Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa
File: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (raw, json)
Hash identifier: hWe9YX01SNRY++LLyLpvdVJBXAjQTAsl1yrwC2O21mY=
Subject key identifier: 08:A7:E7:E5:B6:49:9F:BC:6D:8F:A0:0D:24:56:43:1A:4A:8E:04:99
Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial: 0331
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa
Signing time: Sun 12 Jan 2025 12:10:08 +0000
ROA not before: Sun 12 Jan 2025 12:10:08 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 147314
IP address blocks: 103.35.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Validity
Not Before: Jan 12 12:10:08 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6783b120-8e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:96:40:4d:8d:60:2b:39:b2:fb:fc:22:8e:
f1:a6:9a:4a:25:5a:4b:b3:e8:84:f7:a6:b1:2a:89:
51:b8:0d:e9:8c:51:0d:dd:b6:6c:70:45:06:b6:b6:
56:85:0f:1e:82:13:2a:fe:cc:d2:cc:a2:e6:f9:53:
8e:fc:2e:1c:30:7b:70:f8:e1:a6:33:7f:ea:ba:f4:
3f:be:c5:6e:3d:75:5f:a8:f9:da:ef:98:47:89:89:
5d:77:47:ff:99:2c:6a:81:08:da:2c:b3:27:b0:44:
10:4f:26:4d:fe:f5:c6:ed:55:4c:c1:cb:b6:66:c7:
26:6f:e2:57:e1:f3:21:48:f0:a4:6b:02:3b:86:74:
ff:77:10:5a:e0:99:42:14:32:ce:55:af:f5:d8:ad:
7e:8b:5b:77:45:cf:7b:90:60:b7:d8:ee:f7:d4:2d:
2f:6b:c8:b3:38:c5:7f:e2:ec:85:ff:37:66:40:b8:
73:06:6d:b9:bd:05:de:9b:30:e2:ce:cc:27:de:48:
84:26:e1:63:99:88:2a:09:23:64:9d:1b:4f:a9:25:
13:dd:59:56:6b:ac:3b:d9:93:79:b4:02:8f:26:ac:
f6:7f:ea:5c:94:7f:60:39:cf:78:a9:19:12:41:eb:
60:66:1c:8b:c8:e1:49:d4:29:64:ee:d2:f6:f8:16:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A7:E7:E5:B6:49:9F:BC:6D:8F:A0:0D:24:56:43:1A:4A:8E:04:99
X509v3 Authority Key Identifier:
keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.35.156.0/24
Signature Algorithm: sha256WithRSAEncryption
36:73:99:56:81:33:c8:54:ed:33:46:0d:fb:c6:07:3b:9d:d0:
24:68:19:d6:a2:39:87:7c:88:8d:ea:89:30:fb:a8:d4:35:a7:
41:af:a0:9a:2c:91:9e:15:a1:0e:73:83:e9:ac:ef:19:d1:15:
e3:2d:e0:d4:19:46:b4:b0:e6:6d:c7:0d:0b:98:a4:8f:3b:49:
db:f2:0a:3e:d8:de:e2:4f:37:3a:62:00:64:8d:64:55:27:58:
84:da:50:62:90:ca:18:5b:5f:1c:7a:b8:b2:3c:b7:9e:95:83:
5d:6d:ea:e4:20:52:64:b7:ba:e9:14:3b:f8:32:7b:9b:77:a2:
c1:19:4b:25:ac:ff:6c:44:eb:bb:eb:a5:68:1c:ca:3c:5e:76:
31:74:83:ff:f7:b0:17:56:84:dc:d7:6c:aa:60:fc:c8:74:2f:
82:ff:05:08:70:05:5f:df:54:46:3b:5a:4a:d5:68:97:e1:0c:
af:40:96:2c:16:ba:b4:54:10:64:28:c0:46:d9:26:5a:83:26:
b6:5f:6d:cb:c5:e5:c8:1d:ed:63:0d:9a:de:3b:be:a8:42:af:
0a:81:7f:26:cd:f5:61:08:a9:e5:5e:77:55:bc:fb:2d:ab:c9:
89:b9:5f:ee:47:c6:7e:de:52:59:04:af:dd:ca:7c:2d:09:56:
b1:68:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:43 2025 by rpki-client