Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/A3013D2A0CCB11ED97820077C4F9AE02.roa
File: A3013D2A0CCB11ED97820077C4F9AE02.roa (raw, json)
Hash identifier: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=
Subject key identifier: 6C:F1:CE:7A:2D:9C:B1:28:7F:6D:67:DA:24:9B:AE:95:E4:E6:FC:5B
Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Certificate serial: 0231
Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/A3013D2A0CCB11ED97820077C4F9AE02.roa
Signing time: Tue 31 Dec 2024 01:44:09 +0000
ROA not before: Tue 31 Dec 2024 01:44:09 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 64065
IP address blocks: 103.19.36.0/24 maxlen: 24
103.88.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Validity
Not Before: Dec 31 01:44:09 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67734c68-df2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:56:13:dc:79:9a:29:d6:0e:2b:d3:a3:f7:8a:
a6:a2:ef:3d:93:4f:76:33:9c:50:68:16:d4:a2:e8:
5a:b4:e6:7c:d5:42:04:f2:30:13:54:57:09:e0:76:
46:18:ec:52:74:83:95:2f:ed:7f:fa:3b:99:b8:a1:
b8:b0:61:db:fb:7f:1b:2d:c3:0e:8f:64:7b:74:22:
f3:8b:6f:81:a7:d6:c4:75:22:91:43:82:05:3e:f8:
7b:eb:c9:08:39:3d:26:1f:b3:46:97:05:84:ca:96:
d1:e1:12:15:f1:8c:f9:5a:21:50:32:db:3f:d9:bc:
b7:49:8b:f0:e2:78:b0:6a:21:2e:87:b9:d8:3b:24:
0a:1f:41:1d:7d:c7:84:de:d7:df:aa:04:1d:59:46:
46:b8:62:7c:dd:1a:1a:5c:fa:ff:7c:ab:54:8c:e7:
10:8c:17:a0:3c:d8:b6:7e:60:8a:8b:a5:c8:d0:a1:
e8:f1:63:c7:82:16:a5:6a:ef:02:1b:a9:fa:12:4e:
64:f6:01:fa:97:77:dc:4a:9e:bc:cb:2d:68:ff:5f:
1b:e2:a1:61:f6:47:8b:fa:c9:96:f8:8f:b3:7d:07:
6b:16:9e:b3:e4:89:54:0a:59:9e:16:78:b3:80:03:
d7:80:3f:01:4b:0d:f3:68:e0:40:2d:56:fa:cb:9d:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F1:CE:7A:2D:9C:B1:28:7F:6D:67:DA:24:9B:AE:95:E4:E6:FC:5B
X509v3 Authority Key Identifier:
keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/A3013D2A0CCB11ED97820077C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.36.0/24
103.88.136.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:bb:1c:6d:13:7c:7f:bd:72:48:16:30:3c:c5:6b:5f:e4:60:
27:db:f5:da:b0:ac:2f:23:be:27:5c:93:a6:99:d1:5e:bc:34:
b1:bd:11:26:5b:52:ee:49:79:cb:63:d6:4c:a2:d8:77:40:f7:
6e:cd:b6:3e:f2:ca:60:2e:b4:9e:06:a2:84:06:59:78:32:13:
0f:78:35:a2:08:4e:92:a6:b7:56:42:f2:8b:bd:26:69:ba:3f:
e9:2e:37:84:44:52:85:4a:6c:d2:72:39:4b:ee:b3:00:4c:98:
93:8f:f4:91:fb:ed:c0:df:79:b5:53:43:3a:3e:21:ef:f7:0e:
de:67:87:d4:93:3a:5a:6b:b8:81:18:72:d4:ee:e9:33:b1:82:
70:08:a1:f4:12:51:de:b7:17:9b:33:ba:13:8d:72:65:69:15:
52:c3:aa:25:66:ff:5b:4b:02:20:bd:86:b4:98:57:27:68:07:
63:06:12:38:83:f0:0a:3a:ec:38:26:16:56:25:73:78:23:ad:
e0:22:89:9e:d2:a9:ff:dd:92:c2:4a:03:72:25:e8:8c:56:11:
75:07:fc:d0:d1:62:9a:16:48:d1:62:9d:e9:f1:15:c2:08:a8:
32:37:a8:2d:bd:d7:f0:28:f8:d7:6c:4e:52:01:7e:3f:3f:bb:
e4:f5:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:54 2025 by rpki-client