Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/13DBE72EB4A611EE9795B755C4F9AE02.roa
File: 13DBE72EB4A611EE9795B755C4F9AE02.roa (raw, json)
Hash identifier: fopvRRWJIFpu2y3+PSB4W8rVw97gaPxUTr85DknbhoM=
Subject key identifier: 27:39:85:37:42:79:F1:6C:77:5A:95:13:56:78:41:8B:94:80:A9:5B
Certificate issuer: /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial: 049E
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/13DBE72EB4A611EE9795B755C4F9AE02.roa
Signing time: Sun 01 Dec 2024 00:03:27 +0000
ROA not before: Sun 01 Dec 2024 00:03:27 +0000
ROA not after: Sun 30 Mar 2025 00:00:00 +0000
asID: 152150
IP address blocks: 103.174.46.0/24 maxlen: 24
103.174.47.0/24 maxlen: 24
2001:df7:b780::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182 (0x49e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Validity
Not Before: Dec 1 00:03:27 2024 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=674ba7cf-1073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:64:93:0a:4c:82:9e:23:95:aa:94:f2:73:
f0:89:40:3f:f6:40:7a:dd:d1:69:ce:53:08:03:8e:
c9:03:0c:60:c5:c3:06:fb:91:2e:c0:45:e4:d0:57:
38:41:4b:dc:8d:f3:e8:29:81:4c:10:a4:7e:f6:a8:
70:20:56:eb:22:c2:e8:48:95:9b:e0:3f:b0:8a:86:
d1:c8:c7:22:6e:c1:b7:cb:69:bb:9a:ea:3b:ae:75:
2b:1c:10:8f:22:6c:ff:6e:3e:e6:72:2b:8b:22:be:
c4:2e:ea:76:5d:33:7b:96:e3:25:de:0a:e1:de:d9:
0b:1f:79:5f:2e:a3:46:1f:72:71:2c:1a:ce:24:91:
9a:6e:00:18:29:92:b9:c3:26:70:bc:d7:c2:42:b6:
d1:45:55:a8:36:e6:08:51:50:48:bf:e4:4b:7b:e9:
52:6a:c0:af:bf:2d:8e:79:25:82:82:d4:41:b6:8c:
58:95:f2:e9:6b:95:a5:6d:65:21:1d:93:a7:27:a4:
23:ff:36:48:b6:73:d5:5e:32:d4:b7:57:05:7e:71:
04:00:85:70:53:2f:74:25:d5:b7:f0:4d:bd:98:5f:
2d:15:8d:44:30:03:a1:6f:75:fb:9a:ba:70:fb:49:
a5:b5:14:9c:35:c5:29:d0:56:be:59:a2:03:30:98:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:85:37:42:79:F1:6C:77:5A:95:13:56:78:41:8B:94:80:A9:5B
X509v3 Authority Key Identifier:
keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/13DBE72EB4A611EE9795B755C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.46.0/23
IPv6:
2001:df7:b780::/48
Signature Algorithm: sha256WithRSAEncryption
52:d3:a2:30:31:2a:3f:6c:e6:a9:4b:7f:6d:db:f6:68:a7:90:
f1:66:ed:73:d1:8e:6d:b5:8f:5d:a1:4e:1e:e1:b0:28:94:f4:
f0:ff:a0:22:4e:da:17:ba:ba:31:87:a5:70:b2:12:e3:00:1e:
2b:eb:8b:98:67:8e:c0:7f:4e:08:be:e1:df:67:f1:fc:6c:f9:
e0:2c:bd:5e:37:e2:bf:0e:8e:69:3e:c4:f5:8e:58:bc:aa:ba:
2b:8e:15:4a:fc:a5:10:22:8d:ad:d9:57:99:70:a4:5d:01:d5:
e9:60:44:3b:43:90:9c:f5:a7:07:c3:80:f8:f8:8d:27:92:20:
36:e6:67:83:09:9e:a9:fd:55:96:bb:6c:2d:f7:25:02:dd:a0:
a2:09:04:58:f7:2c:07:0b:6a:63:9f:c7:85:38:d2:55:7a:64:
e8:c3:e3:d2:c8:a1:42:88:52:e8:12:22:e1:8d:38:6f:94:f8:
2f:61:df:94:79:b2:90:57:e6:f1:ea:d3:f0:b6:fe:04:de:17:
68:a6:6d:73:02:f3:f4:3d:35:2e:02:8f:2f:c7:e4:1f:a2:a9:
bd:c8:bf:d1:0a:a2:d5:fd:94:83:11:6f:7e:dc:54:05:f8:f5:
66:b9:24:c8:79:0a:32:06:42:1a:77:37:31:06:bd:e7:21:3a:
64:ea:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:28:52 2025 by rpki-client