Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/ED6CA80868B211EC9974F51FC4F9AE02.roa
File: ED6CA80868B211EC9974F51FC4F9AE02.roa (raw, json)
Hash identifier: ZVzEdJzzYDODxMT7QMdQSgyfRJf/fpsMEE9y3lIvzZ8=
Subject key identifier: 0D:8E:5B:8C:F7:24:9D:59:63:9E:CC:95:3B:1D:BC:FD:4B:99:AB:FD
Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
Certificate serial: 03AB
Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/ED6CA80868B211EC9974F51FC4F9AE02.roa
Signing time: Tue 15 Oct 2024 07:34:41 +0000
ROA not before: Tue 15 Oct 2024 07:34:41 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 149309
IP address blocks: 103.178.190.0/23 maxlen: 23
103.178.190.0/24 maxlen: 24
103.178.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
Validity
Not Before: Oct 15 07:34:41 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=670e1b11-a1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:f5:cc:e3:5b:40:5b:5d:de:0f:7e:f6:d0:
0b:50:c4:b8:41:6d:ee:58:8a:ff:d2:f3:f9:91:d9:
43:88:14:3d:da:57:77:03:94:ee:29:7b:2e:60:18:
79:b1:18:21:2f:fb:f6:5e:82:2c:68:43:71:ed:fa:
5a:33:cc:a0:98:ca:6c:e9:b2:c1:55:f9:ac:20:a8:
2e:88:3c:83:11:17:a8:82:c6:57:5a:15:bd:e1:63:
fc:60:1c:00:c2:23:0c:3c:05:10:cf:a6:40:53:8d:
d7:fb:7e:77:2d:3e:f7:63:88:98:ac:e6:d2:98:e5:
91:c9:e6:08:51:36:87:a8:a5:f1:d4:75:8c:c4:5c:
61:17:d0:68:0e:f0:03:22:3e:b6:b4:84:e9:57:2b:
e6:06:cc:94:32:34:eb:4f:4c:bb:3e:24:f2:8e:70:
46:9c:d2:7c:09:76:37:15:ad:2e:0d:9d:0f:a7:fd:
94:fb:73:4c:9e:49:1f:2c:75:8e:e0:c3:16:65:99:
20:48:fa:39:ce:fc:f6:c4:c1:7c:bc:d5:6d:84:2b:
b4:51:37:5a:3d:f0:d5:28:4f:40:c0:22:05:f3:a9:
6f:6d:43:84:2d:85:75:c7:5f:a7:cc:49:52:89:2f:
42:c3:dd:36:b3:9f:08:3f:35:04:43:30:e8:b9:65:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:5B:8C:F7:24:9D:59:63:9E:CC:95:3B:1D:BC:FD:4B:99:AB:FD
X509v3 Authority Key Identifier:
keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/ED6CA80868B211EC9974F51FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.190.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:25:85:1c:90:96:a1:06:c8:4d:0b:64:69:81:ce:a1:f0:54:
aa:50:87:e3:35:fb:ef:18:f4:ad:d0:0d:74:2c:62:37:fb:d7:
51:ea:99:01:49:27:af:7e:1c:e7:de:7d:56:27:61:04:7e:a2:
76:ef:2c:4d:fc:4e:1a:98:e8:bd:2c:79:91:f5:fd:30:7e:27:
a9:84:fe:03:15:30:9c:eb:df:6a:49:bc:20:9d:88:24:90:7f:
18:07:52:16:3c:b4:26:01:de:38:87:01:d2:6d:75:43:f1:48:
15:a7:0f:db:46:77:27:df:97:15:94:90:52:64:f1:6a:ff:32:
56:d8:73:c1:1d:8a:86:da:fd:bf:9b:d3:01:67:67:ec:bd:0c:
9e:fb:ec:8a:56:85:f0:d5:10:bc:bb:eb:b6:61:9a:fe:df:58:
3e:fb:25:29:02:c7:ec:c8:fb:1e:d9:2f:08:a8:05:9d:1f:aa:
9e:91:b5:e2:78:fc:d5:3c:78:f4:da:94:0d:cb:11:89:46:6b:
44:53:57:02:a2:3b:8a:bf:1c:3b:fe:d1:93:7e:d6:1d:14:e1:
9f:48:85:ce:f7:4d:73:4a:7d:b3:f7:e1:da:60:be:d2:2b:ad:
71:1c:43:21:31:a2:97:ba:db:5d:00:0c:94:a7:ff:73:f1:50:
bc:65:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:20 2025 by rpki-client