Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa
File: C09ED7E6804A11EDABB05C09C4F9AE02.roa (raw, json)
Hash identifier: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=
Subject key identifier: 5F:5D:01:0F:6C:B7:7A:07:51:11:1F:C1:3D:E2:A6:00:AB:0D:E8:5A
Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial: 0312
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa
Signing time: Mon 27 Jan 2025 00:53:58 +0000
ROA not before: Mon 27 Jan 2025 00:53:58 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 140224
IP address blocks: 103.179.242.0/24 maxlen: 24
103.179.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Validity
Not Before: Jan 27 00:53:58 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6796d926-c23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:2c:81:2c:72:e9:ec:55:b9:07:36:b8:55:
fb:78:7d:21:ca:bc:d6:d6:45:e6:dc:72:c2:f0:32:
1f:ac:63:18:a4:1c:c3:c8:d0:de:12:5d:28:ec:50:
6d:78:c4:cc:19:8c:d0:45:ed:47:d8:75:d8:27:a8:
c1:f2:9e:cc:0c:b5:3d:6b:93:d0:37:6d:60:ad:5e:
29:b8:72:c6:f2:2b:61:13:51:7d:5c:12:11:d8:69:
4a:bd:7e:a8:fc:9d:c7:18:ec:67:26:dc:29:f4:5f:
a1:09:ff:0b:d7:55:9d:5c:22:b1:6f:02:61:ae:35:
9e:45:74:ac:f2:18:cd:9d:51:39:df:0c:8f:87:ea:
66:8b:fb:58:9e:1f:c3:4c:8c:9f:c6:18:3a:80:02:
c2:3a:cb:31:c8:d3:a3:4f:ec:53:85:17:92:b3:47:
4e:51:82:af:3c:6d:8b:63:9b:11:41:b4:94:7f:4f:
b8:3a:2b:0c:a8:9b:29:6d:a5:90:ff:8c:fa:32:c8:
ce:1f:44:4c:fa:be:bd:05:fb:b3:18:2b:8c:a5:82:
fc:bd:92:a4:32:05:6b:92:8c:23:4e:8d:3b:d5:51:
c6:05:e8:7a:df:ce:a8:19:a2:90:35:f0:d1:7d:b2:
d7:b9:b8:d1:c5:f2:73:46:4e:0c:cd:2c:8f:2d:f3:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5D:01:0F:6C:B7:7A:07:51:11:1F:C1:3D:E2:A6:00:AB:0D:E8:5A
X509v3 Authority Key Identifier:
keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.242.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:28:d3:76:dd:29:33:e2:16:aa:45:6e:6f:d4:ed:0d:fe:18:
50:80:64:19:5b:5d:ec:fb:f1:19:6c:7a:63:0b:e6:07:f9:7b:
88:81:77:be:0c:68:4a:2b:81:03:ba:ac:97:65:a2:af:92:02:
0e:aa:ac:1f:c9:bf:57:40:e3:d4:fa:91:3e:d6:8a:08:20:ab:
fc:60:64:86:61:44:0e:3c:b0:2c:2f:6a:3f:83:70:31:b9:43:
17:3d:28:ee:16:5e:6f:3b:2a:fe:dd:fa:01:5d:9a:3f:ae:6d:
0a:2c:f0:3a:69:87:da:4b:a0:26:bb:0f:ef:4b:53:58:46:6d:
df:16:bb:13:c7:84:c1:e2:14:98:2c:bb:af:f4:c5:5d:77:c4:
cb:24:8f:8b:4f:4d:a1:10:7a:78:32:9e:ed:7a:05:80:9f:0f:
d6:30:0b:39:82:1a:a6:c1:7d:59:34:6c:d2:c7:23:2b:13:bf:
f1:f0:6f:cd:c8:5c:c7:aa:41:20:67:e5:82:f8:b8:46:38:13:
ad:67:3f:ca:42:7c:94:e6:bc:30:dc:98:16:1a:84:89:1b:29:
41:ba:c0:9e:3e:5a:e0:d0:85:76:51:88:10:a5:7d:e2:8d:78:
79:8c:86:46:8b:a9:5c:5f:99:0d:e2:df:6f:2e:2f:fe:6c:75:
42:d8:bf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:41 2025 by rpki-client