Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/00FFAB766ACF11EDBCC28E3CC4F9AE02.roa
File: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (raw, json)
Hash identifier: XpTSLigO4HKKd3j+0vvg/u/YVC83XW6OinlRQSFc3LQ=
Subject key identifier: EE:47:26:3D:F3:0F:E3:C7:4D:6D:DB:54:B7:87:92:23:0E:20:FC:93
Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Certificate serial: 0185
Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/00FFAB766ACF11EDBCC28E3CC4F9AE02.roa
Signing time: Sat 07 Dec 2024 02:16:10 +0000
ROA not before: Sat 07 Dec 2024 02:16:10 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 135668
IP address blocks: 103.78.136.0/24 maxlen: 24
203.0.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F
Validity
Not Before: Dec 7 02:16:10 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6753afea-8c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:ad:97:c4:6d:58:56:3d:6d:d3:e7:d4:d0:
19:34:cc:50:d8:ad:13:f9:49:95:43:a1:b7:a2:2b:
3f:7e:65:81:d3:87:fe:e6:3e:0d:f1:e4:42:19:fc:
b9:ad:9f:e9:96:2f:83:c6:45:22:c5:c1:47:d2:63:
c2:6a:c2:b0:1d:5a:d9:03:fb:c1:06:04:fd:39:6f:
4e:8e:4b:0b:b8:7a:a5:71:d3:1e:1e:f5:c1:03:20:
1b:19:cc:4c:d2:6e:d9:0e:92:39:34:0b:f3:79:43:
b3:49:eb:95:f5:6f:a7:0f:37:6e:55:06:aa:82:d7:
49:a4:6d:5e:3b:57:0f:09:d9:14:dc:81:85:b6:5c:
4a:b7:81:d2:cc:4f:9b:3e:4f:1a:ea:11:b8:01:a0:
fb:dd:ba:9c:a6:21:c4:02:60:5e:98:0a:e5:89:5e:
19:9e:60:16:55:38:aa:b5:82:9b:f6:a3:a8:e3:4d:
93:46:39:05:53:62:19:24:8b:dd:65:c8:7f:df:0a:
0e:71:06:49:82:b9:00:de:c2:88:4c:5f:06:41:a2:
89:0c:50:78:b1:37:45:f2:12:01:78:aa:62:75:3c:
7f:09:eb:b9:d0:c8:d1:c9:89:1e:57:82:0c:95:29:
8e:77:2c:19:b9:84:ed:15:f4:eb:5c:51:5b:5b:81:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:26:3D:F3:0F:E3:C7:4D:6D:DB:54:B7:87:92:23:0E:20:FC:93
X509v3 Authority Key Identifier:
keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/00FFAB766ACF11EDBCC28E3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.136.0/24
203.0.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d9:60:85:3c:38:42:db:e8:8a:71:6c:9a:0a:ee:16:72:e3:
45:29:86:7b:0b:2c:26:0a:c0:3a:e9:f6:89:b4:c5:91:1d:ba:
78:8b:80:97:00:67:84:f4:7e:2f:20:7e:73:04:fd:63:1a:14:
06:a1:49:b1:b4:fc:b4:ab:ba:cc:bc:c0:bd:9e:58:b6:1c:e5:
d8:1d:30:42:61:7f:5b:c7:fc:d6:90:ca:a3:ba:9a:c7:63:e6:
45:3d:b6:6e:16:cf:06:42:37:7f:09:f1:49:4b:1f:1d:49:05:
10:7b:12:12:bd:b5:7f:d2:24:14:d8:c7:a0:46:f5:f1:d4:98:
1f:59:e1:84:c4:b1:95:f1:d2:87:72:79:d8:ef:1a:3a:88:f5:
c5:71:21:9f:54:b8:86:49:89:28:c2:91:87:22:92:81:9a:cd:
aa:49:8f:22:61:9b:9d:b2:fc:02:32:bc:9c:78:e9:58:82:ba:
7d:77:ba:54:ec:e3:df:bf:11:d0:18:ef:61:65:2f:1b:3b:c0:
69:cb:39:d8:85:43:32:d2:3d:ca:20:b3:d1:f9:20:c6:b9:f4:
d2:cf:2a:7b:38:2c:10:10:58:71:d8:a8:1b:aa:2c:74:b6:e4:
c9:03:62:57:5f:ed:19:4a:7e:a8:af:bf:b0:1a:40:14:01:27:
14:ea:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:27 2025 by rpki-client