Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/38043DF4938B11EEA552D487C4F9AE02.roa
File: 38043DF4938B11EEA552D487C4F9AE02.roa (raw, json)
Hash identifier: Z/v2dPSlVHtaS2gXVPwHt6zhX6qyLYHvPRCOMkLkMrI=
Subject key identifier: 47:C9:E8:1B:3E:62:60:C2:CD:15:3D:E8:CF:22:AE:E0:70:40:B0:8C
Certificate issuer: /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial: 0300
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/38043DF4938B11EEA552D487C4F9AE02.roa
Signing time: Sat 29 Mar 2025 01:56:39 +0000
ROA not before: Sat 29 Mar 2025 01:56:39 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 62816
IP address blocks: 103.186.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768 (0x300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0935
Validity
Not Before: Mar 29 01:56:39 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e75357-2509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:3d:1e:ef:29:8f:55:59:6a:6f:bd:fa:00:
c3:cd:7c:c9:ce:5d:78:7e:f3:59:4d:cf:13:e4:e6:
00:7b:07:ac:c5:25:f5:5c:bb:5f:a5:ab:b1:c8:52:
b1:19:50:5c:b3:09:c8:9f:b5:9c:d3:48:1f:d6:1a:
03:44:00:41:c9:3d:f4:55:02:a9:c2:1d:40:53:e8:
f5:ba:41:d0:ee:f8:2d:de:e3:00:c0:b8:e9:b0:22:
c4:96:57:ec:bc:b2:00:b5:47:44:58:ba:d9:2f:76:
78:f9:1b:e1:60:5f:3b:cf:27:bd:1a:fb:2d:2c:a5:
4a:34:20:cd:8d:32:e5:c9:c7:15:54:f9:3a:92:97:
b2:7d:25:73:6d:d5:a2:4f:da:05:26:bd:fa:1b:d4:
f2:98:e8:f8:ae:c2:c5:61:8f:44:49:5c:71:7a:50:
4c:e3:80:e5:5d:36:17:3e:2b:87:21:49:d1:e1:92:
1d:f8:e1:ad:90:5a:ca:28:b3:bd:e9:51:a7:19:fe:
cf:8a:26:ec:94:c7:56:ec:39:ed:2c:32:f3:7b:79:
4a:63:df:b0:21:92:a3:c2:ca:34:ea:58:35:30:20:
e3:0d:b4:53:56:52:56:54:bb:95:a4:bc:e5:0c:a0:
91:60:33:ef:5e:b1:b8:83:3b:0f:49:f1:93:b4:fb:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C9:E8:1B:3E:62:60:C2:CD:15:3D:E8:CF:22:AE:E0:70:40:B0:8C
X509v3 Authority Key Identifier:
keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/38043DF4938B11EEA552D487C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.113.0/24
Signature Algorithm: sha256WithRSAEncryption
18:57:2c:b7:c1:34:87:76:a8:37:98:05:53:04:fa:97:ad:24:
e2:ca:35:7f:78:a4:eb:f4:08:b3:a5:25:c8:d8:07:9a:c9:76:
7c:62:7b:9e:d6:37:dc:4f:e4:cc:99:dc:2f:f1:81:c5:32:02:
82:07:d0:9c:b4:e5:2f:89:7a:75:ac:63:af:5c:2f:69:15:71:
95:85:01:47:fa:a4:07:9b:f9:53:0f:93:7f:68:96:dd:e8:02:
67:d6:e5:e2:a5:9d:73:34:2a:d9:1c:7a:d5:57:4b:17:5e:ee:
99:1e:e5:03:45:5b:75:2d:16:1e:61:c3:7c:2f:66:40:45:ec:
25:62:0d:cc:c6:98:82:3b:9e:1d:63:91:11:37:9e:b3:79:22:
5d:53:45:7b:60:5d:fb:f1:18:11:08:08:c1:1c:f0:cd:59:33:
31:cc:42:b1:74:04:c2:c2:9c:36:a7:03:19:4c:af:2a:b0:c4:
6a:f4:12:38:ab:62:94:9b:66:c9:06:dc:0f:79:05:04:4b:95:
22:fa:15:00:33:c6:26:53:9b:cc:09:cf:db:9d:fc:b6:d6:9a:
4b:aa:0c:bb:ae:a3:55:cd:38:a8:04:15:b4:b3:fe:2e:4b:4c:
91:f3:c5:88:0e:f1:4a:f4:37:b6:5a:4f:a5:e3:10:b9:55:e5:
0f:cf:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:19:52 2025 by rpki-client