Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa
File: A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa (raw, json)
Hash identifier: NtempH4sH10J4xA32EJi0/pMUNSLL5Y5TyDjBhb9q5o=
Subject key identifier: 37:80:CD:41:40:6D:42:69:22:87:37:8C:7A:CF:52:50:BE:6F:38:A0
Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Certificate serial: 01A6
Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa
Signing time: Sun 23 Feb 2025 04:36:35 +0000
ROA not before: Sun 23 Feb 2025 04:36:35 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 140934
IP address blocks: 103.82.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D65B
Validity
Not Before: Feb 23 04:36:35 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67baa5d3-0a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:67:2a:88:37:64:a3:25:07:d3:7b:5b:fa:
d4:59:bd:fa:d0:6f:d2:30:6c:82:0c:47:d6:6e:95:
b5:a2:1a:c5:10:a4:cc:83:f6:76:64:e3:a7:6c:67:
50:ac:15:1b:00:c5:57:15:e5:b5:7e:8c:06:3d:b1:
e7:a4:8f:8a:6d:57:44:92:49:f3:42:b9:f9:41:64:
fb:70:c6:1d:62:55:a2:f8:d7:67:7f:57:18:70:7b:
bc:c2:8a:52:09:ad:cb:8d:86:9f:77:90:99:43:91:
ba:e7:8f:1e:1b:97:31:c6:72:55:10:61:a7:b0:c6:
d7:6e:f3:ff:27:66:66:9d:43:71:24:f9:93:82:e5:
dc:9c:30:d5:31:1f:e7:8b:08:05:9e:86:18:63:79:
95:7d:ee:44:77:c9:5e:10:65:e4:17:a8:54:d6:b3:
08:7b:c3:ea:b9:2d:da:1f:c2:7f:65:a7:56:a5:08:
ee:ea:aa:5a:6a:4c:0f:fa:41:a5:81:b0:aa:43:d3:
5c:a1:64:19:3a:2a:45:ca:02:a2:11:75:10:d5:24:
58:a7:8a:29:57:68:e3:a2:f6:9d:fc:89:b2:a4:3c:
2b:29:29:c3:57:1f:a4:a9:2f:28:0f:b6:7b:d1:cd:
83:72:68:9a:f9:c0:99:8d:69:98:2b:ea:d4:17:ef:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:80:CD:41:40:6D:42:69:22:87:37:8C:7A:CF:52:50:BE:6F:38:A0
X509v3 Authority Key Identifier:
keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.94.0/23
Signature Algorithm: sha256WithRSAEncryption
95:ac:89:5a:0f:e1:04:66:2c:97:43:a3:94:48:07:57:77:c0:
7b:14:ca:aa:e5:b6:cb:02:75:00:66:71:91:b4:8b:e3:e8:29:
d8:36:64:65:27:12:4c:8b:58:ce:fb:2b:9e:24:d6:ee:46:09:
8c:49:9b:a9:94:54:ee:c3:e6:f5:ef:8d:32:77:09:5a:2a:be:
34:cd:2f:11:35:27:f6:c4:45:a0:74:6d:bb:5b:88:7c:ad:ed:
82:f6:a2:12:c0:33:a9:ef:cd:07:4f:ae:d5:18:68:47:d4:25:
e3:87:ed:33:89:9d:c9:a9:e8:73:9b:43:1a:bb:49:39:05:09:
3b:2c:98:7a:11:b1:49:6b:1c:1b:88:ca:11:39:ff:14:3b:5b:
16:6e:b2:2d:22:08:12:91:22:98:e9:53:95:5f:91:63:fd:a9:
a7:83:5b:72:0f:4e:6b:8d:df:f4:e3:6e:35:c7:7f:96:2e:ec:
26:45:02:fe:80:c3:0d:75:fe:56:fc:d5:45:5e:2b:95:9a:50:
e9:66:51:2b:f5:78:02:d2:3f:e6:0c:96:d6:a8:4e:00:14:3e:
05:bd:d6:78:28:d6:19:a9:20:1a:09:57:d3:0a:6a:4f:56:42:
c1:cb:63:58:5e:3b:55:3b:90:87:97:26:e6:67:4c:d7:2b:7a:
4f:ec:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:30:27 2025 by rpki-client