Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa
File: 44BA2B8C671011EEB41FB227C4F9AE02.roa (raw, json)
Hash identifier: 8KY8F5aAbZQBF/Qe5iecqKDmzqJcSSXnzASxQlPbo4g=
Subject key identifier: 0D:20:98:93:68:D8:BC:09:0C:BC:B2:22:A0:10:D8:50:44:12:FE:10
Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
Certificate serial: EC
Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa
Signing time: Tue 31 Dec 2024 03:57:12 +0000
ROA not before: Tue 31 Dec 2024 03:57:12 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 137263
IP address blocks: 103.126.92.0/22 maxlen: 22
103.126.92.0/23 maxlen: 23
103.126.94.0/23 maxlen: 23
103.126.94.0/24 maxlen: 24
103.126.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF286
Validity
Not Before: Dec 31 03:57:12 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67736b98-6f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:a6:9c:cb:38:0d:8b:63:0d:a3:b8:d1:00:
d0:f4:e8:51:45:c3:11:bc:5c:09:70:87:38:75:c6:
58:45:97:31:08:d1:c4:77:75:39:7f:ea:76:9e:2e:
39:dd:fc:00:c0:00:e9:db:03:0b:bb:c4:12:3b:82:
48:5c:e9:50:9e:06:58:63:19:d9:0f:77:54:84:eb:
5a:e5:8d:da:da:3a:5e:7f:74:64:51:77:0b:13:3a:
ba:41:30:82:39:d6:e5:cb:0c:e1:e7:53:94:73:ab:
60:e4:6e:98:c6:ae:a2:08:03:21:bc:4e:2e:03:29:
5e:64:d4:e0:31:5f:fb:ff:e2:c1:5e:af:d4:00:94:
29:68:12:6a:79:7e:f1:a9:ed:3b:f4:2e:17:18:5e:
8f:7c:71:cd:1e:38:9e:e0:b6:78:4b:a6:af:6d:61:
d0:c0:81:92:cf:84:1f:16:3b:9d:06:ba:51:a1:0c:
30:0f:1c:cc:87:5b:d5:7d:e6:c1:43:03:e2:42:2c:
ef:77:6b:12:a7:8e:77:a9:ea:e0:2d:1b:a5:0f:e7:
de:83:8a:ff:52:33:fb:50:8f:c3:d6:05:a3:70:dc:
3b:e5:b2:9b:c2:12:5e:52:b2:7e:32:5a:7e:bf:00:
38:d2:68:d5:fb:3e:3f:68:36:58:23:04:fe:f7:81:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:20:98:93:68:D8:BC:09:0C:BC:B2:22:A0:10:D8:50:44:12:FE:10
X509v3 Authority Key Identifier:
keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:eb:3d:d4:dd:5a:81:44:c4:e9:a7:1c:93:ec:70:90:01:61:
c2:cd:d4:5b:2b:02:75:78:9f:03:ca:b7:e7:e8:20:9a:58:21:
bc:a6:0e:d8:3b:88:99:a6:23:26:33:5d:f2:13:d6:a1:73:66:
c9:f0:52:c7:ca:90:33:dc:7e:a9:77:7c:e1:54:0f:db:c8:05:
eb:22:ac:03:1b:b1:c2:a4:9e:0c:45:37:2e:7c:bd:99:1c:e1:
18:5d:c3:8a:91:15:9a:a5:32:d7:bb:49:42:9e:2f:a6:7a:51:
b6:8d:3f:b0:09:88:09:e4:62:b1:43:60:f9:ec:62:24:32:55:
f3:36:73:85:8a:79:c9:05:00:9d:cf:a7:81:00:c1:fe:d4:dc:
e9:05:a2:f1:c2:66:7b:14:c0:88:23:f5:5c:84:44:7e:a1:1d:
86:2f:46:90:a9:96:08:02:5c:a5:bc:bf:89:e9:bc:cd:53:6e:
2c:3e:c3:5b:b8:d9:47:fe:2c:98:d7:cc:6f:aa:13:d1:a7:fb:
a8:4c:5b:d0:21:ee:a1:d7:68:6a:f8:0f:29:59:47:5a:2b:01:
3b:3a:2e:30:37:9c:c8:b1:73:97:db:38:cf:b0:6b:ab:08:cd:
c0:b9:ea:4f:23:4f:e4:24:52:51:c6:0a:f5:39:81:18:4f:71:
de:ca:75:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:55:50 2025 by rpki-client