Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/E7C7DBF8A0E411EF98A7340EC4F9AE02.roa
File: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (raw, json)
Hash identifier: 7jEw+cOkWTAknu5PcBj2MNehVkDO0rbITl2EdNIaO7o=
Subject key identifier: 55:76:80:17:C1:5B:C2:BF:DF:AF:26:63:92:0B:EE:73:07:C6:1B:E9
Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88
Certificate serial: 4D
Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/E7C7DBF8A0E411EF98A7340EC4F9AE02.roa
Signing time: Sun 05 Jan 2025 05:28:47 +0000
ROA not before: Sun 05 Jan 2025 05:28:47 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38200
IP address blocks: 103.125.252.0/24 maxlen: 24
103.125.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2EF9
Validity
Not Before: Jan 5 05:28:47 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677a188e-50a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:c1:ea:55:cd:1c:ce:5b:3b:2b:1a:57:c5:
c9:dd:03:26:c7:bb:63:02:e2:d2:c8:0e:44:77:98:
5e:d4:71:e3:cc:05:b0:9f:93:01:dc:d7:e3:df:20:
73:91:7c:55:e3:00:32:54:25:5f:29:dd:1c:94:8c:
9f:2c:90:06:b0:60:02:53:1d:56:6f:a5:41:d2:3d:
4a:ec:d4:51:84:3b:d9:53:55:22:cd:58:70:d0:43:
10:50:4e:cb:c9:71:92:2b:46:d9:0e:48:97:cf:d4:
42:8c:c2:de:69:7d:2c:f3:d2:15:2d:01:4f:bc:74:
59:8e:0c:a6:ac:19:48:e7:fd:8a:3d:e7:7d:48:20:
35:6f:e8:95:ad:15:1a:a7:bc:27:e6:5d:16:36:f1:
58:f4:e4:93:e8:55:af:1b:78:89:fe:b3:f2:8d:6a:
81:09:60:5a:fb:13:2d:8f:24:37:49:cb:78:0c:52:
8e:2f:cb:96:4a:2b:b3:0d:8a:7b:09:cc:1d:6e:61:
cc:54:b3:b1:c0:46:f6:9a:fd:bf:82:fa:be:b9:76:
e6:8f:4d:78:75:b2:d0:a0:81:62:1e:40:ed:d9:d9:
b7:b5:38:a9:26:77:27:94:12:18:3a:98:9a:dd:8b:
23:ea:06:05:3b:89:fc:81:c4:30:c2:10:80:ae:1f:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:76:80:17:C1:5B:C2:BF:DF:AF:26:63:92:0B:EE:73:07:C6:1B:E9
X509v3 Authority Key Identifier:
keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/E7C7DBF8A0E411EF98A7340EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.252.0/23
Signature Algorithm: sha256WithRSAEncryption
83:45:e4:ca:1f:f3:de:23:25:44:5d:a4:94:2d:5f:78:cb:cc:
2f:42:3e:35:c2:18:1a:26:87:b8:b6:f1:4c:ba:41:4a:a4:f0:
31:88:ce:71:16:e5:b6:67:a7:43:32:7a:6e:00:50:cb:0b:13:
5b:fc:3a:d5:5c:d8:b7:88:0b:f5:1a:31:8a:b2:86:49:04:70:
52:ba:0d:36:43:2e:98:88:af:06:8d:ac:a9:d4:d4:9d:d9:13:
e7:17:c3:6f:1b:41:e1:71:9d:80:d6:c2:1a:41:ff:8d:c5:54:
1e:5e:9f:95:9b:a1:19:7e:ea:42:5d:90:31:67:f5:89:fc:b8:
36:09:d9:f2:21:a2:e6:5e:da:9b:91:44:ce:04:48:a5:09:e3:
02:15:ee:5f:b6:0f:17:88:44:60:f8:6f:35:05:3f:c5:91:00:
d2:6b:7f:46:4a:58:58:80:72:e6:22:ea:25:94:e3:e6:bf:23:
3c:ab:9e:4d:27:45:de:89:3d:e5:ab:71:bf:cc:ae:3f:d6:a8:
44:88:1c:f7:a2:90:59:39:6d:2a:3e:65:5a:2a:62:2c:a6:eb:
e9:f2:0b:7b:56:cd:b7:fb:2f:64:5e:a5:7d:26:cd:74:d3:66:
3c:41:c6:f0:dd:9f:ca:ed:fc:35:16:45:a4:19:be:fd:80:83:
93:7f:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:39:42 2025 by rpki-client