Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/6DDD4756EEC411EEA4BB703CC4F9AE02.roa
File: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (raw, json)
Hash identifier: 8+VuZ7fIxTmaLVYpnHMJUk/ecoQHiqToC0QiVIOWMis=
Subject key identifier: BC:C3:FC:37:61:75:06:43:84:A2:01:EF:E3:C6:AE:02:01:62:E6:A5
Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial: 018B
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/6DDD4756EEC411EEA4BB703CC4F9AE02.roa
Signing time: Mon 09 Dec 2024 02:05:22 +0000
ROA not before: Mon 09 Dec 2024 02:05:22 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 56264
IP address blocks: 103.37.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Validity
Not Before: Dec 9 02:05:22 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67565061-c4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:d6:a0:ab:9b:b6:c3:99:19:bf:3d:58:26:
16:f7:3b:d4:93:73:0f:d2:3d:45:25:0b:79:34:8a:
0f:4c:1a:47:5b:42:f7:50:7c:c5:80:fe:24:5c:ad:
d0:fb:7b:b2:f3:39:64:77:a4:7c:72:ac:48:fe:25:
9e:dd:79:4e:df:76:d4:0c:b9:c3:05:3d:99:91:7a:
92:26:e1:18:11:e1:66:7e:cf:37:f6:d4:97:8b:eb:
7e:2e:f3:09:6a:8c:e1:e4:7b:09:8c:41:29:24:73:
cc:19:6f:c1:47:85:a2:08:cc:92:3c:23:b6:3d:e8:
56:82:a7:ee:5d:9e:6f:39:93:75:ce:c7:2b:45:68:
fd:b3:7d:e0:f8:6d:6f:1f:0e:48:a2:de:cc:0d:23:
b7:b9:bc:a3:a6:f0:5a:77:a9:54:69:49:89:e7:17:
1c:03:eb:e0:06:12:e9:73:41:85:15:c7:97:2c:7e:
60:f0:50:27:a1:4c:e9:3c:84:a1:16:3f:27:07:fe:
2a:4f:e6:67:4d:3b:1a:d4:68:ae:18:2b:95:40:92:
09:6d:58:55:cc:94:0e:2c:68:04:16:66:26:e9:97:
f1:24:2f:92:94:b5:d1:fd:da:e8:07:7b:53:2f:db:
4f:77:a1:a1:9e:10:9b:07:4d:dc:e6:da:ca:d1:c5:
ba:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:FC:37:61:75:06:43:84:A2:01:EF:E3:C6:AE:02:01:62:E6:A5
X509v3 Authority Key Identifier:
keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/6DDD4756EEC411EEA4BB703CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.184.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0f:15:69:7a:1e:ff:b2:7e:6e:a8:24:48:12:8a:f7:cd:dd:
2f:a1:ba:87:6d:32:b1:3f:e9:7b:7e:b5:6f:ba:96:15:03:92:
cf:8b:77:92:ce:41:18:2f:ae:a4:1f:92:d8:91:81:35:cb:8d:
cd:b3:83:21:91:1d:78:31:39:47:b4:07:5c:68:74:47:ab:20:
fc:14:ff:23:db:0f:1c:54:3d:42:d7:dc:8e:76:f2:c2:7c:46:
37:35:f1:e6:14:a8:bb:b3:42:8f:84:42:7f:a4:4b:e6:c5:23:
95:bb:3e:bd:6e:e0:55:4c:f4:ac:f3:6c:af:c6:3f:88:54:5d:
ca:ae:7b:4c:65:e0:f8:41:54:be:11:f8:16:02:c7:4d:28:93:
e8:67:47:60:46:6b:80:c5:bd:21:b6:09:ab:03:c4:54:b1:1a:
07:19:28:1a:cc:46:81:f4:6d:60:e8:33:dd:e4:fe:42:a7:a3:
b4:81:29:b0:4e:f6:c3:9c:89:5d:d9:a9:2e:2f:e0:3a:0e:46:
13:2b:e6:50:ab:a5:55:5d:21:63:8a:14:24:5d:e0:3b:a9:f7:
d4:58:8e:da:56:c7:15:41:7b:a9:41:ec:a6:98:6f:08:fc:44:
1b:30:db:fe:4e:ad:83:84:e3:e3:d3:74:72:d4:f7:e3:06:e2:
49:e8:52:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:46:23 2025 by rpki-client