Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa
File: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (raw, json)
Hash identifier: rtZPUDV9v5M5UjLf6mnKGmlSZjqBzQjmkl2wyx5PPSc=
Subject key identifier: 6B:DA:9D:35:65:03:FE:8D:CA:53:A8:F2:D7:66:1D:33:5A:80:F0:AA
Certificate issuer: /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
Certificate serial: DB
Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa
Signing time: Fri 21 Jun 2024 05:30:16 +0000
ROA not before: Fri 21 Jun 2024 05:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151480
IP address blocks: 103.243.100.0/23 maxlen: 23
202.53.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88
Validity
Not Before: Jun 21 05:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66750fe7-5619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8c:34:86:a9:a2:c8:c1:61:4d:50:b1:38:b7:
92:4a:ef:38:7d:1e:ab:cc:e7:ea:e6:c5:a4:eb:ed:
13:c8:8f:23:b6:cf:71:c9:d3:43:16:34:cf:26:2a:
5d:06:e6:1f:4c:ce:08:c8:29:50:fb:8b:35:18:73:
44:9b:9a:db:48:63:17:d7:1c:9f:2b:96:72:39:46:
cb:8b:1e:40:45:24:26:27:da:ef:38:c7:cd:82:92:
e7:24:18:66:81:47:f7:8e:61:bd:3e:44:af:1c:6b:
bd:56:2a:b2:2a:c6:b4:5e:c1:07:b6:e8:1e:82:69:
88:44:44:13:a6:97:a5:1c:a5:0e:8b:7d:fe:1b:0a:
c7:b8:66:53:4c:50:b2:e6:3d:49:ff:25:06:ed:ef:
ab:57:4a:b7:bc:19:e6:fe:4a:e2:15:82:cf:5f:b9:
b9:b3:2a:d8:2f:21:ed:50:c8:2a:f6:a1:fc:99:5e:
74:2a:59:d6:e9:9b:39:01:3f:b3:07:96:4b:f2:62:
e6:4a:5c:e5:87:f2:cf:f9:f5:d5:68:b6:c8:52:07:
d2:de:81:88:48:67:36:a7:1d:fa:51:a2:80:10:da:
d2:24:ea:34:9c:7c:d5:c2:f6:a6:8b:3e:d7:e6:df:
81:84:f8:83:5b:ca:6f:ec:95:b5:e1:d8:b8:09:e9:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DA:9D:35:65:03:FE:8D:CA:53:A8:F2:D7:66:1D:33:5A:80:F0:AA
X509v3 Authority Key Identifier:
keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/FFCE072E2B8111EE9BDEC079C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.243.100.0/23
202.53.0.0/22
Signature Algorithm: sha256WithRSAEncryption
08:a0:3b:8a:4b:14:47:90:73:27:82:79:55:8b:7d:96:69:81:
c5:93:6f:bb:48:22:17:b2:ad:4b:70:e1:59:08:9f:86:cc:5b:
91:56:c1:2a:fd:76:75:71:0e:e1:43:f8:94:87:01:fe:96:23:
36:84:0d:08:c5:7e:7c:6f:81:6b:c4:a4:e6:83:f6:01:be:fb:
20:93:f7:9d:70:b3:f1:f2:50:3b:1f:20:3f:c9:f8:65:15:dc:
55:e4:01:23:5e:bb:d9:ba:e9:4d:ed:d4:d1:3c:11:eb:68:08:
44:55:83:3e:8c:a2:47:d7:36:c8:ce:51:37:4b:39:fd:1c:1c:
14:14:b4:af:4d:0f:6a:09:e4:72:62:f1:c2:be:85:19:6d:0b:
b0:0e:9e:11:0d:b6:07:37:d0:ae:15:5e:63:c4:15:aa:5d:63:
9a:87:3d:27:bc:a1:22:cc:c6:94:42:c0:cf:26:ba:a6:a1:26:
e9:99:3e:1b:b8:81:60:f8:03:d4:e3:a4:9f:16:18:c5:3f:86:
f2:5c:82:45:d6:ff:9a:ee:a8:de:14:29:4f:4a:ae:bb:fe:e4:
8f:aa:b6:b4:a9:5a:83:c4:c3:e5:b0:04:12:b6:d7:fd:59:a4:
9a:90:f2:e3:69:d7:21:fd:2d:40:46:e3:25:42:00:74:b7:96:
32:bd:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:54:38 2025 by rpki-client