Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/3B63078201E711EDB2C82D0FC4F9AE02.roa
File: 3B63078201E711EDB2C82D0FC4F9AE02.roa (raw, json)
Hash identifier: OGeJjXQ6+keMWrpSjqapt+os+8ZPIOyGweY9wP89a7Y=
Subject key identifier: 94:73:65:FC:E2:08:FF:E0:DC:27:73:C1:6F:DE:71:D0:55:DA:7A:8B
Certificate issuer: /CN=A91546FB/serialNumber=DA5C8F2728408FEEF8256E20388DEB9601E5B510
Certificate serial: 01E7
Authority key identifier: DA:5C:8F:27:28:40:8F:EE:F8:25:6E:20:38:8D:EB:96:01:E5:B5:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lyPJyhAj-74JW4gOI3rlgHltRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/3B63078201E711EDB2C82D0FC4F9AE02.roa
Signing time: Mon 03 Jun 2024 05:22:11 +0000
ROA not before: Mon 03 Jun 2024 05:22:11 +0000
ROA not after: Tue 01 Oct 2024 00:00:00 +0000
asID: 59333
IP address blocks: 103.227.156.0/24 maxlen: 24
103.227.157.0/24 maxlen: 24
103.227.158.0/24 maxlen: 24
103.227.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91546FB, serialNumber=DA5C8F2728408FEEF8256E20388DEB9601E5B510
Validity
Not Before: Jun 3 05:22:11 2024 GMT
Not After : Oct 1 00:00:00 2024 GMT
Subject: CN=665d5303-f3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:49:5b:4e:e0:c6:01:47:70:b4:da:dd:f3:
85:2c:96:ae:19:3a:ed:55:df:da:38:cb:1d:88:8a:
da:c1:96:d0:8c:bc:f8:11:69:03:b1:87:77:5a:51:
02:25:6d:c7:ac:99:da:aa:63:f8:c7:72:86:47:2d:
30:07:49:95:a5:63:04:91:47:ca:ca:45:75:9a:8a:
51:d2:f0:49:94:fb:60:81:a9:e0:bf:66:b3:9b:59:
0b:98:87:d6:9f:05:97:36:5e:1c:56:f4:f3:dc:f2:
12:d7:16:ec:2c:33:c0:91:3b:70:27:e9:53:71:52:
eb:b4:c3:22:5d:7f:5d:8a:cb:21:3a:e4:5a:82:3a:
14:e6:1a:a4:77:15:47:40:04:da:37:b2:d4:f4:cc:
69:fd:51:9b:ee:69:51:f4:c3:cf:be:c6:04:9b:3d:
6a:09:ab:cc:7f:a6:9e:36:66:12:3f:2e:9a:01:5e:
60:89:d5:1f:fd:3a:36:3e:77:65:20:32:97:59:77:
e2:b7:eb:cc:2d:cc:11:5e:97:84:5d:f1:fc:17:d0:
27:99:35:ea:a5:df:c3:b1:45:b5:e0:4c:66:a9:43:
f0:51:b2:b0:4f:b2:28:e8:60:2c:d7:90:b1:53:f2:
e6:09:f6:9c:9b:f5:67:e5:41:d6:1d:4e:78:89:63:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:73:65:FC:E2:08:FF:E0:DC:27:73:C1:6F:DE:71:D0:55:DA:7A:8B
X509v3 Authority Key Identifier:
keyid:DA:5C:8F:27:28:40:8F:EE:F8:25:6E:20:38:8D:EB:96:01:E5:B5:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/2lyPJyhAj-74JW4gOI3rlgHltRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lyPJyhAj-74JW4gOI3rlgHltRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/3B63078201E711EDB2C82D0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:c6:51:14:36:93:ef:d8:34:9a:89:1b:57:ee:5b:9a:3d:1f:
ba:a9:d7:5c:26:a5:7e:a4:7a:2e:e4:43:49:f0:e9:4f:73:1c:
5e:7d:b7:a4:29:da:ed:6c:6b:16:57:23:bb:4e:35:fd:a2:fd:
38:c9:3d:6f:0e:d9:3e:13:23:1f:59:c2:ee:fb:d7:5f:c6:9a:
30:bc:cb:42:d2:5a:f5:6e:68:fa:f5:1f:86:18:16:ff:a9:df:
88:e0:3f:42:b6:0e:10:26:17:dd:08:56:14:be:ec:01:11:63:
e2:1c:d0:b8:74:a1:de:17:29:70:90:99:83:f8:ad:aa:3c:d8:
95:d5:39:0f:d3:60:9c:45:f1:40:57:88:72:b5:3b:99:65:91:
e9:b1:9b:9b:9f:a7:27:73:6e:41:88:0c:37:06:6c:98:52:a0:
18:fe:71:23:f4:1f:f3:8c:06:74:5e:ea:8f:0b:62:5e:82:a6:
f3:9c:0d:5f:72:46:4c:50:7a:f1:85:ad:e3:5e:31:b5:36:66:
cd:1c:f8:49:75:25:95:9e:0c:09:3f:c0:21:28:b8:70:5f:87:
6f:0a:00:75:21:bc:24:d9:2e:e1:ee:18:91:d6:84:50:57:3f:
36:f3:d7:84:9e:a6:55:9e:4b:e4:b3:d7:ed:12:03:86:cf:c0:
12:82:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 07:02:01 2025 by rpki-client