Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa
File: B3250BC6307B11E989188B3BC4F9AE02.roa (raw, json)
Hash identifier: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo=
Subject key identifier: 29:8A:59:86:73:00:E4:DB:BE:45:CD:CB:C0:ED:88:AC:89:04:B5:E2
Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
Certificate serial: 108F
Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa
Signing time: Tue 04 Mar 2025 18:05:28 +0000
ROA not before: Tue 04 Mar 2025 18:05:28 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136260
IP address blocks: 103.85.134.0/24 maxlen: 24
103.141.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4239 (0x108f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CE9
Validity
Not Before: Mar 4 18:05:28 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c740e8-e4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:8e:c3:8c:a0:7b:ea:6c:87:8e:c0:29:58:
22:a6:79:dc:18:16:c5:16:5d:86:6e:32:ca:9b:d0:
93:9f:5e:a4:71:94:09:0f:f6:9d:5b:ad:f0:d3:0b:
3e:db:5c:aa:19:fe:8e:bf:48:97:c6:6c:35:dc:f3:
e1:13:b1:75:42:50:40:96:d0:d0:cc:ed:f3:7e:4c:
0c:40:40:35:64:53:4d:ec:ea:f0:87:d8:ad:77:ef:
e9:04:79:28:ed:42:46:8b:88:0b:74:73:44:68:32:
aa:5a:6a:8a:08:c3:db:42:d4:37:a7:3a:01:dd:9c:
59:ad:bc:75:08:fb:a4:79:82:54:47:0c:88:1f:30:
a4:dc:16:1b:c7:15:e8:a9:ec:43:b7:f6:c1:20:a0:
24:72:d3:1c:7c:79:76:41:72:ed:e3:c3:36:e3:81:
14:98:e3:c8:7d:99:d3:f0:f2:46:90:0f:e3:a8:38:
5a:07:35:5b:4d:1d:8c:ef:79:da:2f:26:d8:78:02:
f2:14:33:f8:cc:4e:65:2b:a3:e0:74:86:9b:bf:8b:
36:70:12:7c:30:04:0e:a3:c9:c6:18:50:13:cd:27:
d1:ef:7f:6f:0a:17:01:a9:e5:fd:4e:8c:6c:16:60:
54:38:71:f0:23:73:8d:47:66:51:d7:bd:7d:74:4e:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8A:59:86:73:00:E4:DB:BE:45:CD:CB:C0:ED:88:AC:89:04:B5:E2
X509v3 Authority Key Identifier:
keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.134.0/24
103.141.29.0/24
Signature Algorithm: sha256WithRSAEncryption
91:16:3f:f8:4a:d4:9b:dd:0c:cd:a9:d6:e5:3e:d3:63:94:e4:
68:84:b2:b0:21:75:b6:f9:cc:db:b1:13:eb:3a:4a:a6:ec:a5:
00:4d:5b:48:59:eb:e1:ed:14:cd:7a:cb:48:1a:f8:c8:b5:62:
dc:81:1b:bb:c8:7f:6f:45:13:9e:a7:4c:13:04:d3:3a:89:10:
e7:72:0e:ea:f5:8a:54:07:f1:db:d9:74:ab:4d:32:ad:c7:ff:
3e:4d:ff:c4:96:2f:c2:8e:b1:81:56:d2:93:43:ae:94:64:02:
52:ac:ca:2c:c5:4a:f6:29:b6:8d:2d:66:71:d7:da:20:ef:9f:
30:97:e3:20:8e:40:69:01:2d:a9:d3:7d:69:84:c7:16:ec:6f:
cd:11:15:55:e8:2c:8e:e3:54:b6:53:cd:24:35:76:41:04:38:
41:db:06:ee:65:f3:e2:df:f6:bf:1c:bb:b3:e2:4e:1e:5e:83:
5b:77:32:dd:b2:08:ce:6f:97:ba:9a:f6:e9:3d:1d:7f:d9:f9:
50:c1:01:db:4e:0d:66:22:c8:2f:a2:c0:9a:fe:58:14:e2:92:
19:d6:ac:b4:32:17:a3:6b:2b:28:e1:29:05:a5:71:c8:80:32:
90:2e:d6:db:78:c8:e4:5f:81:cb:ab:18:09:f9:1f:81:14:8b:
2a:e4:12:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:01:27 2025 by rpki-client