Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa
File: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (raw, json)
Hash identifier: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=
Subject key identifier: 63:5F:90:D0:23:1B:55:FC:CD:70:CE:A4:8C:FB:D0:C2:84:E5:7D:51
Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial: F8
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa
Signing time: Wed 15 Jan 2025 03:58:01 +0000
ROA not before: Wed 15 Jan 2025 03:58:01 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 19905
IP address blocks: 103.180.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Validity
Not Before: Jan 15 03:58:01 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67873249-2743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:9c:23:f9:d5:02:40:8d:bd:41:cd:b0:16:
20:02:ce:c6:c0:a5:1f:6c:5b:7d:46:ad:80:6f:73:
20:4e:e9:7d:8c:2b:16:55:2a:fd:9d:21:fa:36:18:
c4:83:e9:71:56:91:23:20:b1:07:fd:e4:43:d9:6e:
30:48:29:02:d9:59:58:6d:86:f8:44:0a:f5:da:e2:
d6:43:2b:c1:21:d6:d9:07:9a:ba:f8:32:39:51:86:
8e:e4:75:57:e4:8c:b6:48:23:57:61:f1:d2:ee:42:
b8:3a:f8:89:cc:db:81:d8:9a:57:03:40:e0:6c:32:
86:f4:e4:f9:88:be:19:74:4d:cc:6d:5f:a8:b0:e8:
b6:8c:19:d0:df:44:a7:f7:43:ae:27:25:f6:51:46:
ba:8b:bb:af:ea:5f:eb:a9:cc:80:81:4f:d1:cd:3c:
97:2f:3d:36:b0:cc:25:b9:a4:ba:53:7e:9f:3c:d8:
ce:fe:6f:12:d2:48:91:84:bb:45:72:f9:3b:1c:53:
6f:c0:c0:ed:9e:27:e5:34:7a:c2:01:3f:eb:0f:da:
2d:19:65:6f:02:0a:5f:5e:51:e1:75:72:fc:a0:48:
37:19:ef:6e:72:33:c4:77:ad:2a:6e:ca:8d:90:e6:
72:29:06:ef:16:4f:21:bb:75:dd:36:30:f1:80:03:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5F:90:D0:23:1B:55:FC:CD:70:CE:A4:8C:FB:D0:C2:84:E5:7D:51
X509v3 Authority Key Identifier:
keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.48.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6c:29:85:f3:ce:c5:d0:f1:aa:d2:e7:45:c3:2f:8f:f7:58:
65:a8:2e:aa:97:99:88:b4:03:96:f8:b2:e6:67:91:eb:a4:87:
fd:66:68:5f:d7:ed:cf:6a:e8:62:ff:05:0c:74:72:bf:24:44:
20:4d:94:2d:b4:d7:40:e6:e8:f1:da:1c:d5:f6:5f:f0:1d:24:
86:49:a0:38:ac:f3:7a:4e:0c:90:79:bd:f2:cd:39:b7:91:33:
6a:d7:59:0c:df:cf:e5:dd:4f:4e:c0:7f:d1:80:95:63:c4:37:
34:75:fb:21:a2:dc:0f:69:73:98:46:52:7b:85:86:5e:c0:93:
15:0d:58:8b:3a:49:d5:6e:56:66:55:fc:31:c8:74:f9:c5:49:
b3:00:6f:f6:65:aa:f5:c7:55:99:d1:7a:b5:0b:61:6c:56:d5:
57:8c:7b:42:16:cc:bd:40:de:b3:d3:19:00:ca:ad:5b:ec:9f:
5a:31:cd:50:e7:7a:08:73:cd:2f:a8:bb:f2:47:ff:7a:94:7b:
bf:a2:d1:9b:1e:88:a5:d9:33:27:c0:5d:56:4b:ab:d2:e9:46:
e8:ff:0a:0c:d7:7a:70:b8:10:1c:89:40:eb:93:f9:e9:d8:8c:
e4:7d:5a:15:b4:c8:24:cb:47:81:de:e2:49:a6:01:46:95:b4:
09:e0:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:36:37 2025 by rpki-client