Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa
File: C908B72A696F11EFA4DA475FC4F9AE02.roa (raw, json)
Hash identifier: tXoHtibATlzSAFpYW8FXeLBuzqLRo++NJ/KLRuKUVS4=
Subject key identifier: BD:30:33:E2:BF:DF:4A:79:05:6B:41:3A:72:A2:90:5E:41:41:9D:E3
Certificate issuer: /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
Certificate serial: 0481
Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa
Signing time: Mon 03 Mar 2025 01:53:58 +0000
ROA not before: Mon 03 Mar 2025 01:53:58 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 132834
IP address blocks: 103.135.84.0/22 maxlen: 24
103.248.188.0/24 maxlen: 24
180.94.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153 (0x481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3307
Validity
Not Before: Mar 3 01:53:58 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67c50bb5-d2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:ec:f4:83:2c:48:94:24:f9:9a:4b:ae:4a:
8c:fc:85:d0:90:37:c1:8c:4f:7e:3e:30:85:56:57:
cc:c6:13:e1:2e:1d:58:88:13:9e:44:6f:e9:d8:36:
67:ba:84:d8:50:c8:06:aa:15:fa:35:ae:a7:f3:48:
8f:5d:ea:4e:c8:e7:cb:25:8a:5a:00:3e:0d:b0:86:
cf:65:a7:79:00:17:e4:88:56:dd:52:5b:c8:4a:3c:
c0:fd:44:43:9d:40:57:d2:c3:c0:76:8e:46:3b:a5:
cf:fc:bb:1d:fd:e2:12:0e:f8:5c:67:e4:b1:2f:19:
13:78:d9:43:2f:e7:b9:7b:7a:2c:70:e2:22:09:06:
4f:cd:d1:eb:ea:e8:ba:c8:04:72:b3:f4:f4:e4:fc:
22:92:ff:a1:f1:48:e9:c7:57:f6:7a:d8:fa:5a:04:
76:5a:bf:15:3d:c0:96:fa:a2:c5:60:69:a1:a1:92:
fe:e1:29:06:5d:dc:5b:20:53:f5:b1:c4:a4:c9:84:
d8:be:76:4a:75:3d:f5:62:79:eb:1f:49:94:0c:39:
07:89:7d:f5:ca:df:45:ae:97:70:e1:b2:93:50:30:
5f:e2:18:c9:4f:2d:db:f7:97:e4:e0:f9:1f:e0:da:
aa:ed:d2:fa:c4:83:39:5a:aa:bb:20:7e:bb:92:77:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:30:33:E2:BF:DF:4A:79:05:6B:41:3A:72:A2:90:5E:41:41:9D:E3
X509v3 Authority Key Identifier:
keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.84.0/22
103.248.188.0/24
180.94.238.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:e1:48:b2:ac:d9:b8:70:92:2e:71:43:2f:41:f0:d8:d0:ad:
0a:44:04:44:a8:20:a3:28:b4:57:5f:90:41:cf:68:20:bb:81:
12:28:75:9c:a0:52:a1:5b:06:68:8f:53:46:25:17:af:88:a9:
d5:cf:bd:7a:f3:37:62:85:9c:95:5d:a7:a8:75:74:30:5f:71:
d4:8b:3a:fa:fb:49:9c:f4:d2:21:5b:16:98:77:bf:5e:fa:d8:
b9:fa:34:7a:f5:8a:ff:8d:05:8f:8a:b2:02:fb:4a:63:42:72:
ba:d5:7d:42:e9:05:cf:7c:aa:70:fc:cb:c6:56:91:26:5a:7e:
f5:5e:1c:5c:1c:c4:cc:11:e0:49:75:c9:14:40:8c:58:bb:99:
6c:8d:7e:85:3a:18:de:98:b6:36:e8:ea:ab:eb:ad:41:2f:fc:
f5:59:93:1f:9d:16:48:fd:8c:f4:bb:45:6f:ef:5c:2d:71:ff:
7a:95:1f:d4:64:a5:67:ef:cf:0b:b6:00:1c:52:4e:2c:87:43:
df:b7:6b:c7:56:2d:26:3c:8e:75:db:6e:a7:a4:67:a2:49:56:
91:c7:15:b7:c8:b5:ef:98:14:29:65:a0:06:3c:5c:57:e4:12:
52:bb:a0:ac:85:59:83:3c:c8:e9:e3:53:64:18:18:19:bb:aa:
35:38:99:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:51 2025 by rpki-client