Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/86080D8A940511EE8A83F00DC4F9AE02.roa
File: 86080D8A940511EE8A83F00DC4F9AE02.roa (raw, json)
Hash identifier: IhTgV+RyZEfr55JDHl3kb818//lQV+b8yRU6eN6/7eg=
Subject key identifier: 95:49:AA:4F:A6:B0:54:CD:17:7C:DF:88:26:DA:03:88:03:28:C4:0E
Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Certificate serial: C6
Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/86080D8A940511EE8A83F00DC4F9AE02.roa
Signing time: Thu 05 Dec 2024 04:19:45 +0000
ROA not before: Thu 05 Dec 2024 04:19:45 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 135652
IP address blocks: 103.78.40.0/24 maxlen: 24
103.78.42.0/24 maxlen: 24
103.78.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09
Validity
Not Before: Dec 5 04:19:45 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=675129e1-2f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:6b:ff:0f:ee:12:a4:63:fb:dd:cc:35:a8:
e0:9a:02:18:78:59:39:82:41:01:d0:61:e7:43:b8:
68:ce:df:82:5d:8f:01:41:91:dd:90:39:87:51:ca:
a1:1b:c8:f7:05:8a:5f:de:84:f0:66:6a:85:8d:c8:
a7:62:fe:f8:82:34:95:a4:46:83:bd:1c:21:39:55:
c9:e6:87:57:15:65:d1:a7:82:4a:b1:65:73:76:39:
73:7e:bc:2f:82:4b:89:bb:6c:f0:e0:a7:43:ef:ff:
33:bc:ef:d1:18:6f:7b:c1:dd:9b:4d:b1:e8:1f:98:
06:2b:bf:c2:f0:6d:aa:75:6c:4f:c6:dd:f3:2e:5f:
93:16:0a:78:28:fb:8f:e5:bc:0f:99:8b:cf:41:b1:
ba:1d:d3:93:b5:d0:19:df:22:7d:7d:14:c7:15:65:
98:8f:a0:11:03:44:4e:3d:66:e9:15:ce:69:4c:02:
61:2f:f0:35:0c:54:7a:c0:93:10:c0:94:49:ba:14:
a5:a3:62:70:1b:ce:ad:3b:d7:c2:9c:ca:34:76:aa:
3c:13:c3:c2:fa:b9:a1:1f:f1:4a:fc:98:84:9a:44:
5b:0d:c6:61:c6:93:ef:6a:cc:90:9b:cf:32:61:3f:
d5:c0:b2:62:ff:06:3d:bb:db:be:9a:58:bb:33:18:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:49:AA:4F:A6:B0:54:CD:17:7C:DF:88:26:DA:03:88:03:28:C4:0E
X509v3 Authority Key Identifier:
keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/86080D8A940511EE8A83F00DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.40.0/24
103.78.42.0/23
Signature Algorithm: sha256WithRSAEncryption
93:6e:78:7c:ce:90:bf:c0:6c:9b:f1:ac:8b:84:3d:80:b5:4f:
e4:53:c4:27:b7:7b:d2:a6:b1:dc:46:c5:d4:ff:b4:dd:c3:00:
2b:53:fb:a9:63:3e:d6:cc:8d:d7:e2:ab:76:59:3d:ee:7b:09:
b4:fc:bf:89:4c:66:39:c7:4b:64:ac:36:57:dd:b3:a7:6a:29:
f6:75:92:42:a2:8c:72:90:ba:c6:36:f5:c0:0c:f1:e0:90:41:
2e:6a:26:d3:13:5a:4c:6b:37:52:c8:6e:b3:f9:18:11:a2:09:
8f:f3:ec:e5:4d:97:ef:2e:50:cf:d1:8c:86:f9:6a:9d:79:90:
6a:cc:15:4c:37:e6:bb:23:31:01:74:4c:86:21:e8:cf:52:21:
f1:6e:c2:24:82:8a:c6:b6:8a:29:0a:26:50:56:57:be:6f:a0:
b8:d6:93:78:fe:01:39:cc:1d:81:cb:e9:ea:dc:7f:91:06:4f:
29:20:42:e6:26:87:25:b0:4d:3b:d2:ed:e4:95:1b:99:11:82:
bf:e8:ec:a0:3e:d9:66:c1:d5:1e:30:3e:29:1d:1f:65:48:2e:
85:93:43:fd:ea:6d:77:89:bd:03:b1:63:f1:2c:6b:06:7b:a2:
82:f8:5a:00:5e:de:5e:6e:df:f5:e4:fb:40:d3:0e:8f:76:fe:
30:d8:c8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:46 2025 by rpki-client