Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/3B63078201E711EDB2C82D0FC4F9AE02.roa
File: 3B63078201E711EDB2C82D0FC4F9AE02.roa (raw, json)
Hash identifier: y8EP44IV/D41qne8yMUw/86AS6rUnWXM3ggUmLWSPKQ=
Subject key identifier: 24:9A:20:4D:B6:09:B9:4C:53:68:F6:08:E9:4B:D9:B1:E0:51:22:79
Certificate issuer: /CN=A91546FB/serialNumber=DA5C8F2728408FEEF8256E20388DEB9601E5B510
Certificate serial: 011C
Authority key identifier: DA:5C:8F:27:28:40:8F:EE:F8:25:6E:20:38:8D:EB:96:01:E5:B5:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lyPJyhAj-74JW4gOI3rlgHltRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/3B63078201E711EDB2C82D0FC4F9AE02.roa
Signing time: Sat 13 May 2023 06:25:27 +0000
ROA not before: Sat 13 May 2023 06:25:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59333
IP address blocks: 103.227.156.0/24 maxlen: 24
103.227.157.0/24 maxlen: 24
103.227.158.0/24 maxlen: 24
103.227.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91546FB, serialNumber=DA5C8F2728408FEEF8256E20388DEB9601E5B510
Validity
Not Before: May 13 06:25:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645f2d56-8187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:3b:1a:5d:29:85:c2:18:5e:24:35:09:b5:
3c:c2:8f:c4:5d:bf:06:ef:fa:5b:b2:ea:d3:d7:71:
90:0e:19:dc:9a:ee:be:89:7b:41:5e:4c:e9:77:50:
ea:ba:41:54:03:b6:a6:a4:70:3f:c9:7d:4c:07:16:
06:da:d6:b6:a5:e8:a3:b8:ad:2b:20:2a:6f:d9:90:
fb:00:81:94:bc:4d:99:30:f1:fd:2e:7b:2f:67:0e:
29:05:5f:33:1b:32:fc:08:50:3f:08:dd:fa:9d:76:
7f:3f:57:c3:8f:a6:b6:17:9e:76:5d:f6:ee:db:ba:
5d:21:ba:e8:ea:15:7b:2b:4c:ac:15:9a:f4:e3:4d:
f9:6e:59:76:fe:79:31:d7:30:a6:89:89:2c:c4:6b:
7c:5a:00:3c:7d:8d:71:fb:de:e3:20:f9:18:3f:18:
4f:12:00:21:0a:9d:54:18:cc:a3:8d:d4:b1:69:39:
e3:a4:e5:10:b1:ef:41:fa:aa:af:bb:a4:71:29:d1:
45:c0:05:95:f6:4a:6e:c3:a7:16:43:a2:2f:5b:2b:
11:52:91:ea:e5:1b:a5:ec:d7:01:4d:46:02:c2:3c:
da:a6:95:eb:02:28:aa:1b:68:9e:d9:85:5b:77:92:
b5:61:9d:04:b6:a8:87:e7:e8:c0:7f:55:67:f0:6d:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9A:20:4D:B6:09:B9:4C:53:68:F6:08:E9:4B:D9:B1:E0:51:22:79
X509v3 Authority Key Identifier:
keyid:DA:5C:8F:27:28:40:8F:EE:F8:25:6E:20:38:8D:EB:96:01:E5:B5:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/2lyPJyhAj-74JW4gOI3rlgHltRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lyPJyhAj-74JW4gOI3rlgHltRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91546FB/1E5C938A01E511EDBA7BA90EC4F9AE02/3B63078201E711EDB2C82D0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.156.0/22
Signature Algorithm: sha256WithRSAEncryption
57:2b:14:71:10:40:f9:64:0b:dc:49:51:c3:b6:d8:ed:d4:35:
2e:72:bb:db:a1:98:a5:a3:cc:1f:f0:cc:e2:9c:c4:ab:e0:ad:
96:cd:bc:ae:ae:27:b9:9f:41:63:42:ff:c9:5a:72:06:aa:4a:
6e:63:61:c8:96:91:ef:3e:0a:8e:76:35:43:7e:20:fe:1f:08:
9d:73:ab:79:ba:6e:bf:ae:c0:b6:e6:7e:80:12:79:71:a2:fc:
67:9c:1a:b3:82:d4:59:dc:fc:2c:30:dd:e3:58:81:f6:be:1f:
d1:ac:d2:5f:d1:3d:9a:be:97:f2:af:50:4c:cd:d9:51:d5:84:
a1:fd:15:20:32:48:d1:56:2e:9b:92:e0:dc:60:33:4d:7e:65:
29:2c:a4:b7:87:71:35:91:5e:06:fb:c6:48:da:04:af:ad:72:
dd:37:d2:61:d4:c0:df:81:c5:b9:3e:23:18:75:d8:99:f1:b1:
70:0d:a8:f5:2c:bc:6d:c8:bc:bf:81:ca:88:02:06:8c:e6:3f:
69:9f:57:1a:d7:84:7c:08:dc:b8:c8:89:47:6f:f3:4e:98:71:
ac:c8:39:ae:59:90:a1:13:b1:ee:3d:7d:26:8a:fd:83:06:a0:
78:83:92:a3:bd:dc:60:66:a3:39:1e:62:d9:d1:df:25:51:c5:
e5:35:3e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:09:10 2025 by rpki-client