:b1:cc:4d:01:b9:71:
d9:9e:1b:26:fc:73:0b:ec:de:3a:81:b7:d3:2b:14:eb:89:01:
8b:2f:ed:fe:c0:e8:83:b1:15:3e:39:f4:8f:5f:76:10:51:b5:
17:b6:14:41:cb:4f:4a:96:b3:67:06:2f:0e:95:5d:0e:6f:15:
2e:54:97:60:65:26:d2:cc:92:f8:37:b2:28:47:ab:f4:75:47:
0d:79:a0:b5:d1:95:07:d7:bb:7b:07:99:d3:bc:ec:3a:9b:af:
c1:34:5b:96:1f:41:71:1d:9d:c1:62:c0:c9:b1:13:a9:55:34:
ac:89:d1:ec:a1:f7:be:30:74:56:54:4f:49:f7:6b:36:bd:77:
30:2e:48:5f:11:23:d7:9c:d1:c7:54:b2:45:36:75:5c:46:28:
c3:91:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:48:43 2025 by rpki-client