Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A431410948F11ECBDE81D52C4F9AE02.roa
File: 9A431410948F11ECBDE81D52C4F9AE02.roa (raw, json)
Hash identifier: m26VVjmUQSOmSZqxR7UXwcl20i6j4bVQhEgm8UDiLrQ=
Subject key identifier: A6:FD:0D:21:BC:ED:A3:A1:7F:F8:73:DF:65:94:F6:BE:8F:33:99:D1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8AFB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A431410948F11ECBDE81D52C4F9AE02.roa
Signing time: Thu 30 May 2024 16:05:15 +0000
ROA not before: Thu 30 May 2024 16:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136351
IP address blocks: 103.179.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35579 (0x8afb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a3bb-f9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:42:c4:20:5f:6d:c2:c3:81:ef:21:a7:34:
57:cf:8e:bb:3e:ae:67:5a:b9:64:52:6d:50:dd:69:
57:56:d5:b4:2f:1d:73:8f:15:50:2a:2c:95:5f:6c:
66:13:b0:c8:32:ea:77:13:46:a9:93:ea:90:b5:5b:
bb:0c:f0:52:76:24:88:4f:95:70:c5:f1:40:18:74:
63:c0:b6:66:9d:b8:3f:0f:0d:6f:24:46:18:7a:02:
6f:1a:04:b6:15:ed:6c:64:3d:74:db:c4:ff:b4:3b:
12:6b:13:23:e7:bf:0c:38:e6:db:93:cf:23:09:37:
be:64:9f:32:6c:e9:a9:8e:3a:00:e2:a2:3c:9a:f1:
20:09:02:54:5c:c4:db:64:23:55:8e:d1:bd:60:26:
92:32:a4:c0:ce:17:0b:7d:9e:bc:fd:a1:a4:25:3c:
56:36:de:e2:d6:77:37:6d:fc:fe:51:14:ff:b6:99:
9a:ae:66:0d:d2:79:06:04:82:e0:54:73:6f:9e:8f:
2e:7a:e8:a9:66:37:5f:31:50:94:af:81:f9:32:6d:
67:fe:1c:b2:4d:95:10:ff:cf:ea:c1:2c:93:59:a3:
78:12:09:eb:bd:30:63:c6:84:13:3d:84:2c:66:6a:
df:0d:c3:d1:b5:22:cf:b5:b2:f2:4d:1e:15:25:61:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FD:0D:21:BC:ED:A3:A1:7F:F8:73:DF:65:94:F6:BE:8F:33:99:D1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A431410948F11ECBDE81D52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.147.0/24
Signature Algorithm: sha256WithRSAEncryption
77:20:db:d1:bd:79:bc:bf:97:55:d9:ad:18:ba:f9:de:78:a7:
3a:bf:e6:08:bb:f1:a6:2a:28:c3:94:bd:dc:0c:9e:f7:c7:2a:
b9:08:ba:54:ea:36:4e:f9:9c:1e:28:e8:73:fb:98:f0:4c:11:
4a:78:14:bf:48:64:eb:d3:41:90:ad:00:48:df:cf:4f:3f:58:
06:ae:90:2d:cb:93:ab:db:77:86:30:fa:66:fa:e8:71:56:84:
dc:85:d4:81:71:1b:4d:43:7b:42:97:1d:0e:01:4a:30:24:37:
23:b9:94:8d:49:7a:a7:08:c0:f7:0a:6b:10:e2:39:e2:2d:d2:
36:dd:ca:f2:61:cc:f4:7a:bd:4c:dc:c3:b0:a0:1b:ae:50:07:
10:df:90:ae:6e:c8:bb:93:6e:e3:f1:b2:a4:e7:e0:08:3c:b8:
8d:c1:58:6b:21:13:19:74:43:e2:d1:e9:ac:9d:68:f7:36:07:
c4:a1:7c:92:0c:61:3d:db:19:0d:a9:0c:65:1a:d0:a1:99:11:
9f:fb:bc:b3:32:07:03:53:ae:8c:27:ba:c5:74:d8:0e:e0:07:
b1:55:91:7c:98:ac:96:e5:2e:d0:d0:bc:02:4c:19:c2:5d:47:
fa:c2:b5:c4:8e:83:02:1b:9f:dc:f1:b8:3a:2c:77:53:67:26:
05:62:78:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:48 2025 by rpki-client