Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/AA9C9BB8C92C11EF86608311C4F9AE02.roa
File: AA9C9BB8C92C11EF86608311C4F9AE02.roa (raw, json)
Hash identifier: OlAhyVv8prXEPY1gdjm2jtj+wnuOnQoHNIDrDUpBehg=
Subject key identifier: 04:0D:5F:8D:AD:C2:AA:78:21:D2:70:BE:5D:EB:C1:F4:AE:13:12:CF
Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial: 03E1
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/AA9C9BB8C92C11EF86608311C4F9AE02.roa
Signing time: Sat 04 Jan 2025 08:55:40 +0000
ROA not before: Sat 04 Jan 2025 08:55:39 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 138336
IP address blocks: 103.179.14.0/23 maxlen: 23
103.179.14.0/24 maxlen: 24
103.179.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 993 (0x3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Validity
Not Before: Jan 4 08:55:39 2025 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6778f78b-82e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:80:39:56:57:31:e0:c7:a5:4f:2f:3a:e9:
b2:22:61:f4:1e:63:8f:f3:04:29:a3:3b:36:18:03:
15:c8:f5:d0:da:16:5f:b6:39:c4:d5:b8:84:12:3f:
72:17:1e:54:44:69:73:dd:fe:75:ae:1d:db:b1:4c:
a8:7b:58:f7:3e:68:c5:a2:8d:19:31:a4:c0:f5:a4:
02:23:8c:6a:e9:78:a8:5a:96:d9:e9:ef:4d:61:56:
77:2c:03:4f:4f:13:4d:30:9b:31:de:f8:5a:d9:96:
55:cf:25:77:84:a9:da:9e:2e:20:ee:ab:9e:98:53:
5a:fa:8e:17:b2:e2:e4:9c:1f:dc:72:4f:51:9f:a2:
b3:a4:bf:5f:6c:7d:88:e1:bc:43:06:33:c2:db:b0:
70:15:5e:ef:54:8c:2c:4f:a6:8c:2c:35:1b:32:54:
f0:b5:77:4e:53:50:5f:ff:97:be:b0:42:48:63:db:
05:d8:34:65:75:f4:dc:2c:fe:cc:52:e3:cd:fd:62:
30:be:76:63:04:26:f5:1f:35:d7:ea:47:6a:48:ae:
c5:03:be:3f:66:5f:4c:fb:99:3d:93:2c:b3:b3:79:
89:b0:76:c1:7b:21:d3:20:54:d9:3a:97:ec:fc:91:
f5:b3:26:5f:fa:fd:12:68:c4:a8:f0:8d:9a:3a:75:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0D:5F:8D:AD:C2:AA:78:21:D2:70:BE:5D:EB:C1:F4:AE:13:12:CF
X509v3 Authority Key Identifier:
keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/AA9C9BB8C92C11EF86608311C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.14.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:6c:f1:15:9e:3d:56:7b:6c:da:42:61:62:f4:8c:05:69:e2:
51:af:1b:b6:c2:f0:00:65:7c:36:40:23:64:18:38:72:80:b6:
ad:4b:5a:45:c5:32:0b:df:65:b7:53:5e:a3:b6:fd:55:b3:f5:
72:4e:1a:83:93:b4:f5:df:3f:92:d8:92:c8:67:eb:0b:24:38:
ac:71:e5:64:d1:ec:0a:26:c1:a6:64:e2:36:03:14:e7:49:41:
31:05:5a:24:8c:9a:be:8c:50:e5:e5:79:14:e0:2a:ec:fb:04:
af:2b:5e:e4:1c:e8:fa:5e:9e:9b:00:80:4f:05:77:02:b5:9e:
f8:f8:4b:bb:ab:f1:af:78:44:d4:5e:f1:53:36:48:e9:cc:54:
97:89:4a:60:35:e1:5c:a4:51:23:e5:e7:6b:23:fb:0c:cf:4b:
03:9f:51:5a:ef:81:b7:d4:3a:f0:bd:a0:74:77:40:ba:cc:6e:
76:b9:74:f7:c7:be:a5:f5:87:6e:ae:d1:b3:f2:01:96:29:8c:
b7:cb:47:03:69:71:a9:55:77:e6:00:3b:d9:a8:af:0f:86:0d:
1e:fc:b2:81:22:2c:63:4f:0f:c4:de:b4:23:c3:78:9b:9b:53:
a3:7d:fd:37:f6:18:98:61:3f:de:b2:e1:d3:32:60:c6:65:35:
6e:00:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:16 2025 by rpki-client