Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/3303481C820B11EFA5FD6818C4F9AE02.roa
File: 3303481C820B11EFA5FD6818C4F9AE02.roa (raw, json)
Hash identifier: qSn7HxYC79SRKokwqOPpvLlZ94GTIrZHr+Y0TqagvLo=
Subject key identifier: BA:D8:A6:A5:04:12:ED:4D:81:8A:A7:15:26:0D:25:E3:68:32:4D:A5
Certificate issuer: /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Certificate serial: 01F9
Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/3303481C820B11EFA5FD6818C4F9AE02.roa
Signing time: Sat 04 Jan 2025 12:50:56 +0000
ROA not before: Sat 04 Jan 2025 12:50:56 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 206888
IP address blocks: 103.79.184.0/23 maxlen: 23
103.79.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Validity
Not Before: Jan 4 12:50:56 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67792eb0-f375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:29:07:b9:67:cf:b6:06:b8:95:27:5c:cb:88:
e9:78:0a:e7:e3:c2:10:a3:f3:83:65:9d:b1:51:e2:
5b:f1:ea:05:08:8c:9c:82:0a:98:7c:3b:42:81:2c:
45:bd:4d:de:9c:52:72:fe:d7:da:3f:51:a1:78:11:
3f:64:c6:a9:3d:ab:2c:89:da:f2:76:0b:cf:c8:fe:
33:07:76:0d:c7:1e:4d:9b:3b:ae:ff:68:d1:1d:90:
1d:3c:5a:b7:03:89:69:26:b6:c7:d9:b1:a7:55:4c:
f7:f3:52:5f:c2:4c:31:54:73:8a:e9:1d:4c:60:ce:
11:48:4b:72:8b:5b:d8:39:64:a5:6c:4e:94:3d:9b:
d5:04:90:82:d8:14:c7:dd:3c:a2:0a:67:18:7c:b4:
6a:ec:d4:6b:5c:7a:e1:90:3a:9a:c9:87:19:e4:27:
4c:d5:c7:19:3a:72:da:11:42:b1:0a:d2:9d:4d:c9:
8f:86:29:fa:e5:44:b5:93:d1:a5:1d:47:f6:a1:a8:
bb:d3:ce:cd:08:88:e2:8a:08:85:6c:89:b2:ab:76:
83:3a:5f:9c:bf:ac:70:87:88:4a:fb:e5:2f:c1:ca:
1a:cb:e1:48:05:40:79:ee:3e:3f:4f:12:2a:26:c3:
58:45:88:77:06:34:0a:8c:3d:3f:62:50:e4:30:56:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:A6:A5:04:12:ED:4D:81:8A:A7:15:26:0D:25:E3:68:32:4D:A5
X509v3 Authority Key Identifier:
keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/3303481C820B11EFA5FD6818C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.184.0-103.79.186.255
Signature Algorithm: sha256WithRSAEncryption
80:18:94:93:12:20:ea:a9:40:ce:d5:a2:3d:a1:f6:f9:66:a5:
15:d6:39:c8:75:bb:41:9f:16:23:d1:87:bc:e8:5d:3c:3f:7c:
75:75:ec:ee:05:47:f9:45:72:e2:18:3c:60:fb:55:18:f4:25:
c7:78:00:bf:7b:4f:1e:b1:f9:a9:b5:85:27:4f:6e:40:ca:50:
fb:3e:61:8f:27:0d:b0:80:cc:fa:ab:bd:38:c5:5f:da:f8:6f:
0a:31:85:e1:75:69:f1:35:54:23:30:27:f6:fe:b9:b4:e1:ce:
6f:83:9f:6b:ba:38:eb:72:fd:7a:1d:43:2b:70:21:63:2d:e7:
9a:94:f2:db:fb:85:48:fc:bb:4d:ea:8a:87:23:6c:aa:2a:23:
54:bb:59:0f:38:2d:23:af:37:80:2c:48:c2:60:b8:db:a1:83:
a4:f9:fa:03:a0:31:2f:77:3b:4f:c3:44:6a:09:b9:be:5d:a4:
55:d8:c5:fc:d7:86:e3:7b:ec:3f:4f:62:6a:f1:79:2e:87:73:
d9:f4:67:37:1e:31:86:96:81:69:6f:75:c1:8a:a1:6d:76:85:
b4:58:ad:44:fe:31:09:04:6d:0b:47:4a:d4:f9:a4:c6:5b:ab:
e7:fc:6c:b5:1a:d4:3e:4e:fb:d2:57:21:61:16:58:cf:03:20:
f6:77:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:22:56 2025 by rpki-client