Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/8C891848A8C511EC8F560C42C4F9AE02.roa
File: 8C891848A8C511EC8F560C42C4F9AE02.roa (raw, json)
Hash identifier: 3VG3cE0RBMf0XORCqHNYJBh9WQlsnyh1LMk7PYJ+aS4=
Subject key identifier: 9A:18:B2:B8:8C:35:48:BC:30:BB:56:49:CD:B2:39:17:66:A5:F1:C3
Certificate issuer: /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6
Certificate serial: 0331
Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/8C891848A8C511EC8F560C42C4F9AE02.roa
Signing time: Thu 29 Feb 2024 02:44:50 +0000
ROA not before: Thu 29 Feb 2024 02:44:50 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136395
IP address blocks: 103.179.54.0/23 maxlen: 23
103.179.54.0/24 maxlen: 24
103.179.55.0/24 maxlen: 24
2001:df0:48c0::/48 maxlen: 49
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6
Validity
Not Before: Feb 29 02:44:50 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65dfefa1-2f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:fd:89:77:0d:b4:37:8d:c6:55:bf:1a:34:
49:fc:90:f0:85:6e:22:30:38:4c:78:b7:2a:e5:94:
10:bf:1d:a3:84:bc:0f:ac:9f:be:50:32:d9:b8:47:
5f:6e:33:09:61:b1:d5:17:99:39:d9:34:e9:5e:95:
36:67:7b:fb:0b:ba:f4:77:17:a4:d2:9c:45:aa:51:
25:ce:b6:d5:85:49:00:b7:0d:a1:7c:aa:08:e1:38:
f0:ba:30:84:30:18:9f:f2:68:5c:6d:3a:8e:38:f6:
c1:8e:ca:bb:6b:9e:e5:af:c2:cd:83:18:a5:14:c9:
bf:c9:4f:ad:78:2e:17:ec:f7:82:96:42:c6:2b:85:
be:65:09:00:e9:a1:ed:cd:4e:89:3f:1e:b5:de:b1:
36:84:b7:33:5a:62:9f:da:ea:1b:d5:80:d9:75:f9:
07:3c:5c:6c:57:e4:9c:da:87:ad:ac:1e:b0:8f:91:
79:35:3e:77:c0:84:14:ec:30:02:fa:7b:16:59:4f:
98:29:5f:e9:4c:f4:11:9c:51:b3:2d:37:46:d8:13:
a0:a5:96:1e:a4:f6:30:7e:06:29:ec:07:5e:23:08:
42:0e:8f:27:70:6c:55:f0:bf:2f:5e:34:8e:df:26:
91:87:80:f9:41:b7:41:0a:ca:dc:c0:17:a6:de:74:
27:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:18:B2:B8:8C:35:48:BC:30:BB:56:49:CD:B2:39:17:66:A5:F1:C3
X509v3 Authority Key Identifier:
keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/8C891848A8C511EC8F560C42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.54.0/23
IPv6:
2001:df0:48c0::/48
Signature Algorithm: sha256WithRSAEncryption
94:f1:3b:eb:df:5e:d2:45:c0:3c:81:75:6f:ea:45:f9:82:3a:
86:de:87:de:ca:af:f3:f0:72:e7:e7:81:c1:74:55:78:15:67:
ef:f9:1a:33:de:d6:17:3b:37:0c:ce:48:66:83:f9:77:fc:ba:
24:f9:72:3e:f5:63:2f:46:47:f6:ba:58:42:b6:92:29:0a:de:
f9:20:2b:41:07:be:a7:1f:37:d8:df:25:15:5d:0f:08:75:82:
ff:8c:58:f7:f2:e5:f5:08:46:a8:a0:5f:05:e3:c7:bd:8f:dc:
d5:f1:c3:71:02:ed:6a:9c:b5:72:78:e4:1a:f4:49:1e:aa:d8:
22:25:f1:dc:dd:6f:e9:cb:95:4c:4d:91:62:a8:b6:76:bb:a9:
89:18:e4:ed:87:85:c4:6a:20:2b:d0:5c:e0:07:df:78:b2:d8:
e9:d3:a6:44:bc:43:19:78:60:4e:5c:7e:94:d4:d4:cc:d3:5c:
eb:b5:4a:c2:89:2f:fa:ac:d2:69:cf:8e:00:9d:0e:96:b5:04:
23:23:fd:71:32:72:09:aa:22:05:88:b9:f2:1d:b8:59:77:01:
1c:16:d2:89:e4:5e:f9:44:dc:27:2e:09:42:dc:20:c9:f0:71:
41:15:63:3e:18:bc:3f:1a:99:6b:81:cc:89:eb:a9:a9:33:c2:
1f:2a:8c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:08 2025 by rpki-client