Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/00078764E06811EF8716401DC4F9AE02.roa
File: 00078764E06811EF8716401DC4F9AE02.roa (raw, json)
Hash identifier: xskJHyJy9wOT0np+Xdp4jl5Zejz4/7Uevmd8xiyRBK0=
Subject key identifier: AE:5D:04:C9:48:65:5B:CA:A3:C8:A4:0F:43:46:F6:07:F1:C2:3C:92
Certificate issuer: /CN=A91756C3/serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A
Certificate serial: 02
Authority key identifier: D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/00078764E06811EF8716401DC4F9AE02.roa
Signing time: Sat 01 Feb 2025 06:44:35 +0000
ROA not before: Sat 01 Feb 2025 06:44:35 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 132905
IP address blocks: 103.37.48.0/22 maxlen: 22
103.37.48.0/24 maxlen: 24
103.37.49.0/24 maxlen: 24
103.37.50.0/24 maxlen: 24
103.37.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756C3
Validity
Not Before: Feb 1 06:44:35 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=679dc2d3-8b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:d9:73:e7:6e:48:ca:88:c3:b8:0e:93:a9:
ee:41:d5:17:27:ec:61:20:5a:11:bd:a8:99:c5:c9:
4c:87:49:c5:bb:4d:bb:d5:36:5c:4d:82:bb:03:18:
77:77:03:2b:82:b0:6c:15:83:0c:b1:e8:cf:eb:f5:
39:9d:9b:12:2b:ad:7d:e3:c8:e2:49:fe:67:2d:ba:
80:d2:e3:ea:b2:05:59:38:9e:f0:a1:a4:e9:29:15:
37:e1:23:37:0d:cd:28:34:b4:d8:dc:45:0d:0b:16:
12:f8:a3:cf:1a:60:8f:d7:4e:17:4f:25:99:89:c3:
26:5e:75:fb:45:16:57:c1:79:5d:bf:0e:a2:6c:ce:
42:05:23:cd:72:61:07:b9:fa:97:ba:7d:e3:42:f5:
7a:32:52:01:a2:ab:39:4a:00:d5:ac:10:cf:09:a9:
c3:8e:02:35:8e:a7:51:84:fd:67:d9:1c:06:20:17:
7d:2f:b7:84:38:f1:70:fc:d2:96:df:9b:7b:e0:1c:
85:ff:c3:d7:3f:f8:a9:a9:dc:4b:9f:00:e4:74:14:
78:17:45:7b:43:52:49:52:09:eb:ea:8b:fd:0a:4a:
f3:2d:44:8c:c6:6a:8b:c4:fa:38:ba:aa:c3:61:84:
4e:d8:2a:5c:c9:1f:3e:73:fd:51:15:ac:7f:89:bc:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5D:04:C9:48:65:5B:CA:A3:C8:A4:0F:43:46:F6:07:F1:C2:3C:92
X509v3 Authority Key Identifier:
keyid:D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/00078764E06811EF8716401DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.48.0/22
Signature Algorithm: sha256WithRSAEncryption
26:5f:75:59:46:38:b3:34:6e:84:bd:71:2c:be:c3:a2:45:e5:
90:0a:9f:70:d2:e7:85:af:a8:c6:4e:2d:99:e6:fa:4e:22:a4:
83:1a:f3:bd:24:ca:b4:98:03:83:8a:50:ec:41:de:07:05:8c:
9e:df:f7:a7:d3:cf:57:2a:ed:d8:6e:76:d8:1d:34:87:b6:ae:
e7:84:47:7c:99:7a:16:3e:e3:73:42:d2:62:22:9a:62:28:5e:
83:4b:55:70:58:d6:78:68:43:4d:63:36:a9:65:12:78:41:ab:
21:27:3a:f9:81:18:f2:52:af:17:7b:cb:3a:21:48:64:ee:cb:
e4:66:fa:23:78:fb:87:d3:6a:d8:45:76:eb:27:30:90:35:26:
3f:82:4e:33:61:74:b0:86:55:33:49:73:42:ac:5a:c6:78:9f:
10:64:b2:b7:c8:f2:dd:c8:2b:66:17:47:a2:b9:4e:05:30:7f:
9d:ad:11:56:22:1e:13:92:1e:8e:de:10:2b:f7:2b:c6:7f:bd:
32:c2:16:00:5c:a8:fe:bf:f5:15:6d:94:02:e7:f2:ff:64:25:
d7:b5:ea:0e:03:df:8f:b8:01:6f:2a:e8:05:b3:98:93:12:c6:
57:c9:0f:a7:a1:c9:f7:87:ef:f9:49:da:17:aa:d0:9a:22:bd:
1d:2b:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:35 2025 by rpki-client