Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa
File: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (raw, json)
Hash identifier: 8E473KkpiKjZKNroBEhCbINIeIwzAWwWEuJqRVf36nY=
Subject key identifier: 39:6A:21:65:CC:C2:B5:D2:5A:70:9A:B1:26:59:E3:91:7B:32:F4:C3
Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
Certificate serial: 77
Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa
Signing time: Mon 01 Jul 2024 07:28:36 +0000
ROA not before: Mon 01 Jul 2024 07:28:36 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 45177
IP address blocks: 103.68.58.0/24 maxlen: 24
103.68.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
Validity
Not Before: Jul 1 07:28:36 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66825aa4-5f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:24:57:79:2d:e8:0a:44:10:05:c8:6e:73:
cb:c3:cb:5f:ac:88:0f:a4:0d:ed:c8:54:f1:dc:20:
a8:d0:57:6c:28:98:97:da:98:d0:ba:a2:ec:31:d7:
3f:03:ea:60:98:59:99:82:49:74:ad:7b:66:c2:79:
4d:5a:ff:c4:50:1f:30:12:67:1e:13:1e:bb:fc:8f:
2e:10:7d:9f:9f:3f:01:35:5d:86:30:52:c0:e0:5f:
e9:0f:06:c2:fa:77:5f:5f:a1:2e:15:72:04:2a:7a:
1d:9e:3e:54:d5:93:79:8a:0d:d9:87:4f:46:97:85:
27:77:43:12:28:32:76:d3:1f:a9:1d:aa:ab:1c:80:
e0:61:31:cb:ec:cc:71:78:15:10:cc:00:e7:df:f4:
b7:db:d4:0f:87:67:81:85:a4:ee:9c:c1:00:58:a1:
70:08:65:f2:da:f7:97:84:61:a2:88:25:d8:89:f1:
35:08:dd:65:cb:cc:83:1d:aa:65:dd:24:e9:7c:b8:
ae:0b:24:cd:cd:61:2e:93:ae:8c:43:43:46:db:a9:
6b:1e:4f:1d:89:86:f7:00:53:34:0e:c1:8a:1f:da:
07:fe:22:a4:cb:0b:06:41:39:88:78:ae:90:7c:cb:
b1:47:95:c4:1b:40:7c:8e:d2:e8:50:35:30:ac:22:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6A:21:65:CC:C2:B5:D2:5A:70:9A:B1:26:59:E3:91:7B:32:F4:C3
X509v3 Authority Key Identifier:
keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.58.0/23
Signature Algorithm: sha256WithRSAEncryption
80:2f:e3:0c:7e:f3:58:a8:66:52:56:4b:e2:37:bf:38:79:6b:
fc:2c:b9:05:b6:85:1e:14:5a:d5:06:8e:e7:85:7d:af:29:35:
c2:e7:e4:af:74:ac:71:c0:b0:c3:02:a2:fb:aa:7c:4b:bd:76:
51:5a:8e:81:47:07:88:32:41:36:65:c2:ee:ec:c5:8c:7c:8f:
3a:db:2e:89:22:00:c3:1f:27:e0:b2:d0:b8:a6:00:08:22:72:
5b:ac:5a:6e:c9:01:be:a6:2f:6d:25:b7:40:a2:4e:43:87:4a:
91:78:e7:09:26:40:f8:5b:60:f1:1d:8a:2c:15:a1:d6:de:02:
68:8e:c4:4f:84:0c:eb:d4:0b:90:e5:ec:c5:f5:c1:e1:0a:a3:
44:75:cc:24:31:fc:9e:f1:82:e2:0a:18:86:8c:27:e0:28:5e:
a0:d2:04:50:da:a7:80:89:91:6f:3d:f9:ca:66:1d:48:52:cd:
93:75:1f:92:1e:55:2e:3b:fe:85:60:df:62:cf:1d:4a:96:be:
a3:7e:66:7b:44:85:01:01:e2:e6:32:e6:9e:8b:4a:ce:9b:d0:
05:28:f1:12:76:42:15:3d:2a:59:c2:09:fb:c9:2c:cf:37:ac:
a6:35:7d:f6:3e:78:f4:1a:62:40:c3:2b:3c:ab:08:45:fb:de:
a9:8a:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:20 2025 by rpki-client