Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa
File: 405A719A173B11ECA6FAAE38C4F9AE02.roa (raw, json)
Hash identifier: WHVkMVaIDqsUtFffiasOomdMlljt2kCgIYVccMhJqfM=
Subject key identifier: 87:41:E1:38:55:F3:56:A2:66:36:86:D3:3C:DC:62:01:97:A0:25:37
Certificate issuer: /CN=A9179D2B/serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
Certificate serial: 04A0
Authority key identifier: 3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa
Signing time: Thu 12 Dec 2024 23:43:13 +0000
ROA not before: Thu 12 Dec 2024 23:43:13 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 17993
IP address blocks: 103.131.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179D2B/serialNumber=3EDFC612EE9F215C92002038E0BFB78DF9A422DD
Validity
Not Before: Dec 12 23:43:13 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=675b7511-7262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:4b:af:98:72:aa:b2:f7:99:3f:36:e0:d9:
b3:87:f3:35:26:2e:10:65:80:8b:f9:2f:33:30:a4:
b6:15:aa:88:6e:d2:96:53:ff:47:c9:ba:80:a1:d9:
77:48:1f:f8:68:59:2f:8d:ce:89:53:8f:f6:c9:a9:
d2:8f:d8:35:11:38:ba:9b:64:8b:02:e7:fa:ee:67:
22:d0:a9:e1:78:18:73:a4:76:a4:42:01:23:8c:9f:
fd:d3:b4:ba:54:6f:c9:21:08:6b:73:92:41:0b:dc:
8b:6f:b4:51:02:ed:e9:2a:2b:f3:02:f9:60:08:ec:
30:ac:46:b9:eb:58:60:c9:4d:c6:8e:93:c7:c1:ed:
98:92:09:1a:45:30:96:99:4f:52:fe:8c:68:19:32:
57:94:79:26:55:46:46:fd:3a:27:18:63:e8:9c:9f:
d2:ba:f9:dd:06:75:67:47:60:6d:8a:7f:cc:0a:03:
8c:d6:cc:e7:82:6b:4d:e5:59:eb:d3:46:2c:c0:c9:
98:49:0d:4a:e7:50:98:93:88:6f:c7:54:b0:64:23:
d0:72:fb:3d:18:4e:01:ce:28:f2:3b:a9:46:90:f1:
8c:a1:e9:6c:4d:e9:36:2d:68:25:0a:44:69:11:6d:
6b:97:8f:50:93:33:f6:00:d6:a8:bf:c7:c3:ee:3a:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:41:E1:38:55:F3:56:A2:66:36:86:D3:3C:DC:62:01:97:A0:25:37
X509v3 Authority Key Identifier:
keyid:3E:DF:C6:12:EE:9F:21:5C:92:00:20:38:E0:BF:B7:8D:F9:A4:22:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/Pt_GEu6fIVySACA44L-3jfmkIt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pt_GEu6fIVySACA44L-3jfmkIt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D2B/FAB8947C169111EC8B300F79C4F9AE02/405A719A173B11ECA6FAAE38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.62.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d0:ca:18:e3:57:1b:fd:14:56:6b:ac:3e:d0:d0:66:1e:3e:
db:a0:3a:9f:52:4f:7f:d3:ed:7a:47:6d:38:52:aa:09:83:cc:
40:cf:fe:e8:c2:5a:32:0d:42:ab:3b:ec:d8:1f:0e:dc:e1:68:
81:5c:54:da:01:01:04:96:01:ae:39:50:da:32:9d:d4:f4:b0:
09:9d:01:9b:95:f8:ca:65:57:69:2b:83:b4:a1:b2:e3:06:39:
41:25:f1:6f:af:09:81:24:ea:1b:6f:ae:fb:62:53:fe:b1:46:
01:6d:ab:ba:81:fc:63:dd:fe:5f:ad:56:2b:c9:41:3a:2f:b3:
34:33:22:f2:c9:8e:e9:d0:91:a7:3d:50:91:79:c2:69:e0:75:
25:69:41:c1:f0:45:b4:df:46:cc:40:8f:db:f5:1b:48:34:7d:
02:49:07:9b:72:fb:6e:28:b1:e4:0f:b6:f5:e4:fa:b2:ae:6f:
37:6e:c4:e4:3e:b5:7f:61:0b:de:2e:94:f3:b6:98:16:3d:cc:
e8:1e:42:ba:3d:71:ea:8f:ff:14:8b:d1:c4:34:e5:1e:8a:5b:
1b:8b:82:43:5b:33:2a:84:e6:36:5f:d9:64:c3:3b:9d:1e:1b:
a9:a0:ef:d4:b4:64:0c:8f:75:3e:59:3b:ad:0c:90:f6:77:54:
b9:1b:dd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:55:56 2025 by rpki-client