Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/B0245792094611F089247D2CC4F9AE02.roa
File: B0245792094611F089247D2CC4F9AE02.roa (raw, json)
Hash identifier: WzcjSkbp1L3UZdNgdiavQerl/BKgE6QHhDZV6MZpLAY=
Subject key identifier: 35:3E:A5:C3:A3:6C:C8:96:DF:2B:44:0D:7E:66:58:FF:DB:8F:F4:67
Certificate issuer: /CN=A91B9C52/serialNumber=CBC14D405778462F9C5D91583A5C71836F23C19D
Certificate serial: 09
Authority key identifier: CB:C1:4D:40:57:78:46:2F:9C:5D:91:58:3A:5C:71:83:6F:23:C1:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/B0245792094611F089247D2CC4F9AE02.roa
Signing time: Tue 25 Mar 2025 06:59:26 +0000
ROA not before: Tue 25 Mar 2025 06:59:26 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 136969
IP address blocks: 103.151.236.0/24 maxlen: 24
103.151.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9C52
Validity
Not Before: Mar 25 06:59:26 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67e2544d-77e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:67:3a:cd:c0:c6:2b:cb:f3:be:fd:20:1a:
80:b8:1c:2e:cf:03:a2:3d:43:c5:25:e9:4e:ad:2e:
eb:a3:51:6a:8d:74:78:46:41:c5:87:57:7b:1e:17:
35:d6:8d:ee:fb:d6:f4:ca:6a:0c:42:e4:8d:c7:b7:
8a:1b:3f:ff:2c:69:c2:0e:a3:ea:0b:fe:2a:01:ba:
93:b4:44:0f:2b:81:8d:79:62:ec:73:86:03:b0:5d:
a1:55:28:d5:59:08:5a:76:89:f3:17:42:0e:7b:8e:
dc:51:81:c5:2a:33:55:a8:37:bc:35:7c:83:54:d3:
cc:fb:40:ab:85:f5:f0:0f:76:fb:e1:30:fb:f2:65:
b1:2e:ac:0b:4a:e8:93:a9:c7:85:dd:8b:82:4a:4b:
21:30:9a:fc:6d:5a:00:e1:78:79:02:27:4e:c5:3c:
63:d2:26:8c:46:45:ca:a8:f2:34:f3:3c:f8:7f:b9:
c7:cf:82:ed:55:cc:6a:a4:bf:56:15:e2:6b:60:90:
74:a4:4f:19:11:48:2a:76:66:f7:30:1f:e3:1c:61:
b8:d4:5b:6e:1d:3e:80:45:92:bb:c1:25:d5:d1:e7:
98:c8:ad:29:9b:bb:10:83:78:35:bd:56:82:7b:78:
61:2c:c6:c1:1e:08:c5:90:01:50:f6:e4:90:84:9a:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:A5:C3:A3:6C:C8:96:DF:2B:44:0D:7E:66:58:FF:DB:8F:F4:67
X509v3 Authority Key Identifier:
keyid:CB:C1:4D:40:57:78:46:2F:9C:5D:91:58:3A:5C:71:83:6F:23:C1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/B0245792094611F089247D2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.236.0/23
Signature Algorithm: sha256WithRSAEncryption
84:ca:1a:6e:02:2b:12:8a:ba:b0:a9:bf:a7:fa:25:0d:56:84:
54:10:19:b4:81:90:f7:1b:11:42:fa:bd:21:1f:b3:4b:40:38:
f8:62:7a:ca:59:f9:dc:e5:a2:ab:d4:f2:7e:e3:56:82:90:59:
26:5c:3d:c7:88:2f:74:f4:f0:62:fd:f0:79:2a:ca:d6:11:2b:
50:1c:b7:1a:03:1d:c0:3d:85:0d:60:7f:1a:e2:cb:2b:fe:a9:
b0:d1:e7:c8:36:37:30:ea:5b:56:13:93:90:04:e6:b4:da:81:
8c:6d:4e:e3:cf:20:d9:4a:4e:d7:44:04:b2:c3:ae:ad:8b:0a:
ed:62:19:df:ae:27:52:48:dd:03:01:5e:51:2d:24:22:3a:91:
e0:f5:a1:1a:01:15:ed:77:9b:c4:b9:66:93:dd:79:c5:ba:e2:
36:5a:f9:c6:f1:16:f0:40:a9:d8:f2:3d:32:39:32:86:46:bf:
8b:37:11:98:bf:33:1e:fc:3d:99:8d:c6:cf:b8:6a:89:dc:f8:
60:b4:b2:33:d2:17:89:fc:ee:66:4a:26:dc:be:41:49:9a:54:
1a:55:bd:0b:69:8f:27:36:05:35:58:9a:2a:da:09:27:d8:3a:
da:9f:17:98:72:39:9a:1c:b9:9e:bb:e2:0a:b1:49:dc:f3:2b:
d1:9f:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:03:38 2025 by rpki-client