Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/13A285FAB19A11EF8A0E4356C4F9AE02.roa
File: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (raw, json)
Hash identifier: boOCGflbkanE4P7ei17MNzMPBecXSr0AQA7gAl1zsjs=
Subject key identifier: 22:91:8B:12:CC:6C:51:BD:28:98:F5:4D:68:61:92:77:DA:1F:F3:EE
Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial: 038E
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/13A285FAB19A11EF8A0E4356C4F9AE02.roa
Signing time: Tue 03 Dec 2024 17:14:38 +0000
ROA not before: Tue 03 Dec 2024 17:14:38 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 151330
IP address blocks: 103.179.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Validity
Not Before: Dec 3 17:14:38 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=674f3c7e-a62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:54:8f:b2:46:7c:f4:99:11:9d:09:53:bb:
9b:98:c9:b7:78:ab:97:a1:5e:04:83:4e:e0:98:f5:
dd:87:b6:ab:e5:71:0c:20:26:a8:91:ff:78:3a:f1:
ac:ec:8e:d3:cf:94:93:c2:be:a4:f6:8f:d1:4d:7c:
1c:0b:3b:7c:ff:36:ae:b2:a0:d2:2d:ce:a6:22:99:
6c:08:f2:76:29:25:4d:7c:4b:42:81:80:ea:ba:54:
bc:7d:74:1c:bf:5b:61:34:4f:86:7e:a3:b1:62:fa:
a6:83:ee:56:ad:bf:82:b1:6c:57:1c:2c:fc:c7:12:
41:9f:f6:8e:38:ff:54:7a:17:77:5c:2f:f6:a0:73:
d9:eb:66:64:b9:cb:33:2e:68:61:13:85:55:d7:14:
4f:59:4a:26:b9:ce:22:b4:0b:70:bb:0c:2e:13:8b:
28:74:b7:48:bb:ee:0c:e9:f7:19:41:0b:39:d1:32:
61:33:87:63:4d:2e:f4:2a:89:74:c0:74:5c:db:f4:
3b:ee:69:4c:ad:d3:24:05:54:49:54:fe:95:ae:be:
2e:00:13:9a:90:ef:a9:1c:4d:a3:f7:cb:56:be:d0:
51:b7:ec:8a:60:16:83:b2:6f:d3:4e:25:2a:7d:6e:
9b:13:44:8c:e3:24:0d:fd:7c:f6:0b:af:f0:ec:ab:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:91:8B:12:CC:6C:51:BD:28:98:F5:4D:68:61:92:77:DA:1F:F3:EE
X509v3 Authority Key Identifier:
keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/13A285FAB19A11EF8A0E4356C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.240.0/23
Signature Algorithm: sha256WithRSAEncryption
61:2f:d3:67:78:c8:9c:fb:66:c8:c6:53:d5:9a:74:d9:2b:03:
6e:15:7f:c5:ad:6f:af:1d:57:d5:8e:3d:35:05:e2:37:06:1b:
1b:65:97:89:11:57:55:20:d1:d9:fd:61:d3:86:68:3d:5c:d9:
b4:f2:0a:69:85:55:eb:31:6b:b3:9f:a5:5e:de:b0:73:07:57:
24:ea:66:5d:0e:95:e9:89:73:36:b5:49:f9:64:b2:36:7f:0b:
d8:b4:57:dd:f5:e1:08:bd:0b:f5:f7:eb:53:b2:7d:d8:4c:3f:
3b:f4:3e:1e:07:5a:08:5c:9e:c2:75:17:b8:5f:38:a5:91:f0:
1b:dc:78:01:99:96:3e:7c:f7:5b:d1:cf:e6:9c:f0:1f:ea:dc:
42:c9:5c:5b:77:1b:5b:35:00:e6:8b:6e:19:ee:e0:c0:b6:e9:
31:69:21:e5:5c:bc:14:63:79:91:1f:13:08:53:87:5c:57:ad:
91:f4:1b:29:35:ce:f4:89:c7:a6:2a:77:f7:3d:04:03:0f:0c:
1b:90:2b:76:ab:5d:3e:df:56:01:8a:96:ef:fd:a7:89:50:e5:
5e:06:a0:41:20:84:26:42:a9:74:98:73:08:2b:67:da:4e:00:
49:3d:c8:56:68:4f:ba:24:15:38:31:7a:da:61:7d:9f:f2:37:
dc:57:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:17:18 2025 by rpki-client