Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/445C8236B69311EC9650A57CC4F9AE02.roa
File: 445C8236B69311EC9650A57CC4F9AE02.roa (raw, json)
Hash identifier: /iDRAphVdSgU2e36vGmGSufKHFaLvSp39p6b7uKMJro=
Subject key identifier: 58:D8:E9:A1:27:6A:FB:ED:2F:9F:D4:CA:77:17:4A:2D:4B:94:53:D7
Certificate issuer: /CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Certificate serial: 03AD
Authority key identifier: FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/445C8236B69311EC9650A57CC4F9AE02.roa
Signing time: Tue 21 Jan 2025 00:33:59 +0000
ROA not before: Tue 21 Jan 2025 00:33:59 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 133766
IP address blocks: 103.180.52.0/23 maxlen: 23
103.180.52.0/24 maxlen: 24
103.180.53.0/24 maxlen: 24
2001:df0:5740::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941 (0x3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Validity
Not Before: Jan 21 00:33:59 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=678eeb77-a296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:3c:c2:5d:17:49:6d:2d:15:f2:5a:c7:d0:
fb:58:ee:0d:48:15:2a:e1:58:77:cf:bf:4c:8d:04:
89:70:a1:5f:8e:3e:40:be:2d:db:33:02:3d:b4:8b:
7c:a3:89:cf:e4:83:79:b0:ca:1b:7d:27:19:a7:c8:
22:9f:47:00:9c:28:74:60:82:87:28:a8:d8:d5:54:
aa:ac:8b:86:da:e6:d2:5d:5f:5e:d9:93:ae:ec:dc:
46:7f:77:f8:1a:ec:88:00:67:ad:4b:f1:5c:8a:66:
16:7a:82:3d:32:72:56:f3:f7:b1:87:4b:ce:a0:7d:
38:c9:67:a6:43:22:4d:67:04:20:d5:31:2c:0f:da:
4a:c6:ba:bc:21:08:b5:e6:a0:44:64:1e:6b:3d:95:
4d:70:98:74:ac:30:51:98:42:da:f4:b5:f8:5f:17:
c2:75:3e:5d:26:ef:24:76:b9:5d:0e:9b:b4:ba:7a:
60:d0:7b:8f:97:3e:77:09:63:3f:71:08:0c:e7:d7:
97:2b:c7:ac:e2:03:bd:25:a7:90:0c:ed:7c:51:98:
e9:92:5a:fa:da:74:4b:e2:61:80:77:ce:df:70:fe:
85:e5:6f:dc:64:5c:4b:b5:63:24:5f:e8:10:cd:65:
cd:9d:bc:a4:3c:97:c5:1a:fd:11:c6:99:c8:eb:46:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D8:E9:A1:27:6A:FB:ED:2F:9F:D4:CA:77:17:4A:2D:4B:94:53:D7
X509v3 Authority Key Identifier:
keyid:FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/445C8236B69311EC9650A57CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.52.0/23
IPv6:
2001:df0:5740::/48
Signature Algorithm: sha256WithRSAEncryption
09:e2:41:de:6f:86:cb:df:e9:69:09:86:fe:04:41:8c:9c:57:
fc:a2:b3:4f:8a:4e:e1:4e:15:6a:c5:e4:ae:64:8c:99:3e:8b:
54:ca:e0:64:e6:4b:f4:67:b3:47:5c:1d:e5:80:d7:79:16:55:
2a:2a:a1:dd:b4:e6:e1:b2:ad:64:ba:e2:98:e0:eb:98:04:85:
e7:5c:45:9d:5a:8f:29:a9:bb:ce:05:a5:9d:49:c0:12:0e:5c:
ec:86:8d:00:c5:70:ce:68:ce:be:fd:55:0b:c2:9a:63:c9:ae:
76:a3:86:f9:f9:d0:3d:a7:36:ff:59:79:ea:c4:4a:96:69:c6:
3e:ca:95:20:49:3e:db:fd:48:8a:bb:3b:27:5e:3f:f5:93:6a:
57:f3:99:17:b4:1e:48:bb:23:65:24:68:0b:7d:6f:90:ab:4a:
96:da:1b:c6:0d:bb:94:b1:1c:5d:e6:91:fd:58:21:ed:df:8d:
20:36:03:52:19:8a:75:26:e7:67:35:2e:c1:e4:9a:24:8a:75:
0f:65:5f:db:c1:70:f3:9b:e6:2f:bf:da:4d:d7:10:d9:32:bd:
87:6c:52:62:50:c0:1d:16:4f:e7:ea:2b:36:ff:bf:58:a8:2e:
13:f4:b4:6e:1c:91:e9:83:2d:73:bd:3a:f0:33:88:a1:98:ba:
45:2c:81:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:15:19 2025 by rpki-client