Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/920570C69B3711EEB43EFD3BC4F9AE02.roa
File: 920570C69B3711EEB43EFD3BC4F9AE02.roa (raw, json)
Hash identifier: HnecD6Q/cIiXiWH9oclQeOZEX9Tbtbgib28ChFMJgm8=
Subject key identifier: 1B:4E:97:EF:5D:14:8A:53:66:EE:40:FF:4D:5D:AE:C6:CD:7F:D9:7A
Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial: 0444
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/920570C69B3711EEB43EFD3BC4F9AE02.roa
Signing time: Tue 14 Jan 2025 09:56:23 +0000
ROA not before: Tue 14 Jan 2025 09:56:23 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 136997
IP address blocks: 103.175.244.0/24 maxlen: 24
103.175.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D774B
Validity
Not Before: Jan 14 09:56:23 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=678634c7-5643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:b8:74:cd:ed:af:63:83:31:78:a7:c1:97:
28:12:1c:f7:36:0a:e6:71:10:82:f0:64:fc:be:78:
54:1a:d6:ca:d6:e9:d4:91:ee:f1:d9:9a:84:ba:ee:
0e:cb:52:40:aa:6e:e0:57:68:08:55:14:08:61:b8:
6f:4e:fe:de:17:c4:bd:a9:fc:2e:1b:8d:e0:9d:4d:
74:1f:a0:c3:d4:a1:de:f0:29:44:e6:48:23:21:27:
0e:90:bc:10:78:2e:59:ce:58:5e:ef:5c:75:5a:0f:
25:6f:e3:e5:01:aa:9d:cf:96:44:15:09:47:05:6e:
15:61:69:72:a5:a5:04:13:d3:5f:fd:43:d2:6b:74:
f6:fd:4a:61:df:05:1c:9b:f2:41:18:75:44:77:17:
b4:66:2f:ca:c7:aa:78:9d:5c:d0:c3:85:3e:68:b1:
a4:bb:a0:9b:cd:74:b7:c3:30:6b:e3:f7:83:a2:a6:
90:f8:44:e6:de:36:81:e7:cb:30:21:26:d7:81:89:
ea:9f:03:14:75:c8:2d:14:af:ba:e6:1d:f9:e0:35:
25:99:72:f9:f2:f3:00:f1:92:04:7d:a0:f4:30:4c:
5e:fe:bf:2c:30:56:8b:d1:1c:ad:b9:fe:96:97:85:
ed:1f:3b:43:fb:52:b4:36:00:97:2d:d7:90:65:f9:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:97:EF:5D:14:8A:53:66:EE:40:FF:4D:5D:AE:C6:CD:7F:D9:7A
X509v3 Authority Key Identifier:
keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/920570C69B3711EEB43EFD3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.244.0/23
Signature Algorithm: sha256WithRSAEncryption
42:a2:35:8b:ad:e6:39:16:48:99:35:96:17:f9:87:48:c5:9b:
b3:06:1b:30:3a:c0:2a:81:52:69:5d:f8:63:ec:d8:02:fe:14:
dd:eb:1c:94:f1:6a:97:3b:8f:79:12:f3:6c:a0:89:23:f4:20:
36:c1:f6:01:41:fa:6f:b6:31:50:a2:84:76:31:df:89:71:48:
bf:69:f7:c5:c8:7d:20:08:1d:91:ad:c0:1b:eb:f9:0b:d8:fc:
41:6f:e5:91:48:03:eb:2f:99:87:f4:10:b8:56:29:af:2b:fc:
d9:bb:cd:aa:89:3e:9d:55:05:aa:f4:52:2e:e1:41:57:6d:ff:
e2:9c:fc:59:88:63:62:6f:83:32:ee:08:47:eb:22:0b:87:3c:
09:c1:85:e8:d4:e7:1b:46:c7:69:69:c3:3b:82:6a:69:63:db:
59:02:8e:d9:08:61:18:92:fd:a6:a5:71:22:bc:d2:1f:b1:44:
49:64:2b:ec:ee:5b:7f:73:83:ff:92:11:22:d3:b5:81:b5:86:
55:b2:63:9d:ac:86:ec:a1:5a:3a:e3:f0:e0:54:07:99:9f:c5:
68:1b:4a:84:35:d8:2a:71:c2:83:62:ac:cf:7d:20:1e:b0:00:
67:2b:38:c5:e0:b6:67:43:33:6c:31:a1:88:85:e1:b1:34:a9:
68:16:cf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:23:44 2025 by rpki-client