Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa
File: 274A12F696FD11EF88F06237C4F9AE02.roa (raw, json)
Hash identifier: yMa9anpM1Fx5awM2ELLejmDtWuOQ4e92GvLkjwBL1Wg=
Subject key identifier: BC:41:75:7A:CC:C8:81:9C:4D:10:EE:13:11:12:06:7A:CB:F8:81:0D
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 045E
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa
Signing time: Mon 25 Nov 2024 00:03:20 +0000
ROA not before: Mon 25 Nov 2024 00:03:20 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 26548
IP address blocks: 103.175.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118 (0x45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Validity
Not Before: Nov 25 00:03:20 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6743bec8-85b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:20:4d:0d:48:40:d5:b5:c2:95:ac:fd:bc:
51:8d:ac:8b:51:1a:52:81:39:12:b6:03:ac:84:4c:
4f:52:98:ba:92:2e:2b:e8:b4:00:67:58:7c:5c:79:
b9:31:f8:38:7d:59:a8:89:1c:5c:ad:b0:57:c9:0a:
77:0e:8b:c1:06:16:d6:f7:a4:9e:29:9d:57:cf:f2:
54:2d:d0:f4:d5:28:06:d8:14:33:9f:89:7d:d3:7c:
b8:2c:03:8e:93:20:bc:b4:94:68:55:d9:3a:d2:da:
a7:09:dd:a7:da:f7:11:b4:d2:e9:70:ac:88:59:b4:
95:54:ae:1f:5e:4c:64:53:80:a0:35:d6:1f:df:7e:
54:b5:51:ba:c1:db:7f:c8:61:25:60:a4:4d:72:7b:
ce:ba:95:a2:74:8d:07:e3:72:06:f2:8b:79:cc:26:
c0:0f:1f:1a:69:39:77:20:a9:49:58:19:eb:bb:d3:
43:ae:cc:f2:8e:1a:45:88:96:03:4c:10:8e:00:4f:
f2:a7:af:87:80:2b:4d:61:dd:5d:71:a2:be:4e:07:
79:1c:0a:37:7c:52:17:b4:9d:4c:ff:d4:e3:35:78:
ba:97:01:6a:6f:ba:a9:ab:9b:12:b0:4a:29:3d:75:
8c:a0:28:3e:1d:21:26:33:d4:59:8a:fd:dd:be:ae:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:41:75:7A:CC:C8:81:9C:4D:10:EE:13:11:12:06:7A:CB:F8:81:0D
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/274A12F696FD11EF88F06237C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.79.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6b:c1:52:60:19:a6:59:bc:b9:a9:39:98:29:42:e2:25:ad:
17:3f:b5:03:77:ac:d3:fd:88:73:79:8b:3c:d1:d7:25:e2:4a:
2c:c9:af:8e:0f:9c:0e:18:28:44:df:e0:11:14:3e:18:d2:eb:
d2:a8:b9:f0:8f:34:f1:d4:c5:af:ea:4a:b4:6b:d5:c3:b7:72:
bd:4d:f1:81:c2:55:8a:34:3c:d0:f4:c0:c2:a9:10:53:7c:7c:
51:04:7c:77:e4:2e:41:ef:fb:c9:3d:43:be:13:b9:24:87:32:
2f:27:67:a1:e4:7d:a8:47:80:c9:8d:a2:26:c9:47:79:73:7e:
87:89:9b:df:0a:3e:12:a7:9c:f0:93:b8:1c:7c:51:ed:6b:68:
b3:0e:c2:80:25:ec:fd:41:40:27:39:7b:c7:54:9c:24:c2:c5:
ce:ac:bf:3a:20:23:34:ff:34:1c:51:ee:c9:c8:6d:9f:02:5c:
78:eb:2b:b3:19:ea:9f:33:21:09:95:f7:e9:3c:67:92:87:ca:
57:3d:e9:3d:43:4e:5d:a6:d0:02:b8:ee:d9:ec:5a:10:d2:30:
b1:25:e8:47:71:98:b6:63:2e:c5:25:58:27:e7:6a:de:77:64:
c5:2d:8d:54:fd:0b:dc:79:e6:21:a4:eb:d3:ba:54:ff:e8:f3:
03:3a:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:39:00 2025 by rpki-client