Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
File: AE148B2A6BB911ED97343873C4F9AE02.roa (raw, json)
Hash identifier: h7PFINLKglbbD51solfuF7q/5uroEa7Bk3jUBzQnwh4=
Subject key identifier: DD:E7:FF:FC:FA:C4:3E:77:7C:0F:63:9C:16:C0:5A:D3:64:87:58:69
Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35
Certificate serial: 0186
Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
Signing time: Thu 19 Dec 2024 02:25:58 +0000
ROA not before: Thu 19 Dec 2024 02:25:58 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150442
IP address blocks: 103.37.126.0/23 maxlen: 23
103.37.126.0/24 maxlen: 24
103.37.127.0/24 maxlen: 24
2001:df1:92c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35
Validity
Not Before: Dec 19 02:25:58 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67638435-393c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:82:82:f0:fa:f7:da:42:c1:ed:fb:5e:a0:
67:58:e0:ee:40:0a:a8:85:6c:bb:f7:22:d0:65:c1:
c1:f1:3a:18:b0:3d:6c:99:ed:97:b4:65:ba:61:e3:
e2:4e:80:f9:92:ad:9c:50:69:d5:3a:aa:76:ea:8b:
81:6c:e9:16:97:a0:ed:51:eb:41:03:d4:48:82:91:
ed:8a:cc:f8:fa:46:e9:9c:e9:4e:15:de:d6:55:aa:
56:17:95:04:a2:03:bf:06:22:55:fa:ce:71:cd:f4:
6f:8c:1d:13:d9:46:d6:9f:50:79:17:89:2e:d3:82:
a2:46:8c:8e:b0:5b:db:08:97:a0:02:90:e9:b4:9c:
b6:da:95:f3:22:42:a0:49:32:21:a8:fa:08:1f:56:
34:0e:bc:31:cf:16:e2:3a:88:b9:8d:a5:63:1a:80:
04:6f:ed:47:c1:76:29:70:d2:de:1c:b5:be:0b:4c:
20:4f:b9:5f:98:89:2f:1d:47:70:64:bc:d5:2c:6e:
b3:0b:60:68:4b:5b:19:d8:55:77:cd:78:03:fd:fd:
4b:3e:54:14:c9:ab:e7:85:e0:b8:a9:4c:c9:07:e6:
51:28:f9:3a:13:15:4f:e1:04:7b:43:1c:e5:5a:5b:
da:36:8f:17:ed:93:40:e7:66:eb:a0:e7:fb:d5:5a:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E7:FF:FC:FA:C4:3E:77:7C:0F:63:9C:16:C0:5A:D3:64:87:58:69
X509v3 Authority Key Identifier:
keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.126.0/23
IPv6:
2001:df1:92c0::/48
Signature Algorithm: sha256WithRSAEncryption
64:cc:05:dc:94:03:73:9b:b6:76:96:a1:21:01:57:1e:f8:1e:
9d:3e:d7:b6:39:28:24:ea:6b:59:fc:30:97:f9:b7:62:97:32:
53:cd:bb:58:eb:89:a1:71:1e:fe:c4:77:2b:0f:3d:b5:e3:36:
ce:f9:cf:37:4f:59:81:64:03:8e:32:38:4c:ce:86:79:6f:ee:
df:9c:17:20:99:dd:05:26:1d:22:15:59:d6:4f:da:4a:15:48:
47:79:f8:eb:c3:d7:09:1d:c7:16:e7:88:a9:ca:7a:db:4b:45:
9c:a4:5c:f7:5f:22:17:0c:d6:9c:2a:16:62:d8:0c:5b:22:c7:
96:e3:c7:bf:43:da:77:c3:eb:df:a0:f5:c1:b0:4b:1e:6f:70:
9b:66:86:d6:2f:f5:34:50:df:96:ec:05:81:70:bc:73:6c:8a:
8a:90:05:c2:5d:7d:41:06:ad:76:62:ab:de:40:eb:de:3e:68:
1c:14:b6:ca:07:24:18:0c:e6:29:bd:d3:be:6a:b1:ef:2a:16:
07:80:85:31:2e:0d:22:05:98:d7:a3:33:30:fc:a9:e3:02:bc:
ed:2b:66:11:ee:c9:f3:e9:0c:01:c5:1e:5d:fd:2f:a0:f5:cf:
95:17:74:ae:c3:61:13:98:7b:32:d1:89:ad:33:90:8e:5a:51:
fe:56:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:12 2025 by rpki-client