Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa
File: B9E2643697CE11EDB7D5B312C4F9AE02.roa (raw, json)
Hash identifier: wecHmgc8mAml3STsCKA2AkYz2fTeY9/0oK/QY5GUmjA=
Subject key identifier: 6B:65:6C:D8:69:37:48:B7:6C:CA:1D:73:83:6B:12:10:7E:1C:DD:65
Certificate issuer: /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Certificate serial: 0177
Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa
Signing time: Mon 30 Dec 2024 06:45:22 +0000
ROA not before: Mon 30 Dec 2024 06:45:22 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 137503
IP address blocks: 103.141.30.0/23 maxlen: 24
103.189.186.0/23 maxlen: 24
103.241.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Validity
Not Before: Dec 30 06:45:22 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67724182-9eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8b:1f:b8:57:fb:e1:62:48:2f:c3:a5:96:02:
aa:da:7a:87:e4:19:de:33:d3:83:ec:12:44:cd:ce:
d0:63:c5:8f:be:97:8c:d4:9c:c1:f1:a0:f9:f3:c6:
78:2b:eb:35:47:db:eb:e6:03:7f:e0:a9:9f:ab:c3:
33:b8:5c:fd:9a:09:d2:5d:37:42:65:7d:47:62:0d:
55:35:7e:e1:8c:ab:ed:ba:a6:b9:8f:c1:4c:25:53:
a3:a8:d5:97:17:68:ba:65:64:3b:c1:32:7a:18:b3:
8e:7f:56:b1:b3:5a:2c:a2:92:71:cd:27:23:2b:f9:
2e:54:50:9c:e5:92:55:59:40:48:aa:cf:0c:00:32:
a4:ef:a4:31:24:fb:1d:f6:37:0e:7f:76:58:8d:ce:
41:2a:d8:df:f3:6f:eb:c7:2f:fc:63:91:c9:07:2e:
26:ef:a0:a8:1a:bc:29:11:2c:13:cf:97:62:e3:0e:
52:36:65:77:55:3f:f3:2b:c9:9e:95:42:bc:04:10:
b5:8a:ee:e7:b4:73:92:f1:56:19:2e:7b:34:35:53:
29:a0:82:59:65:16:23:85:4f:2e:bf:19:db:b6:c7:
1d:0d:c3:f2:74:db:8e:85:e0:83:57:2b:5b:db:07:
5b:39:11:ca:22:9d:4c:3f:cb:5a:7e:46:46:77:05:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:6C:D8:69:37:48:B7:6C:CA:1D:73:83:6B:12:10:7E:1C:DD:65
X509v3 Authority Key Identifier:
keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.30.0/23
103.189.186.0/23
103.241.100.0/22
Signature Algorithm: sha256WithRSAEncryption
39:b4:2d:c3:84:3f:8b:a5:ff:62:e8:25:12:2e:af:f0:78:a4:
97:1a:f6:fc:48:05:f7:04:d1:6c:30:ff:73:36:66:98:30:44:
52:f3:ec:18:2e:ca:05:6d:af:e3:41:0a:c7:5e:86:79:75:4a:
1d:d4:16:d2:6d:4c:13:6d:9c:53:0b:f5:06:db:a2:e2:dc:75:
f0:6e:be:f2:b9:d0:68:c1:fa:49:f1:0f:1d:af:15:ff:99:09:
0f:87:90:02:2b:3e:f6:b1:08:c9:25:8a:58:f9:3f:7b:e5:2d:
98:d7:e4:09:bd:89:25:1b:ef:57:03:83:0d:35:e0:3b:3d:a5:
e0:a8:b8:06:af:04:ea:be:1b:16:81:58:c4:83:56:18:b1:79:
6c:49:95:c3:ff:fb:e3:73:7c:e4:87:fe:0d:49:04:36:10:92:
74:63:b6:70:ed:3b:48:a9:14:1d:82:8d:01:52:1d:fc:15:f8:
32:65:8b:32:f3:63:c7:08:ad:58:65:f6:57:0d:77:86:14:dc:
06:b9:86:53:86:5f:88:a0:26:b5:44:af:ff:b1:90:7b:99:e6:
86:d7:54:9c:cf:48:c3:9b:35:4c:31:d5:db:ac:89:eb:e7:22:
03:10:eb:59:8a:97:21:e4:ff:61:e7:c5:42:2f:c8:ab:dd:7b:
70:0e:d3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:05 2025 by rpki-client