Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/5DB5AFEE635C11ECB7C65C23C4F9AE02.roa
File: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (raw, json)
Hash identifier: ZASmtlmvUHGE1HGhcQSQsz+Y4m88fTiUKIlWzdcPUk4=
Subject key identifier: 10:74:EC:32:CA:DA:5C:FB:26:BE:1F:5C:15:FD:0F:CD:DC:F4:2E:33
Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4
Certificate serial: 03E3
Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/5DB5AFEE635C11ECB7C65C23C4F9AE02.roa
Signing time: Fri 03 Jan 2025 00:24:02 +0000
ROA not before: Fri 03 Jan 2025 00:24:02 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 149303
IP address blocks: 103.178.70.0/23 maxlen: 23
103.178.70.0/24 maxlen: 24
103.178.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4
Validity
Not Before: Jan 3 00:24:02 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67772e21-d1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:55:2e:e5:7f:28:46:4d:f5:af:b4:e7:0d:b5:
3f:3f:c5:f3:e5:dd:b9:88:7f:e3:a2:eb:31:d3:6e:
b0:3b:da:65:3b:13:ca:3c:f0:d2:be:2d:e1:d1:6a:
57:05:fe:0e:93:e1:4a:59:ce:d1:5d:6e:93:4b:d0:
9e:2a:c2:97:4d:c2:d7:03:3e:07:43:a8:db:9a:a7:
b8:cc:89:80:e2:99:90:e8:01:ff:5b:4e:6c:a5:1b:
7b:3f:27:c7:d0:2e:7e:5f:74:02:37:52:cd:7e:25:
86:fe:b8:f3:61:38:81:26:4f:57:8b:ec:9d:2b:5e:
3d:80:f7:d4:58:91:f4:ac:7f:4e:5b:25:27:ff:e1:
45:12:ec:b1:81:84:dd:19:37:66:41:1f:77:44:64:
71:9f:6d:48:07:02:0e:44:89:4d:12:b8:76:d6:0b:
78:c8:55:cf:ce:d1:07:27:11:8d:15:89:3d:a4:ec:
ec:db:64:5c:dd:0e:75:90:60:b6:b4:41:e9:7c:84:
87:5c:25:f6:1d:ba:e3:9b:57:5c:92:29:28:09:73:
02:a6:4d:5b:7b:62:c8:80:9f:03:7f:ea:5f:2e:22:
44:ba:84:e2:64:40:ff:39:26:12:40:76:bc:2f:2b:
07:26:4a:8f:92:43:13:12:8f:40:39:9b:b9:7b:ea:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:EC:32:CA:DA:5C:FB:26:BE:1F:5C:15:FD:0F:CD:DC:F4:2E:33
X509v3 Authority Key Identifier:
keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/5DB5AFEE635C11ECB7C65C23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.70.0/23
Signature Algorithm: sha256WithRSAEncryption
58:5c:b8:9c:64:17:84:aa:c9:da:a5:b1:6f:ec:d4:47:e4:21:
4b:47:3d:ba:af:8e:5d:ec:17:4a:3d:e8:bb:58:49:e8:21:58:
2b:db:cc:bf:93:11:41:f7:7d:8e:4f:38:c2:d8:4e:04:65:4c:
b6:f9:27:2d:80:95:71:d6:c1:dd:4a:12:48:1c:ad:b7:fd:ad:
cf:f0:63:f0:5e:bf:d4:5c:21:71:c6:0e:44:62:49:7f:ae:99:
30:f4:fe:2e:ba:74:b8:74:88:27:fd:2e:4b:de:ff:90:79:4d:
54:11:99:c0:0a:76:a9:51:0d:3c:91:a0:c9:79:a7:59:4c:5c:
4b:61:52:11:63:2c:35:42:a6:2e:9e:b1:18:f6:b1:7e:7b:d5:
80:f1:88:94:38:a8:42:54:10:9d:9f:f4:52:df:7e:06:a6:c6:
77:88:3c:fc:0f:26:39:1d:37:b9:05:67:b0:b2:4c:89:01:91:
3b:f2:b0:7b:f6:8e:bc:10:d3:d0:d8:d0:bb:05:36:09:a2:b1:
48:eb:39:ff:36:1c:b9:d4:dd:ae:06:d5:28:64:0f:7e:e4:20:
cb:c8:b7:51:3d:cf:19:2c:7f:6c:09:60:f7:09:67:a7:1b:42:
51:f6:32:51:d5:b7:0b:44:69:bf:42:0f:f1:23:15:05:be:f2:
af:52:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:55 2025 by rpki-client