Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
File: B6C75D94084711EEB760A583C4F9AE02.roa (raw, json)
Hash identifier: oZyUncr+V1VDeenInWB5+uoD9bagI701mEfkjI7iiLs=
Subject key identifier: 99:A0:C7:DD:36:A5:C8:CF:0B:28:16:79:C6:08:48:E5:E2:7F:7F:68
Certificate issuer: /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial: 081E
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
Signing time: Fri 06 Sep 2024 21:41:41 +0000
ROA not before: Fri 06 Sep 2024 21:41:41 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 139008
IP address blocks: 103.152.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Validity
Not Before: Sep 6 21:41:41 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66db7715-f753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:43:7d:79:4f:2a:29:b6:1c:74:c7:bb:d4:
63:ac:6b:b8:6c:1c:19:d4:2c:85:45:9b:06:5b:c2:
15:72:20:73:56:0d:14:57:81:b3:d1:35:54:81:c1:
1e:e6:ba:48:77:45:98:2a:6d:b3:b4:38:5f:0b:2c:
a9:8e:50:78:d3:c2:45:43:b8:02:1a:a4:31:1c:73:
a2:43:66:e0:0f:c2:e6:72:ec:b1:e9:d4:f0:f9:c3:
70:6a:fa:9f:1b:d3:91:00:b4:61:aa:a2:5b:e2:64:
f3:60:68:39:87:18:83:06:9f:b2:bb:4a:cb:e4:51:
df:04:e9:ee:f1:b0:5f:f0:f2:8e:58:ac:87:a4:83:
b7:36:25:c3:3f:2b:ce:0e:1f:6b:3b:95:87:d6:dc:
d5:3f:24:f8:f6:d5:f3:5d:b3:f6:df:33:bd:0e:9f:
76:61:f0:1c:64:5c:d0:ad:20:7c:ea:71:4e:ed:84:
e6:62:98:b6:12:43:2a:f4:64:e2:1c:6d:e7:25:a4:
84:35:62:c6:3b:ef:86:40:9d:39:e1:49:ea:ed:fc:
20:00:d7:bf:74:8d:c1:ef:6c:df:b0:11:c7:df:5e:
da:b9:b4:bd:cf:14:2d:be:1a:05:43:bb:dd:89:81:
c5:22:d5:4c:7a:2f:fc:96:e6:28:54:19:d6:40:7e:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A0:C7:DD:36:A5:C8:CF:0B:28:16:79:C6:08:48:E5:E2:7F:7F:68
X509v3 Authority Key Identifier:
keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/B6C75D94084711EEB760A583C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:28:24:0c:a2:3b:40:3e:b8:39:5a:b6:f7:84:55:d6:d3:88:
c9:79:ce:34:d5:0a:f8:f5:49:9c:af:b6:39:1d:c1:6f:47:e2:
b7:97:f6:ef:a1:16:df:2f:de:d4:65:fd:92:a2:97:20:60:a7:
32:df:0f:57:26:3c:fc:a8:c2:56:00:e0:df:57:f2:b5:cd:5f:
cd:45:9f:a4:55:86:8f:f2:c3:95:c5:d5:81:94:ba:b0:55:8d:
2e:ff:fd:78:63:18:e1:74:b5:de:38:6b:6c:e2:f1:2d:96:58:
77:45:2f:29:a9:b2:5e:b9:af:70:ae:f8:81:08:33:bb:4a:6f:
cc:b3:87:dc:e5:3e:68:89:1c:eb:79:3d:bd:29:ec:a5:a0:ed:
86:c5:d0:ee:1d:5c:ce:e4:09:dc:fc:2f:b5:ee:bd:45:98:8e:
a2:ff:b7:66:6f:34:11:8b:8d:07:a8:b1:60:7d:43:4d:e6:33:
6a:d6:20:9f:4a:78:9b:27:df:47:f4:23:05:a3:73:94:50:e6:
63:9d:f2:04:a5:b5:1c:bf:06:72:48:e1:77:52:58:5d:0f:d1:
be:e5:c0:81:98:ed:0d:aa:9f:5f:4a:66:5b:2a:01:f0:7a:f6:
fe:51:bc:05:eb:cd:23:fe:0f:b1:9c:ab:f2:5a:fd:58:f5:e5:
5a:22:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:47 2025 by rpki-client