Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/ED0C111CF8F611ECB6DF8835C4F9AE02.roa
File: ED0C111CF8F611ECB6DF8835C4F9AE02.roa (raw, json)
Hash identifier: 4DnB0bL3NG78Ric1Q/fKLIMkj23xQICVd02+1wJapuQ=
Subject key identifier: 58:99:A8:EC:FB:61:6C:FF:24:62:01:73:0F:31:02:1D:2A:C2:AE:B8
Certificate issuer: /CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Certificate serial: 025A
Authority key identifier: F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/ED0C111CF8F611ECB6DF8835C4F9AE02.roa
Signing time: Sat 07 Dec 2024 01:34:28 +0000
ROA not before: Sat 07 Dec 2024 01:34:28 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 149177
IP address blocks: 103.177.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136F59/serialNumber=F755C1E10FC4AE6892D24ACB8782D7E5C00418B0
Validity
Not Before: Dec 7 01:34:28 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6753a624-67de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:29:c7:c1:02:c1:d1:a7:78:6b:1a:bc:80:
d3:a1:2e:26:f3:f4:ab:af:68:3f:9c:4d:c9:c8:25:
6e:6f:7a:2a:45:e7:6f:23:54:b9:08:c9:fc:11:af:
4e:be:cd:10:e6:1e:53:66:cc:bd:f6:92:be:63:5b:
ac:ea:39:52:b3:af:23:f3:4b:39:66:f3:61:8e:33:
ae:e8:82:55:cc:dd:47:32:33:5e:cd:f3:e6:7c:a0:
28:fc:13:02:af:39:e3:73:6c:31:a3:e9:36:bb:41:
63:48:89:dc:35:a9:e4:e1:72:9d:de:91:56:59:2e:
0a:8e:d0:99:f9:36:52:7a:3f:93:4a:b9:72:6a:b9:
78:f6:a4:fa:33:c6:d0:82:2c:c4:14:cb:a9:12:e8:
b1:f1:a5:8c:d7:45:47:78:ea:85:3b:da:f6:da:be:
1e:05:51:b2:43:19:f7:ee:a6:f7:43:50:41:20:8d:
1f:1a:59:b6:c4:76:94:c9:08:8c:7f:c0:cd:2d:78:
9a:b3:b8:8d:0e:0f:bd:3d:d8:52:74:b7:90:9d:79:
b3:6e:2b:de:3b:be:70:cb:e6:6b:d6:e6:e0:3a:f7:
a5:0d:90:2d:f3:7c:79:ba:2f:e3:1b:ce:bf:52:d2:
c5:57:da:d9:be:1b:9e:cb:e3:a1:5f:d1:95:04:0c:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:99:A8:EC:FB:61:6C:FF:24:62:01:73:0F:31:02:1D:2A:C2:AE:B8
X509v3 Authority Key Identifier:
keyid:F7:55:C1:E1:0F:C4:AE:68:92:D2:4A:CB:87:82:D7:E5:C0:04:18:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/91XB4Q_ErmiS0krLh4LX5cAEGLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91XB4Q_ErmiS0krLh4LX5cAEGLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F59/5772AFBEF84F11ECA2923952C4F9AE02/ED0C111CF8F611ECB6DF8835C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.210.0/23
Signature Algorithm: sha256WithRSAEncryption
94:3e:86:3b:05:da:fe:27:10:1a:d9:16:98:5d:9c:89:ce:43:
10:37:02:04:d8:db:cb:d5:e7:8a:ac:a2:cb:f5:2b:f6:1a:04:
5f:f5:a7:b9:08:00:fd:53:3e:86:3e:2e:ba:9b:00:a0:05:b8:
5c:db:44:e5:b6:36:58:73:88:03:a1:06:dd:b8:aa:5c:85:37:
8f:c0:89:1e:5f:a3:4d:db:20:86:a7:65:c1:09:7a:8b:e5:d5:
ed:82:81:c6:a4:f8:c8:65:e6:d5:31:34:3b:f0:25:4a:ff:81:
5e:a2:c1:ad:b0:26:fd:ae:d2:aa:29:f8:b4:78:dc:ea:d9:39:
7b:99:6e:dd:09:28:87:9f:c4:da:fc:51:32:cb:71:1c:2f:ec:
46:e7:d6:37:7e:eb:3e:cd:14:b2:c2:e5:f7:55:25:2d:5f:16:
4c:18:db:e5:c6:d0:6c:f5:29:e4:5c:8f:32:57:40:b5:cd:68:
b1:0d:cd:b8:85:13:1f:ed:7b:5a:a8:25:32:db:a2:29:21:33:
dc:40:4a:13:e7:ec:7f:bb:35:d9:87:ee:f2:1f:8c:44:1d:28:
b1:af:9b:0d:74:82:4b:8c:3f:d2:ef:bb:6d:09:5c:41:9e:aa:
9a:42:9d:be:ee:bd:b5:07:b2:ce:f3:e4:1d:2a:01:85:b7:96:
59:73:e1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:27:16 2025 by rpki-client