Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/B37444BA7B3711ED9820E681C4F9AE02.roa
File: B37444BA7B3711ED9820E681C4F9AE02.roa (raw, json)
Hash identifier: +VcgRf6z1VT/qmLUhorkYqe7TBDudTQ2zcHHrZKRu3Y=
Subject key identifier: A9:11:58:AA:44:C2:36:73:C1:D3:D4:7B:EA:C8:AF:8F:F6:5C:B4:0F
Certificate issuer: /CN=A91ED836/serialNumber=2555ED39B16F6C8B6815D541B9D8362B9D3FD82A
Certificate serial: 01A4
Authority key identifier: 25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/B37444BA7B3711ED9820E681C4F9AE02.roa
Signing time: Fri 31 Jan 2025 02:46:28 +0000
ROA not before: Fri 31 Jan 2025 02:46:28 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 139707
IP address blocks: 103.137.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED836
Validity
Not Before: Jan 31 02:46:28 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679c3984-4722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:e9:0b:10:5c:33:d0:82:11:62:7b:07:ec:
90:37:a1:a4:cf:40:d6:4d:a3:c8:3e:94:98:40:f8:
99:ca:5d:35:65:3f:8d:f8:b3:5f:c8:df:be:55:f1:
b5:eb:51:e2:63:59:5f:3a:32:ec:ed:22:50:52:c8:
57:61:ad:fa:f6:6a:9c:f5:d8:88:c4:ae:19:5d:60:
34:5b:c4:3b:5c:5d:02:b3:94:30:20:98:86:68:06:
ca:42:fb:c3:5a:ac:39:90:be:b3:dd:6f:0d:40:96:
ba:0e:71:2c:a4:3d:af:e5:2b:fa:1a:ed:35:bf:4d:
0f:f1:b6:bc:af:c3:73:60:dd:95:b0:a1:df:d4:d0:
71:bc:11:f9:db:56:34:b8:80:4e:2c:e4:f8:55:2e:
84:c2:97:69:48:cb:cf:a6:ba:b4:35:47:d3:f1:41:
83:e3:fb:d6:20:b8:78:3e:75:bb:bb:1f:46:03:10:
b4:1f:a9:1d:97:cc:18:7c:77:af:24:57:d2:f4:28:
f8:49:31:9d:cf:0d:7e:d0:4c:b2:ac:90:7f:49:40:
37:a9:c9:21:50:93:5a:1f:22:9c:2f:3d:9d:a1:e0:
b2:a0:94:5e:18:4c:fe:03:9a:fd:fe:dc:b2:2b:83:
2d:b2:75:bb:47:ce:35:00:5d:5b:93:81:fb:d7:99:
eb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:11:58:AA:44:C2:36:73:C1:D3:D4:7B:EA:C8:AF:8F:F6:5C:B4:0F
X509v3 Authority Key Identifier:
keyid:25:55:ED:39:B1:6F:6C:8B:68:15:D5:41:B9:D8:36:2B:9D:3F:D8:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/JVXtObFvbItoFdVBudg2K50_2Co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVXtObFvbItoFdVBudg2K50_2Co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED836/321F8940693211ED887CD27AC4F9AE02/B37444BA7B3711ED9820E681C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.98.0/23
Signature Algorithm: sha256WithRSAEncryption
13:6c:d9:bb:63:8f:75:2d:2b:ba:8d:c0:eb:8f:0e:f6:d2:be:
aa:ae:2e:80:72:7b:b1:ce:7f:de:9c:db:57:84:b7:d2:fd:bd:
d0:5e:e2:f1:bf:c8:fa:9d:bd:6f:7c:51:9f:a3:d0:a6:21:15:
69:01:d1:02:d5:87:c1:40:76:ea:3d:bc:6c:55:4f:13:e7:96:
b3:83:0d:69:4d:e9:b3:f5:86:63:7e:b3:f8:a3:15:4b:fc:5e:
25:21:e8:6d:da:f9:0a:06:91:5d:b2:66:b3:44:c1:e8:4c:de:
83:2b:45:9e:44:af:3a:e5:35:19:34:b9:e4:92:b5:da:3f:0b:
75:85:f9:f2:3a:a1:79:0e:f8:96:db:db:b3:92:83:c0:57:a0:
0f:42:31:10:8d:0a:8f:42:01:2c:ee:c1:6a:e1:04:c2:ee:56:
45:76:b3:da:58:36:24:37:ed:49:e2:15:78:f2:4a:a3:41:ce:
17:a9:42:cc:e9:9c:44:b0:10:f8:8d:8f:26:57:d6:45:a1:23:
9c:2c:f6:e3:07:83:83:7e:ce:dc:42:36:03:59:db:5c:37:e5:
a1:aa:17:fe:53:ba:57:1d:f2:06:dd:a2:41:9c:16:e3:83:27:
c2:e6:d3:f9:dd:d4:fd:70:d8:5e:ce:d2:67:75:0d:48:cb:0d:
e5:d6:59:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:34:54 2025 by rpki-client