Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa
File: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (raw, json)
Hash identifier: 62sXJWlT3h3nHyOfMwNf6c+ar5aY+tJqwoFwwPI3cac=
Subject key identifier: 0E:B8:87:3C:06:78:AF:10:E6:FE:A6:1A:E0:C4:17:B1:59:3B:13:A3
Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2
Certificate serial: 0270
Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa
Signing time: Fri 01 Mar 2024 03:56:50 +0000
ROA not before: Fri 01 Mar 2024 03:56:50 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 134599
IP address blocks: 103.179.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2
Validity
Not Before: Mar 1 03:56:50 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65e15202-be8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:37:6c:4e:9b:74:e1:c0:54:d0:b5:4e:5e:
8b:d6:42:6f:47:1d:29:3c:4f:e2:a2:9d:0a:f2:39:
ce:11:79:90:10:da:10:e9:1d:b7:3b:cd:bd:fd:a4:
dc:79:07:0a:e4:c1:41:ea:64:58:f5:75:f8:6f:49:
73:d9:f1:3e:01:f7:7d:24:76:98:6d:a4:09:d9:a3:
c5:cd:1e:f9:83:52:e9:9b:3d:87:6d:ae:0e:af:23:
38:f0:88:ad:6b:24:49:1c:64:9a:8d:73:09:33:35:
d0:68:16:e6:8d:97:99:4a:b6:57:da:01:42:89:d2:
c9:e6:ac:64:47:91:89:83:f1:3a:09:64:e3:00:5a:
54:1f:66:ec:cf:53:d8:f0:87:6f:d1:24:f2:d9:af:
07:9e:8e:78:24:01:e2:36:a8:e6:35:67:e5:ba:ea:
74:16:12:bc:3b:e7:01:76:4d:4a:a5:10:07:97:b9:
88:ce:a0:47:12:98:48:42:30:88:28:1e:99:f6:65:
ed:26:02:85:b2:b2:7d:dd:a7:65:6f:1f:fd:4a:d7:
2b:d7:f4:fc:46:b4:e7:73:aa:21:98:32:a9:0b:f9:
60:3d:e1:7b:4a:48:da:74:a4:c6:93:90:1a:dc:41:
56:37:b1:05:5e:f1:63:e2:37:2b:32:7a:c5:f0:08:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:87:3C:06:78:AF:10:E6:FE:A6:1A:E0:C4:17:B1:59:3B:13:A3
X509v3 Authority Key Identifier:
keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:29:d0:b5:43:d4:17:9a:ad:c8:a5:95:ff:c4:60:51:94:cf:
12:77:77:45:be:38:95:03:c2:98:1f:cb:51:7b:c3:97:8a:67:
78:0a:96:6c:c8:ec:8e:4c:82:ea:1a:ea:c8:ae:21:b4:a0:98:
89:3c:98:0e:17:94:0c:d9:07:88:3b:69:9f:58:cb:3e:17:58:
42:5e:d1:a1:78:d0:14:6f:3f:8a:88:4e:0b:cd:64:e2:8c:41:
c0:31:af:24:22:30:f4:80:ad:56:a1:af:ee:f0:fc:14:a3:6c:
76:50:de:91:59:30:84:ae:23:cf:f2:4a:a2:d6:6c:e5:a3:de:
6d:7d:9f:a7:ca:b3:0b:fb:5b:8e:5b:fa:52:d6:be:5f:6b:11:
b4:ff:9c:f3:f6:bd:dd:5d:89:8d:dd:e7:da:3e:fd:2f:cf:18:
5c:2e:d8:c4:13:61:4a:e5:2c:2a:2e:85:c2:f5:fa:6f:c3:a2:
54:dd:f8:60:22:b6:1c:82:c7:e5:3d:e0:b6:34:d7:f3:c6:4d:
97:ad:4e:80:c2:56:f6:a8:9a:a9:e6:ea:8c:f7:b6:8e:a6:97:
f9:74:4c:d4:f0:3f:cb:ab:f9:e9:29:1a:af:e2:dc:b7:a9:af:
c4:fc:b5:33:b6:5a:60:6f:e4:d9:d9:d0:e9:87:62:07:be:7c:
0e:f4:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:30 2025 by rpki-client