Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/BFE023663DD911EA89EB0782C4F9AE02.roa
File: BFE023663DD911EA89EB0782C4F9AE02.roa (raw, json)
Hash identifier: AeTLEvIImEeEIFDLcyyzsKZIqpZz08BSLMKw6j/d4o8=
Subject key identifier: F4:14:07:B3:92:B7:CC:A7:A6:58:CB:AC:6C:E3:BD:8C:56:C4:00:C0
Certificate issuer: /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005
Certificate serial: 0A62
Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/BFE023663DD911EA89EB0782C4F9AE02.roa
Signing time: Thu 16 May 2024 20:59:25 +0000
ROA not before: Thu 16 May 2024 20:59:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138924
IP address blocks: 103.137.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2658 (0xa62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005
Validity
Not Before: May 16 20:59:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664673ad-8352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:35:17:45:bc:ce:dc:21:9a:04:5c:bd:36:2d:
da:c4:ee:f5:9c:95:41:e0:d2:6a:d2:24:7e:ef:5d:
7b:3f:d5:e2:f5:71:72:6e:2a:62:d5:a0:c3:cf:80:
92:bd:58:aa:11:35:4c:2a:e1:95:53:cd:8f:53:4b:
05:17:cc:47:7d:1e:e9:e9:31:fc:7a:94:ae:5b:57:
1d:ea:d6:c6:07:51:ec:54:58:8a:ee:36:19:f8:a5:
25:9b:51:24:3a:a1:ac:52:be:5e:71:67:76:8e:04:
4e:bd:3e:a2:87:42:92:45:26:e6:43:bf:76:0a:ed:
56:6c:ed:76:aa:d0:55:ef:94:4e:4d:19:20:ee:a5:
df:b1:1b:ef:80:88:00:7d:26:73:22:ff:d4:2d:f1:
29:c4:6d:6d:fd:5a:be:86:3c:5c:d9:ab:d8:f2:ff:
8d:35:94:2a:80:9f:c6:95:8e:36:03:b1:f6:3e:d8:
ce:74:6c:30:b3:c9:dc:71:40:9e:bb:71:d8:38:2e:
39:83:0f:42:f6:e6:98:01:d6:c7:1c:55:fa:b8:ea:
ce:bd:1b:83:8e:f8:fd:75:2b:2f:46:a5:f6:8c:85:
66:40:4c:52:47:17:f4:da:68:b8:6c:98:1d:e1:d8:
66:7c:04:57:2f:a0:c4:f6:18:de:6e:d7:40:43:08:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:14:07:B3:92:B7:CC:A7:A6:58:CB:AC:6C:E3:BD:8C:56:C4:00:C0
X509v3 Authority Key Identifier:
keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/BFE023663DD911EA89EB0782C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.54.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e2:e2:3c:ce:d1:0e:bf:8f:6e:da:8d:9a:10:cd:20:7b:f3:
22:fc:5a:6a:b0:02:48:90:c7:a2:ae:58:7f:76:09:90:0b:52:
90:a9:49:1d:35:d2:e9:2b:ab:46:70:3f:c7:e3:bf:c9:29:5d:
b5:b5:96:8a:25:6e:6e:21:78:57:8f:49:e2:2e:b8:69:e3:3f:
9b:c4:0b:86:3c:ab:c4:c8:1c:21:1b:cd:3d:55:32:32:0c:6b:
aa:42:8f:d0:19:bf:66:75:cd:2e:ff:84:1c:15:56:36:3d:b5:
cf:f9:c8:28:c7:48:cc:f7:2e:02:91:81:ea:32:d6:dd:a8:15:
bc:57:e3:c5:ba:d2:b1:31:4f:80:f0:ec:0a:c6:19:97:ad:61:
bc:2a:ca:6c:e1:c6:cb:bf:99:20:f8:fb:86:54:b1:e6:90:b9:
96:b5:1b:5b:a4:a1:a0:8a:df:31:34:5b:3a:54:9c:5e:17:ff:
8e:cb:6a:82:64:ab:fc:3a:25:7b:48:c2:c7:c4:c4:2a:0e:b7:
15:b9:3f:55:d6:8d:21:cf:77:f8:8e:bd:c6:a4:4b:19:99:23:
89:03:72:20:46:ab:cf:0d:0e:ad:48:c8:62:ba:b0:ba:61:4c:
be:a1:14:71:9e:93:b8:70:f3:2e:0c:dd:c7:09:d6:fd:f5:76:
3f:9b:30:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:22:48 2025 by rpki-client