Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
File: B76A1A109B5411EF9756FD79C4F9AE02.roa (raw, json)
Hash identifier: S6jwI0TNB7LkuUao3PaiL3XeL9O4azeJDi9r1sukrRg=
Subject key identifier: 59:9F:D5:28:7A:40:53:9B:14:1D:8A:DC:3B:37:71:D7:21:15:E2:1E
Certificate issuer: /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial: EE
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
Signing time: Tue 05 Nov 2024 09:02:43 +0000
ROA not before: Tue 05 Nov 2024 09:02:43 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 142132
IP address blocks: 103.166.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Validity
Not Before: Nov 5 09:02:43 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6729df33-7e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:c9:e6:b7:89:dc:82:24:30:3c:a7:34:f7:
27:39:9b:ed:a1:3e:62:9f:6f:f7:8d:bc:33:db:8c:
73:3d:9d:98:3a:f4:20:41:7e:48:31:96:26:a0:3d:
4b:f3:a1:74:2e:3a:62:6c:7e:e2:19:3e:0b:02:08:
25:2f:f8:5a:b0:d0:8e:df:02:aa:f1:fb:ec:f1:e8:
d2:78:f8:8a:51:b5:75:37:18:4b:fa:55:58:4a:46:
f6:88:47:6a:2f:7c:2b:b8:44:90:bd:df:af:e6:35:
2e:ab:2e:cc:27:fc:34:1e:82:f1:99:51:71:da:c6:
c7:ea:d2:c6:b7:6c:b2:24:e7:55:83:1c:fc:a7:8c:
61:e2:c6:6c:3d:79:0c:de:98:9f:a2:da:6e:a1:ff:
0d:7d:d8:9f:67:7c:29:f8:2f:f6:ca:95:9e:d9:5c:
11:b1:b3:53:a1:bf:26:ed:7b:0a:5a:99:c2:7b:55:
a0:7d:5e:1f:f0:fa:69:1d:27:b5:38:42:f8:91:56:
27:df:95:06:1d:0a:84:f6:05:88:87:d7:c0:54:f4:
37:37:04:4a:e2:fb:71:c5:2c:34:96:48:c8:43:79:
16:a1:63:29:a9:39:e4:30:10:fa:e3:24:83:63:a9:
ad:6a:7c:10:b8:88:c4:01:b9:25:5d:15:6e:1d:fd:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9F:D5:28:7A:40:53:9B:14:1D:8A:DC:3B:37:71:D7:21:15:E2:1E
X509v3 Authority Key Identifier:
keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/B76A1A109B5411EF9756FD79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:13:b4:2e:a5:69:5d:30:c8:31:33:46:85:6c:fa:71:d0:e7:
13:7c:b9:5b:ae:42:e4:d2:e4:e9:a9:cb:cd:21:45:0c:a4:c2:
02:67:ca:8a:e6:02:5e:eb:36:1c:56:71:cf:22:83:39:7b:04:
cc:3a:05:05:3c:63:bc:57:d4:f0:cf:e5:fe:66:e4:9a:49:f4:
89:ca:fc:d8:8a:aa:fa:84:60:4e:d6:2a:d9:16:67:35:e0:fa:
5d:52:a4:1c:8f:1e:74:93:17:80:06:00:bd:c4:25:65:a8:6e:
64:ba:e6:3b:23:21:19:c6:0e:20:6e:6f:2f:ee:e0:97:d7:0c:
4f:2e:5c:81:fd:3e:28:1e:ae:cb:23:e2:f4:68:6c:33:dd:93:
f2:ad:7a:e2:ed:fd:00:a6:6b:19:c0:06:57:10:eb:b5:55:da:
ec:ac:17:92:c5:21:76:74:d9:8e:54:40:ae:ba:db:06:c0:bb:
8e:51:b8:f8:7a:b9:44:e9:2b:ae:ce:0d:77:fc:b4:cb:0b:5d:
0a:53:77:0f:b2:fe:63:6c:c8:2e:c4:9d:48:8a:72:0f:8d:2e:
7a:03:44:b9:73:97:c0:a3:b6:41:6e:09:fd:47:68:c3:57:b4:
00:5b:23:0a:8c:b5:5a:00:d1:4a:a7:d9:f3:fb:2e:7e:1a:6e:
54:34:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:16:59 2025 by rpki-client