Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa
File: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (raw, json)
Hash identifier: T1xeJuM61tXFrRrs4nBlTF2LptDqgwUMRZIt/7strSc=
Subject key identifier: 2D:6D:38:AA:84:E4:1C:44:D4:3A:06:20:DE:58:2E:54:34:65:9F:49
Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Certificate serial: 0352
Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa
Signing time: Fri 23 Feb 2024 09:12:59 +0000
ROA not before: Fri 23 Feb 2024 09:12:59 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 16509
IP address blocks: 103.179.36.0/24 maxlen: 24
2001:df0:45c4::/46 maxlen: 47
2001:df0:45c4::/47 maxlen: 48
2001:df0:45c6::/48 maxlen: 48
2001:df0:45c8::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13
Validity
Not Before: Feb 23 09:12:59 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d8619b-1b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:95:5c:29:9c:80:81:a5:83:a4:5f:3c:6f:
34:f8:1a:56:08:84:5f:67:d1:83:a1:e3:56:0e:1b:
9a:30:f9:ea:72:7f:96:85:16:2a:9e:cc:55:89:f0:
4c:b8:c0:73:e3:9d:57:5d:6b:9c:15:5b:ce:c4:67:
18:4b:18:ac:bb:0f:58:2d:08:23:b6:c3:4a:87:4f:
8c:aa:c0:fc:e1:62:04:8d:0b:3d:46:47:56:99:af:
84:5b:eb:65:55:75:79:0b:f5:d9:25:e2:dd:1e:fd:
1a:33:c7:59:61:0c:37:61:89:40:83:b8:40:55:d3:
3f:3d:bc:2a:56:d6:b8:8c:6b:aa:8e:6a:bc:45:0c:
e1:44:24:a3:2d:ed:cd:b6:79:46:6d:04:be:05:49:
5b:33:b1:a7:f4:34:55:54:ea:7c:1a:1e:55:10:4a:
21:2a:8c:39:d8:35:fa:2b:5b:ed:c2:b0:48:85:e5:
41:ae:a7:04:2c:12:f3:df:b7:d8:18:e3:41:c7:4e:
c8:c3:ae:1f:26:d9:82:46:07:11:a8:8d:9e:17:e3:
40:bc:ad:d6:6b:e1:08:44:fa:8d:74:90:7c:d7:6d:
a5:1a:0e:5e:b6:b7:03:49:64:3f:cc:b2:0c:f5:2b:
a8:ef:2e:d6:36:55:4d:fb:04:4e:80:e5:38:2b:0a:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6D:38:AA:84:E4:1C:44:D4:3A:06:20:DE:58:2E:54:34:65:9F:49
X509v3 Authority Key Identifier:
keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.36.0/24
IPv6:
2001:df0:45c4::-2001:df0:45cf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9b:5d:b7:01:c0:ad:12:c4:0c:6f:5f:05:a6:d1:97:46:38:3c:
41:90:64:1a:76:79:c8:a6:25:df:45:5d:97:c3:d7:40:60:e1:
64:e7:1b:15:3f:ed:d2:b3:a7:b6:f6:35:c3:9e:1c:bf:8a:21:
88:94:51:23:f6:07:8c:37:c4:f4:1c:07:ee:3a:ac:21:05:70:
89:f1:9d:ac:07:bf:72:fd:5b:e2:00:89:d6:22:fe:05:06:e7:
82:54:25:4f:9f:67:79:8c:65:d1:5a:d9:a7:b4:a3:f4:94:98:
25:34:df:c5:11:08:38:71:86:ce:0e:2b:88:38:e2:23:af:34:
6f:98:82:66:f1:74:d8:ed:2b:ee:bb:1a:4c:76:6c:72:bb:34:
80:ab:bf:be:ac:c1:01:d1:52:39:f6:65:db:a8:2d:3c:c7:52:
e8:44:4a:2f:c4:64:9d:e0:05:4c:d7:56:42:dd:99:01:36:41:
51:25:26:f4:09:37:c9:32:44:6a:be:5a:b0:15:22:14:c7:7c:
fa:c8:29:fa:f5:dc:03:5f:4a:33:24:26:4c:6a:49:5d:d3:a2:
f8:63:dc:b1:50:7c:13:b2:7a:87:2f:c3:a7:fd:c8:01:5b:2a:
2b:41:6d:ae:de:da:5f:5b:fd:74:05:f5:44:27:56:47:57:21:
72:4b:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:24 2025 by rpki-client