Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/2525FE9C1A5C11ED939EFD3FC4F9AE02.roa
File: 2525FE9C1A5C11ED939EFD3FC4F9AE02.roa (raw, json)
Hash identifier: osfDQ5axFXnV1m7JSfkzMAPTszzrFKGJ3WZ9R3CLdTk=
Subject key identifier: 72:BB:96:34:77:13:73:9E:06:D7:AC:4E:1C:5F:73:7A:7B:B4:49:C8
Certificate issuer: /CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Certificate serial: 0507
Authority key identifier: 5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/2525FE9C1A5C11ED939EFD3FC4F9AE02.roa
Signing time: Fri 03 Nov 2023 00:53:03 +0000
ROA not before: Fri 03 Nov 2023 00:53:03 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 61228
IP address blocks: 103.166.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287 (0x507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C83F1, serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Validity
Not Before: Nov 3 00:53:03 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6544446f-e084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:a0:83:50:55:d8:b8:77:22:2c:27:b4:85:
a8:8e:a7:49:3b:e5:4c:cf:eb:1a:85:e8:c7:e8:56:
9b:17:36:2b:20:8e:43:1e:7f:28:b9:fd:bf:ec:55:
a6:e7:8a:ce:ab:c1:34:29:a6:9e:d4:e6:fe:1e:96:
41:49:fd:57:8a:cf:6c:d6:ce:73:37:0a:2d:3b:f6:
2c:26:a4:54:51:9d:e2:60:03:82:e8:f3:de:36:cf:
6a:2c:41:c1:ff:a6:70:3e:00:ef:82:b6:6f:fd:11:
0a:89:84:72:60:13:84:af:5c:80:25:44:16:49:f8:
9f:e4:c6:91:d4:75:2b:91:1d:26:83:70:4a:f8:e3:
b6:95:a1:44:92:fc:d3:46:df:10:37:a7:0e:45:bb:
50:c2:b7:92:56:de:eb:bc:91:29:3c:7b:ff:f5:c3:
11:b7:21:da:43:4c:04:e9:8b:e9:ee:54:d9:4b:81:
9f:2f:cd:14:60:07:3b:bc:35:94:63:b0:d0:76:e1:
f3:94:dc:62:87:3d:11:a5:87:78:67:d2:a1:b9:75:
c4:66:59:eb:04:a0:dc:c8:3d:4b:e9:73:67:a7:7b:
d8:d5:be:07:d8:df:b1:cf:0a:aa:94:32:c4:d4:0c:
2c:64:2a:85:3d:c3:06:a7:4c:c9:e8:19:9b:33:d4:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BB:96:34:77:13:73:9E:06:D7:AC:4E:1C:5F:73:7A:7B:B4:49:C8
X509v3 Authority Key Identifier:
keyid:5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/WlozCZSmbPoShPMmBuOeGVx8qWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/2525FE9C1A5C11ED939EFD3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:73:e7:a8:d9:5c:25:21:47:7d:f0:e9:35:ca:55:15:58:a9:
cb:d2:24:4c:e2:2a:55:6a:9a:4f:73:26:6d:1e:ed:57:0e:3d:
72:4c:0b:4d:a6:00:8a:ec:a1:f0:e7:4d:c6:99:5b:15:67:d1:
71:30:30:46:32:47:2b:02:fa:3f:74:10:ab:02:53:db:07:52:
96:f7:ea:ec:30:ef:ea:29:03:ed:4c:dd:54:f9:71:ea:86:ec:
7e:11:4f:5f:d3:67:de:5b:04:9e:d3:52:f9:81:ea:4e:e6:e5:
5c:c8:c7:56:db:3f:96:a8:51:09:23:33:69:3c:51:54:fb:3b:
3c:86:86:18:a7:95:ad:f9:0e:14:80:0c:38:1d:fb:a6:de:6c:
78:da:4d:52:dd:f7:cc:6f:80:5b:66:7b:06:47:d0:63:45:62:
f9:7a:bb:a1:4c:00:11:cc:de:b1:f1:7b:6e:a4:a6:9d:64:61:
a8:95:01:aa:ff:ce:7e:58:1c:8f:cc:b1:07:11:48:b8:d3:52:
66:27:f5:25:fd:5e:eb:12:8c:25:c5:a4:ef:9c:e7:98:ff:68:
94:11:98:ab:43:23:25:fe:de:d3:53:56:46:fc:03:54:8b:b7:
3c:5e:93:c5:f5:24:3c:da:ed:7b:6e:18:58:d1:5a:1b:f4:b6:
70:55:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:06:59 2025 by rpki-client