Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa
File: 203FA37E750611ED95126872C4F9AE02.roa (raw, json)
Hash identifier: dipdNfnJaJs6s5CVnvO1Wlubse6AOUfgpacGaixKSoQ=
Subject key identifier: C9:CD:90:40:E2:21:3E:42:9B:A4:62:A3:83:91:B7:4C:F2:05:36:15
Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Certificate serial: 0185
Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa
Signing time: Mon 23 Dec 2024 02:18:08 +0000
ROA not before: Mon 23 Dec 2024 02:18:08 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150438
IP address blocks: 103.99.187.0/24 maxlen: 24
2001:df1:91c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102
Validity
Not Before: Dec 23 02:18:08 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6768c860-3fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:07:77:be:b7:a9:19:bf:b1:54:3a:25:49:
ea:91:f2:71:c7:53:e5:24:28:63:fa:d2:eb:e7:22:
6b:39:1d:92:25:75:bd:80:4b:28:20:2f:c5:00:f5:
e5:4c:7f:5f:32:3d:75:10:f8:f5:b3:89:4a:ee:23:
00:19:1d:51:4c:bc:98:1a:f9:81:a9:b2:3f:ae:e7:
86:0e:ac:b1:a3:ad:1c:56:3c:bd:1c:a1:23:6d:27:
64:a3:e3:c2:28:6d:4c:34:65:6e:54:e5:db:47:62:
44:15:0a:9d:87:d0:9d:10:39:5b:d8:09:cf:5c:26:
3d:aa:ce:63:31:30:b3:3e:a8:67:74:c0:94:77:3a:
a0:7b:61:c8:00:e2:fd:a1:47:3d:7b:87:d3:13:0c:
b1:fe:84:95:c9:2a:d5:b9:e5:f9:6d:d7:a6:5c:81:
aa:3d:a5:20:7e:95:15:8a:b2:75:d9:e7:74:5b:f6:
16:bb:52:10:73:f7:f3:10:03:37:4f:83:a9:1b:ab:
52:65:ad:7a:bf:00:94:8c:2b:bc:f8:aa:78:88:61:
ef:97:aa:24:f9:00:4f:52:68:da:c5:09:7c:27:b7:
08:d4:07:02:75:78:ee:56:17:5d:d5:6f:34:3b:27:
f9:f2:ab:9b:88:9d:25:8f:9b:1b:23:34:a9:0e:e3:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:90:40:E2:21:3E:42:9B:A4:62:A3:83:91:B7:4C:F2:05:36:15
X509v3 Authority Key Identifier:
keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/203FA37E750611ED95126872C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.187.0/24
IPv6:
2001:df1:91c0::/48
Signature Algorithm: sha256WithRSAEncryption
87:8e:8d:00:d5:4c:d4:43:b8:9c:12:ed:46:2f:4f:26:64:b2:
10:81:9c:cd:fc:11:7f:87:91:78:2c:78:92:88:d1:dd:a7:1b:
7f:97:03:e9:1b:38:14:98:c4:14:79:ff:ef:3e:25:64:e1:68:
7d:0e:c2:1d:53:f7:f9:9d:b1:98:b1:a6:81:5c:c6:16:47:5c:
44:3f:d5:b0:32:b2:e6:80:42:b3:ee:5b:f5:b2:f7:f7:fd:f3:
ae:70:43:e2:5f:e0:4f:96:e1:90:1b:f8:f2:e8:52:72:ed:6b:
0d:48:06:b3:a7:15:e1:3d:f2:77:ab:c8:9f:e1:ec:5a:38:54:
be:47:38:65:66:06:62:5b:57:6c:a0:7f:e8:82:9a:fd:06:c6:
ae:19:4b:e4:a2:42:7a:0a:d7:48:da:ea:04:8c:b3:c0:9f:fe:
54:9a:46:24:47:b1:39:f6:a6:5a:a1:73:db:e4:d7:ad:92:a4:
ef:9e:bf:63:7c:ab:ff:47:03:3b:87:6c:76:72:a4:7c:b0:bc:
9e:10:f6:37:f0:ca:7e:66:38:27:b7:f1:73:2b:bc:9e:da:d7:
b2:86:16:76:c7:08:ae:58:48:22:6c:8b:80:43:b2:f6:16:9a:
ba:94:9e:33:73:e8:c7:71:99:b8:de:95:d5:55:d1:83:f4:de:
44:34:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:06:21 2025 by rpki-client