Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/783907BC225E11EA8BD18A62C4F9AE02.roa
File: 783907BC225E11EA8BD18A62C4F9AE02.roa (raw, json)
Hash identifier: mL3i+/7kBqbKho8AN09AU1Rvk3fn2OK5nBM7cSDudSA=
Subject key identifier: 88:29:C1:17:B6:B4:EF:25:08:0F:5B:5C:52:29:1A:94:DC:AA:FE:A6
Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Certificate serial: 0B7C
Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/783907BC225E11EA8BD18A62C4F9AE02.roa
Signing time: Thu 30 Jan 2025 19:08:44 +0000
ROA not before: Thu 30 Jan 2025 19:08:44 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 14618
IP address blocks: 103.145.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2940 (0xb7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Validity
Not Before: Jan 30 19:08:44 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679bce3b-4a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:71:4e:91:15:fe:01:32:30:a6:b2:aa:b3:
db:59:93:3f:bf:d2:70:01:a4:34:16:40:ea:2b:26:
9a:51:25:b8:ff:00:f2:5c:84:80:41:92:b1:2d:aa:
3a:5b:4b:d4:d2:06:40:6f:8f:15:aa:04:89:6b:3c:
5c:01:19:fb:59:b5:79:fa:3e:0c:2f:5d:2d:e6:17:
4d:99:9b:f0:f2:82:ab:bd:c9:5b:5b:a7:c8:ec:d3:
1e:79:6b:bc:e3:b2:05:88:6c:56:e8:36:e3:01:63:
93:33:00:1d:7b:e0:1a:77:59:fe:fb:fa:15:40:ce:
13:50:40:10:ff:da:09:b8:d5:5d:84:e3:1a:8f:c4:
4f:fb:04:aa:3f:11:3b:b2:be:e8:60:49:77:77:71:
b1:3e:3b:ff:cd:4d:50:eb:94:14:1d:6d:e9:de:4c:
6e:f9:6c:8e:b0:2c:b7:2e:40:c9:48:42:0c:81:3c:
c4:af:62:7a:38:98:fb:d8:23:48:13:f1:58:6a:91:
48:e0:bd:ea:1a:fe:e4:8b:91:7c:d3:3f:0a:c0:fc:
cc:f8:99:d0:f7:72:4d:d5:40:19:b6:f5:37:45:4d:
2b:3e:a3:7d:8c:a9:3f:48:f6:08:1b:42:1c:94:2f:
97:46:e2:51:65:6a:af:f0:db:21:de:f0:49:39:6d:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:29:C1:17:B6:B4:EF:25:08:0F:5B:5C:52:29:1A:94:DC:AA:FE:A6
X509v3 Authority Key Identifier:
keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/783907BC225E11EA8BD18A62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.182.0/24
Signature Algorithm: sha256WithRSAEncryption
07:bf:46:26:bb:7c:61:c4:ae:d7:d1:6d:3a:d6:6e:05:d7:55:
dc:7f:14:dc:ba:5b:13:2c:97:aa:5d:19:4c:1c:f1:30:53:40:
0f:76:c1:49:46:d1:80:d1:01:f2:d4:11:87:0e:28:51:48:82:
07:04:09:51:1f:90:10:db:e1:9d:25:67:f3:a0:fe:31:07:3e:
1d:e7:02:9f:99:f8:91:10:21:06:c6:76:f5:c9:30:61:1d:e2:
f4:b9:8a:d5:6d:13:a3:3b:45:c3:c7:c2:7c:07:e9:79:c5:1d:
03:8a:3b:cb:2a:0d:2e:81:79:61:fd:cb:a4:f8:a9:fe:ee:60:
7a:61:11:73:ba:f3:5a:33:bc:67:52:b6:ff:f3:da:93:7e:79:
d8:79:4c:bb:05:b9:3d:a1:c8:4f:c1:b8:dd:db:46:23:c7:57:
c3:13:d8:56:92:2b:39:bd:a8:47:3f:c6:11:60:65:40:7b:2d:
1a:25:f1:4d:41:17:57:c6:01:4d:42:f5:3a:ce:6a:3f:2b:ca:
6c:6d:35:c8:11:2d:05:1f:9b:cd:2a:25:a3:b2:6d:ed:97:b0:
9a:77:5e:a6:2b:5d:91:59:34:39:12:a5:b4:4e:52:0c:b0:5d:
d4:a7:f7:2e:29:04:22:ac:d9:ad:8e:46:01:d3:92:aa:05:f4:
43:27:cd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:44:32 2025 by rpki-client