Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
File: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (raw, json)
Hash identifier: UStQZ3E5ENhOJAnKZAoPf8pnLHZK3+vt2+bwJ7bo508=
Subject key identifier: 19:30:83:D6:24:72:80:E1:5E:C7:1E:49:C0:B1:53:45:BC:C9:0D:4C
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 36B5
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
Signing time: Sat 22 Mar 2025 15:00:55 +0000
ROA not before: Sat 22 Mar 2025 15:00:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134489
IP address blocks: 59.103.36.0/24 maxlen: 24
59.103.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14005 (0x36b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832
Validity
Not Before: Mar 22 15:00:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67ded0a7-0bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:50:61:de:fc:d2:26:8e:fc:a9:d4:9f:b8:a7:
89:79:af:41:93:8f:74:df:be:be:79:9c:39:0c:6f:
ee:cb:2c:be:68:b2:cf:77:af:a3:ae:8e:11:ed:8a:
9e:d8:0e:15:59:42:bf:9d:84:d6:9a:6c:a4:d3:4a:
bb:8b:2f:40:19:a4:22:d8:90:c7:be:96:22:63:21:
d7:60:1f:0a:5e:b9:96:34:b4:66:25:19:c8:15:ac:
b6:c8:55:22:dc:64:af:3b:2c:cc:ca:8c:dd:75:6b:
87:12:c8:64:44:0f:71:c5:5e:18:f7:35:fe:43:b6:
10:b5:2f:a6:35:66:d2:e4:7a:8c:c0:04:c0:ce:9d:
7d:96:ca:9c:c7:4c:d0:0e:35:a0:fa:f6:a4:48:f8:
19:69:0b:da:8a:3b:41:25:b0:45:9c:6b:0d:b9:db:
f9:9c:b9:06:6b:83:26:c3:2d:7a:e0:cc:20:1f:88:
75:80:a2:ec:1a:db:c8:e6:d9:5a:ee:53:2f:ed:30:
fe:8c:5c:7d:16:ef:c3:cd:61:18:ab:8c:a7:ab:df:
85:57:85:e9:41:93:38:94:12:16:7f:4a:d7:d5:a1:
a1:4a:a3:f2:a6:d8:dd:b9:57:33:0d:a9:29:3d:05:
ce:23:e8:66:e6:a7:5c:42:de:b8:ea:a6:06:8c:98:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:30:83:D6:24:72:80:E1:5E:C7:1E:49:C0:B1:53:45:BC:C9:0D:4C
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D10DBCB2475C11EEBF5FB180C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.103.36.0/23
Signature Algorithm: sha256WithRSAEncryption
91:fd:a2:37:d0:66:a3:3e:f8:f9:47:e5:9c:05:d6:db:bb:a0:
fb:80:b9:ba:d4:66:63:2d:b0:f3:b1:e5:ad:e7:fc:31:b2:70:
57:ee:41:5d:fd:0d:18:b6:22:7c:87:83:57:4a:87:dc:84:1d:
b0:d0:4c:00:06:61:b1:24:54:03:0e:38:81:b7:bc:dd:ee:97:
21:ea:2d:14:7f:ae:9e:49:14:bf:96:c5:d5:d2:68:fc:28:b4:
c3:61:04:7d:be:fc:5f:d9:b2:75:74:62:73:a9:3a:af:2a:f2:
81:2b:32:3c:52:93:42:f9:20:59:43:05:05:af:35:0c:36:f9:
1d:01:01:ce:52:b6:79:8a:e7:b6:7d:90:22:92:0d:8f:5c:84:
e6:bb:61:e3:e9:0e:f3:a2:8d:55:fd:fb:e5:fe:e3:12:25:0a:
6e:62:9b:41:e7:8a:aa:30:ff:1b:34:dc:aa:bc:70:2d:60:31:
7d:16:2d:a6:d9:33:03:c0:d3:a1:da:8c:61:24:bd:ae:0e:67:
e8:21:c5:58:ba:7a:d4:1b:cb:d6:a5:26:f7:b9:87:ae:37:ae:
8c:47:15:eb:9e:e9:6b:5d:d7:ba:4b:dd:56:56:15:20:f8:0b:
70:0e:95:c1:4d:6c:34:fb:f4:fc:92:1a:b8:76:89:61:82:27:
70:11:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:03 2025 by rpki-client