Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/0DA17368C04611EF88E47357C4F9AE02.roa
File: 0DA17368C04611EF88E47357C4F9AE02.roa (raw, json)
Hash identifier: I/BJGM7p2pC/isjlezgIMmM4DcBeILkqp7Dz3CQKVuk=
Subject key identifier: 02:F9:CC:0F:A0:64:F4:43:D7:A1:8D:46:34:CC:44:9F:6B:E3:0F:59
Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial: 013E
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/0DA17368C04611EF88E47357C4F9AE02.roa
Signing time: Sun 22 Dec 2024 09:20:58 +0000
ROA not before: Sun 22 Dec 2024 09:20:58 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 131474
IP address blocks: 103.179.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Validity
Not Before: Dec 22 09:20:58 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6767d9fa-8023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:c9:0a:2f:e0:be:a2:d7:d1:c1:26:ce:68:
db:df:95:27:ff:d3:65:0e:c0:ca:43:b7:b1:31:f6:
37:47:10:43:7f:bf:d2:77:35:f2:e4:30:c0:70:8a:
9f:ab:12:a3:4c:bd:83:29:8e:19:04:e2:c8:b4:b0:
ea:20:c9:fe:bb:a3:18:4d:f0:30:50:7d:b1:5a:70:
74:c9:2c:d5:bf:2c:7a:2b:0d:b5:ff:23:2e:68:f1:
61:68:9c:ec:64:f4:08:81:6e:76:f2:d1:cf:23:3f:
73:22:43:38:ed:80:73:9f:31:51:75:e6:33:2d:79:
4b:80:02:e7:c3:b8:97:a0:fd:a3:d2:7e:1b:7a:b2:
6a:15:bb:8a:91:d2:c8:1a:eb:d9:46:c2:46:f1:1a:
da:6a:f5:1b:31:2b:2e:0e:5e:d1:70:b7:f8:fe:84:
d9:a9:f2:b2:32:a8:e4:cd:91:38:74:52:97:b6:4a:
c5:c5:82:e5:73:25:bc:3f:b9:12:36:ee:74:b8:dc:
2a:26:6b:7d:1e:88:c5:c4:6b:9d:7f:91:42:51:c5:
22:7e:38:e0:e9:68:ab:c8:d9:d2:d3:f6:49:86:b5:
86:7a:58:37:b2:29:30:ec:c8:b5:2e:b5:51:6e:f3:
b9:50:e8:4f:ff:f1:76:87:e2:77:11:1a:96:f4:17:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F9:CC:0F:A0:64:F4:43:D7:A1:8D:46:34:CC:44:9F:6B:E3:0F:59
X509v3 Authority Key Identifier:
keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/0DA17368C04611EF88E47357C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c8:db:be:49:13:9b:45:1e:7b:93:64:ca:8f:e0:a8:c1:7a:
8e:97:8e:03:5b:56:75:98:73:cf:7f:b0:2b:22:77:78:63:8a:
56:38:7f:27:8d:6c:e5:d4:32:48:f2:54:65:34:5c:69:54:5d:
6a:4d:db:02:45:82:15:95:f9:24:4d:d4:a7:a4:20:72:7f:ab:
34:30:60:e6:7f:16:5c:4d:14:c5:bc:c9:f9:37:69:c1:4a:ca:
1f:85:3a:3a:62:ac:a5:70:f0:3d:3a:d4:23:9b:e5:9e:43:b4:
56:ad:ab:62:ba:8f:6f:de:96:27:6e:af:be:d3:48:99:53:c2:
3d:5f:8f:20:1e:a6:a7:32:c2:8e:11:c1:6c:b1:de:5f:2b:9e:
3b:53:1a:05:bf:85:34:21:a9:0b:23:e1:96:c8:a8:19:f3:14:
ae:39:d1:35:c8:37:0f:42:db:43:b9:57:98:e8:0d:26:e7:ca:
87:57:54:8a:4b:e3:07:7b:e0:b6:0c:16:62:80:e5:0e:85:6b:
ff:a1:7d:06:03:88:7e:46:4f:26:c0:7b:04:fb:a2:59:72:76:
b3:65:ab:70:b3:0e:b9:97:b2:a5:d7:85:a6:5f:65:84:22:1d:
30:0f:1e:ee:a7:3f:80:a6:6c:a4:2d:a6:4f:ed:3f:b4:5b:d2:
a5:f5:dd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:29:43 2025 by rpki-client