Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
File: F9E4E14645AE11EF8870C771C4F9AE02.roa (raw, json)
Hash identifier: vqfBcf5vpMBkoptdR186vKEyoOUdk3eFKxuU70CJf2Y=
Subject key identifier: C6:D0:11:F9:6E:22:27:CA:FA:FB:0F:B9:E5:F8:1E:2D:F4:0B:CA:26
Certificate issuer: /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Certificate serial: 02
Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
Signing time: Fri 19 Jul 2024 09:12:09 +0000
ROA not before: Fri 19 Jul 2024 09:12:09 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 139329
IP address blocks: 103.178.219.0/24 maxlen: 24
2001:df0:3ec0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Validity
Not Before: Jul 19 09:12:09 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=669a2de9-d4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:78:58:25:5c:91:4a:c5:18:39:7f:9d:e6:
16:bb:d2:91:15:7d:cc:a7:69:b6:39:27:c0:92:e8:
96:ff:20:75:b4:51:3c:b1:21:6b:88:93:a0:4d:5a:
9e:35:96:95:f9:83:34:1a:7b:d4:d7:4a:6b:25:6e:
4e:e5:5b:a0:1e:90:25:11:b0:37:57:42:7f:de:5d:
82:d6:c1:7e:e5:eb:b8:fd:2b:8f:70:61:33:48:ca:
f6:56:8b:e5:34:3b:99:21:0a:12:4f:74:cd:cf:8f:
f4:0d:b9:37:10:da:9f:04:dd:ff:bf:fb:0b:fe:fb:
c2:9e:2e:98:52:e5:27:45:6a:a9:05:a2:4f:fa:d3:
51:e0:12:0d:cc:ee:c4:1c:53:8d:8b:4a:9f:ec:ad:
a5:3a:2c:9d:c1:73:69:e0:a3:64:33:b3:d3:b6:b0:
b9:67:ea:49:8e:e1:36:6d:c9:f2:ab:41:9b:1a:bc:
35:d2:c8:a9:74:dd:4e:7d:4e:6b:55:a8:4a:c8:7f:
34:b2:e5:ac:a4:aa:bc:52:a2:51:2c:8e:ea:08:dc:
83:88:4a:e6:10:ca:d2:bf:b7:41:ff:f5:78:e5:2c:
cc:e2:e6:63:ed:e1:22:1f:64:e7:2f:aa:41:17:23:
f3:c9:63:79:1f:4a:96:23:d6:15:e4:a3:36:7a:31:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:11:F9:6E:22:27:CA:FA:FB:0F:B9:E5:F8:1E:2D:F4:0B:CA:26
X509v3 Authority Key Identifier:
keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.219.0/24
IPv6:
2001:df0:3ec0::/48
Signature Algorithm: sha256WithRSAEncryption
19:24:9d:48:a6:61:f5:eb:d4:a0:b3:50:8b:2c:df:e2:0e:b3:
af:5e:5c:66:2e:04:db:8c:58:d1:2c:c8:17:9b:5c:57:d0:35:
20:5a:e8:44:8f:7b:c8:87:aa:ec:98:94:22:58:c8:2c:13:1a:
f7:bb:f4:b3:0f:cb:4d:36:dc:56:99:cb:75:92:5d:6e:6d:9b:
5c:ee:11:04:8f:71:f0:de:59:c2:d8:db:39:3c:b2:56:79:56:
33:58:80:a9:59:5e:79:4b:41:80:39:a2:02:86:f8:61:42:53:
10:ae:55:75:5d:24:76:3a:2e:67:ae:f2:e8:87:9e:87:f8:44:
98:8f:0d:27:e0:4f:ce:1d:e7:cd:9a:7c:67:70:4d:c4:f8:34:
af:cf:a2:b5:08:8c:8c:ba:10:66:a9:53:ff:75:f7:a6:31:fd:
06:d8:cd:9d:86:6a:a0:cd:ef:a8:94:79:06:70:7d:5f:a8:36:
78:fc:01:26:3b:ba:aa:4d:47:84:89:72:0e:da:7f:5f:6e:62:
b5:65:4a:c8:f5:5e:cb:65:bf:b4:4b:0e:dd:a7:bd:da:59:f9:
1e:35:9e:c6:64:44:fb:66:82:8c:04:8a:35:c1:8e:33:2a:9e:
13:39:ae:5c:cc:ff:3d:54:c3:bb:f4:3a:f8:ef:a7:3f:af:ad:
46:df:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:54:26 2025 by rpki-client