Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/10E6D9CAB55C11ECA9565039C4F9AE02.roa
File: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (raw, json)
Hash identifier: RzHUUv/miUNX3icVSP0eFdue2uGb59/3arKmFqnz2Fc=
Subject key identifier: CE:B4:E3:61:F4:F9:0B:2D:04:9C:3F:8B:19:50:1C:B3:59:3B:63:C3
Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13
Certificate serial: 0DFF
Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/10E6D9CAB55C11ECA9565039C4F9AE02.roa
Signing time: Thu 20 Mar 2025 17:56:33 +0000
ROA not before: Thu 20 Mar 2025 17:56:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132459
IP address blocks: 103.137.220.0/23 maxlen: 24
2404:b940::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3583 (0xdff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3D04
Validity
Not Before: Mar 20 17:56:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67dc56d1-bda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:70:ba:b8:9a:2a:fc:c4:b6:1d:46:7f:ca:
34:e4:19:b2:38:a6:01:d0:21:ad:c7:dc:29:64:e6:
71:3e:7e:66:a6:df:b9:e7:4c:ab:39:02:a6:2c:5e:
0d:53:71:be:ff:94:6e:5d:56:10:5a:71:cc:73:3c:
5d:34:07:3d:36:23:1d:62:fc:04:8f:0e:55:8d:68:
c9:ef:ec:44:1f:f0:34:fe:34:f5:86:2d:eb:43:6c:
91:d1:1a:15:9c:43:3b:f8:b0:e8:88:f9:a6:be:ff:
e6:7b:1d:ab:8b:31:bf:f9:7a:51:fe:9e:b4:cc:0b:
d1:d6:71:28:2d:e6:65:11:99:a8:ba:a3:f7:80:fb:
28:61:4c:ec:4a:cd:ac:1e:24:58:ea:a5:3a:18:c4:
bb:b5:93:f3:82:d9:57:ff:76:6d:d3:67:59:c9:56:
5e:88:d8:82:0c:12:f8:a1:31:61:64:f4:76:bd:69:
0d:7f:2e:2c:23:de:86:59:ef:57:48:96:f1:77:6b:
f2:a6:11:0c:4b:69:ce:5c:ec:a2:d7:61:0c:a9:63:
3f:99:70:1d:38:4d:d3:8e:d7:66:62:5b:04:36:5a:
2a:79:c6:73:3c:4c:ab:81:7b:e0:d7:92:00:89:84:
2d:25:b0:d1:7d:bc:96:12:e2:d4:73:d1:7f:f1:e3:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B4:E3:61:F4:F9:0B:2D:04:9C:3F:8B:19:50:1C:B3:59:3B:63:C3
X509v3 Authority Key Identifier:
keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/10E6D9CAB55C11ECA9565039C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.220.0/23
IPv6:
2404:b940::/32
Signature Algorithm: sha256WithRSAEncryption
00:e3:2f:ae:3a:23:9c:3e:cb:4b:a3:6a:69:bc:31:f4:40:38:
b2:25:60:fc:71:fa:6f:2c:5b:26:e3:c1:31:03:15:98:0b:51:
2e:84:c3:a8:3e:f9:3d:c6:32:b1:01:cd:ba:10:9b:97:94:18:
fe:69:25:aa:bb:7e:e7:c9:b2:22:82:3c:7c:0f:f0:27:8d:3b:
96:fd:ec:2b:c5:3f:06:3f:ba:59:4c:82:0e:4f:4c:5e:b9:8c:
09:51:63:d9:85:a0:df:95:21:4d:c3:0c:00:a2:16:9d:bb:b3:
39:ea:06:31:6e:15:37:4f:5f:90:d4:53:8b:b8:bd:a1:b8:89:
b2:2d:33:cb:e5:2a:d2:35:73:77:0f:fc:f4:76:74:9f:63:66:
ee:03:20:9e:15:88:75:5f:ef:19:76:1a:55:1b:a5:8c:30:98:
7e:05:18:c0:da:ea:e3:c7:5c:cd:37:65:64:4e:c2:14:8a:10:
55:dc:a5:5d:6b:5c:c2:b3:25:ea:64:ea:91:ae:b7:56:cb:6a:
ee:f9:ed:6e:e8:95:a6:b3:7a:ac:62:a1:a8:14:7c:d0:cd:66:
28:c3:46:7c:e3:a9:7c:4e:c5:37:d0:4a:7f:d8:6c:9b:ee:a5:
0e:b5:ed:73:da:52:71:bd:12:77:5e:78:e4:d1:63:13:5f:67:
c5:bb:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:30 2025 by rpki-client