Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/AD9D02406C6811ECB7C0925AC4F9AE02.roa
File: AD9D02406C6811ECB7C0925AC4F9AE02.roa (raw, json)
Hash identifier: kw8NlMSw+Nqcx4jBYDikGpkNhg4pIHl7KmPwkj2eC0g=
Subject key identifier: A1:54:56:D0:D2:0B:1F:22:A0:16:15:FC:6B:78:8B:F9:DA:C1:FF:43
Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
Certificate serial: 03D1
Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/AD9D02406C6811ECB7C0925AC4F9AE02.roa
Signing time: Sat 11 Jan 2025 00:13:52 +0000
ROA not before: Sat 11 Jan 2025 00:13:52 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 132008
IP address blocks: 103.178.72.0/23 maxlen: 23
103.178.72.0/24 maxlen: 24
103.178.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977 (0x3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
Validity
Not Before: Jan 11 00:13:52 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6781b7c0-97b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:48:b2:8c:3f:d4:93:19:93:a2:de:d3:61:
b9:0f:2b:d2:dc:d5:a7:c7:79:9b:bc:51:b2:5c:25:
26:bc:74:a3:20:b3:c3:97:dc:e3:8c:dd:d7:f9:84:
87:ad:c4:1c:01:a3:ed:e9:2d:0f:65:67:38:a8:08:
5b:4f:40:3d:ee:06:b7:76:03:c3:19:e1:2e:64:ef:
1c:ee:8c:21:88:07:34:67:8f:18:ed:be:50:ef:7c:
35:43:2a:3f:56:96:b7:1b:6c:73:35:aa:e1:d7:b0:
34:3d:57:07:bc:99:b0:9c:2d:31:2c:33:a7:18:99:
6a:43:77:ce:d1:3d:b4:27:cf:ca:a0:79:cd:c0:28:
99:25:f2:45:2e:a0:75:eb:a8:b9:19:cb:38:92:d8:
25:09:56:fd:ba:62:69:ae:27:69:cc:fa:98:35:ed:
a8:30:71:22:4b:6c:e6:01:6d:35:d6:48:6b:9c:93:
ec:c6:9b:04:3d:17:8e:2c:55:85:17:c3:66:b1:bd:
13:d7:17:58:39:5d:e4:d6:fa:2a:12:f7:aa:5f:82:
e4:54:f1:b2:fa:66:ae:a0:2d:91:0a:d5:3e:09:2c:
0e:d8:69:f1:0e:15:bb:92:e0:7f:11:1f:eb:d8:1c:
fd:9a:1b:25:54:ed:78:fb:2a:b1:b4:1f:bb:49:bf:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:54:56:D0:D2:0B:1F:22:A0:16:15:FC:6B:78:8B:F9:DA:C1:FF:43
X509v3 Authority Key Identifier:
keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/AD9D02406C6811ECB7C0925AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.72.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:82:86:89:90:29:eb:ce:c4:57:15:c2:2e:9c:0f:c5:f1:ca:
8d:c6:4a:07:6f:d6:7f:8a:99:b0:c2:d3:4f:61:e1:df:ba:36:
60:a7:34:08:4f:92:3d:95:47:4e:f6:86:b3:d5:25:31:3c:e5:
f1:70:32:07:dd:61:4d:22:b4:e9:39:f3:36:fb:d7:46:99:6f:
d3:c8:11:8e:7f:46:0e:a6:e3:5c:a4:cf:08:b8:f4:52:ea:6d:
34:f0:07:c0:b7:e7:51:a5:01:31:24:c8:b8:d6:4a:28:fe:5e:
6f:cb:57:91:a9:0e:06:f2:4a:a3:38:75:5c:0f:79:0c:50:17:
9a:be:e7:73:40:e6:95:9c:e5:b5:f5:70:3a:7a:db:4a:f2:a5:
a7:b0:1b:b1:65:dd:57:61:bb:a8:e5:94:74:99:09:3d:77:be:
43:ce:ec:6c:cb:3e:62:88:2b:c6:8a:19:42:2d:b7:14:d8:78:
b6:6b:1d:bb:ed:0e:37:7d:2e:23:11:da:79:c0:38:04:1c:1c:
61:d2:1a:03:ed:ae:83:c0:0a:62:1d:86:85:d4:16:82:83:48:
ce:b4:14:5a:f9:99:a9:3b:19:ef:da:cb:5d:97:38:4c:95:0d:
bb:8f:7e:80:4e:72:ab:35:7f:69:64:51:c6:89:ec:fe:fd:ef:
bc:78:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:33:01 2025 by rpki-client