Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa
File: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (raw, json)
Hash identifier: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=
Subject key identifier: 46:EB:3B:5F:DB:31:55:B4:6A:34:15:7B:62:4D:3A:4B:B1:72:A0:38
Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2
Certificate serial: 0337
Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa
Signing time: Tue 11 Mar 2025 01:17:38 +0000
ROA not before: Tue 11 Mar 2025 01:17:38 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 134599
IP address blocks: 103.179.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DA1D
Validity
Not Before: Mar 11 01:17:38 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67cf8f31-9475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:b4:34:b7:57:da:c5:21:3f:0a:9b:8b:85:
25:dd:09:56:f3:58:41:3b:ba:88:95:87:d9:66:37:
70:56:e4:85:12:55:d5:a4:8b:ff:98:c7:c8:e9:2f:
ef:ca:a5:eb:ff:96:d3:04:43:71:ac:6f:40:e3:f0:
67:cf:b8:08:ad:09:76:9a:5f:b6:64:4f:a0:a5:80:
c0:20:4f:93:bb:c8:a4:37:18:12:82:01:7e:44:7d:
e4:54:4c:b1:5d:7a:c0:52:35:b0:f0:aa:f0:59:10:
45:90:84:e9:e9:7d:d0:54:5a:78:5d:1e:1b:f1:b5:
d3:6a:5b:40:fb:67:15:9b:d1:1f:98:5d:ce:ce:2b:
8f:52:2e:c0:56:05:49:5e:db:95:2b:df:e5:11:a4:
e8:08:d2:7f:aa:36:59:52:69:33:05:8f:92:85:28:
69:36:84:9d:62:f7:7f:2a:35:33:3f:87:89:4d:c9:
2e:8c:11:11:50:ba:06:7d:33:53:ef:f6:d2:7c:1f:
69:9e:cf:a7:c3:70:d8:16:4f:63:c8:96:8b:2a:23:
1c:9e:8f:8c:cf:07:01:32:08:f4:dd:c1:34:b6:f4:
a8:52:4a:3a:ea:e7:f7:88:b2:db:d5:b2:5a:e1:ae:
6e:67:94:d3:26:19:e5:3d:5f:9e:d4:8e:cb:0e:39:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EB:3B:5F:DB:31:55:B4:6A:34:15:7B:62:4D:3A:4B:B1:72:A0:38
X509v3 Authority Key Identifier:
keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.58.0/24
Signature Algorithm: sha256WithRSAEncryption
11:14:b6:74:7e:6b:6f:e7:7d:7b:db:63:16:b1:29:dd:33:a6:
0d:8c:90:60:e6:5f:4f:2f:f6:e2:8b:c3:c9:e1:57:41:9e:e9:
61:2a:0a:0b:36:70:fe:ad:9d:ca:27:cb:1d:e8:6a:5c:0a:2c:
e5:f3:3d:cc:67:a1:f0:15:22:7f:22:f2:86:a7:36:1e:ac:14:
24:2c:0b:d8:96:ee:e9:d0:37:70:1b:17:65:89:d1:69:e1:26:
1c:23:d7:22:15:33:fa:bd:a2:e8:1f:f9:51:a2:e0:75:84:1f:
dc:f4:19:77:dd:91:25:e8:36:ae:b4:45:ef:5b:33:22:7a:a5:
55:69:1e:08:57:ad:eb:6f:6a:4d:79:88:f5:59:71:76:17:fd:
7d:d6:96:a3:95:8d:16:28:ed:95:54:cf:a8:5d:93:89:f5:5e:
c2:f1:0e:89:4d:95:3a:c6:f8:03:ca:8e:88:06:25:07:39:b3:
f1:b2:15:17:3f:a5:50:88:a7:14:af:c1:f1:43:72:31:4d:ac:
b3:0c:3b:51:7c:57:52:a5:62:e4:59:0d:66:38:41:b3:23:a9:
27:f6:4e:9c:b3:ad:a6:d4:9e:08:4e:97:0b:7a:a5:76:50:66:
62:d5:35:5a:0a:9e:07:b8:d5:a5:d3:77:58:17:8f:d4:c5:28:
c0:61:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:39:04 2025 by rpki-client