Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/6C27C19E4BFA11ECA6797F6DC4F9AE02.roa
File: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (raw, json)
Hash identifier: 9zlcNMp71CcrKhJ6RcgbQ3pW8nUmE/ShM6R3qPGEpIM=
Subject key identifier: 3A:53:D5:F8:97:DD:21:CD:78:9F:4A:43:E9:A9:CA:40:30:DE:7C:81
Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Certificate serial: 042B
Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/6C27C19E4BFA11ECA6797F6DC4F9AE02.roa
Signing time: Tue 07 Jan 2025 00:15:28 +0000
ROA not before: Tue 07 Jan 2025 00:15:28 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 4764
IP address blocks: 103.176.60.0/24 maxlen: 24
2400:3120::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Validity
Not Before: Jan 7 00:15:28 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677c7220-4815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:b5:b2:90:97:84:bc:47:95:2f:10:3c:ef:
c4:49:13:e5:84:b9:f3:d8:a1:0c:6c:33:bd:a8:48:
f7:99:ad:aa:0e:6d:c9:e4:fc:1a:9b:bb:91:2a:64:
88:fe:cb:73:8b:b9:26:84:5c:26:63:08:59:10:78:
f6:85:fa:d5:68:42:78:fb:90:d1:07:1c:28:6c:5c:
52:4a:7e:42:0c:e9:b4:b3:7c:c0:56:4d:92:dc:3a:
a2:07:bb:9f:53:40:da:cc:a3:47:a1:0e:ba:ee:0d:
2c:1d:02:59:2b:c2:c2:28:15:97:39:4d:51:7c:e2:
25:d9:37:24:4b:0a:65:c8:a1:f1:f3:cd:bd:87:43:
33:d1:10:bc:f4:b5:a6:4a:87:24:15:92:3b:57:c0:
0a:c5:b2:8e:fb:5c:a9:f0:84:af:ab:0b:95:d8:6c:
24:d1:4b:46:c6:ce:3c:aa:61:05:40:65:77:cb:89:
84:8d:cb:29:49:9f:53:3e:4a:44:1f:ec:71:3a:63:
a6:2c:a0:c4:69:48:2a:56:6c:e0:e5:84:32:ee:ae:
77:36:fe:7c:bb:50:fa:61:ee:71:2b:5f:c6:69:41:
8d:df:99:6f:0c:9f:02:a0:78:ec:ae:34:47:9b:1e:
78:a7:ff:2f:d2:a5:b4:10:7c:0e:b2:e5:50:8e:f8:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:53:D5:F8:97:DD:21:CD:78:9F:4A:43:E9:A9:CA:40:30:DE:7C:81
X509v3 Authority Key Identifier:
keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/6C27C19E4BFA11ECA6797F6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.60.0/24
IPv6:
2400:3120::/36
Signature Algorithm: sha256WithRSAEncryption
55:e6:8f:42:34:fe:7f:6c:03:45:84:02:e6:63:1a:11:ac:77:
c9:ed:13:c1:f0:5a:c2:b6:dd:c0:c6:41:5a:fd:16:80:6a:9d:
be:c1:1f:1e:2b:ab:8c:cd:56:c3:a2:a2:e6:16:87:9f:fd:53:
34:5b:91:0a:ec:c1:56:56:91:74:79:29:76:29:b5:df:0c:8c:
c6:3d:e5:16:13:fe:d5:b9:75:a4:33:92:d6:50:1e:20:c9:03:
95:3b:98:75:97:50:fc:82:27:9c:bb:77:96:f6:ca:5c:31:22:
20:ba:2b:9f:02:31:87:8a:67:bc:00:a3:26:39:48:54:b8:23:
f8:c9:cb:3b:d4:14:98:44:82:38:83:ab:95:c0:bb:a5:3b:1a:
ff:4d:53:52:e6:52:f1:b9:59:92:77:76:fb:cd:47:f0:d1:b8:
e3:cb:1e:47:a7:be:bf:06:64:27:fe:48:bf:2d:be:fd:cd:72:
96:30:df:7b:d2:0c:0c:f1:e0:1d:5e:8b:e0:21:f2:a8:81:60:
b7:7a:63:ae:8f:9f:4c:59:4b:0c:45:43:d8:59:3b:69:b0:64:
57:f3:d0:7c:13:d7:d9:72:b7:ac:b7:87:cb:b3:86:07:ae:c0:
38:46:91:bf:1d:26:b8:a5:28:4a:18:ce:d3:2e:50:b3:ee:ed:
fc:f4:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:11 2025 by rpki-client