Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/46BFB17C739711ECAD333D27C4F9AE02.roa
File: 46BFB17C739711ECAD333D27C4F9AE02.roa (raw, json)
Hash identifier: 6m2q3lRXLAFrPlHDZxzNnpenf3mKGBo+gMVhi6EnOZk=
Subject key identifier: F0:D9:79:4A:BF:31:DB:1C:9F:09:DD:C5:4C:7E:96:A9:81:A2:36:44
Certificate issuer: /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
Certificate serial: 03DD
Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/46BFB17C739711ECAD333D27C4F9AE02.roa
Signing time: Mon 03 Mar 2025 02:26:07 +0000
ROA not before: Mon 03 Mar 2025 02:26:07 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 149432
IP address blocks: 103.179.112.0/24 maxlen: 24
103.179.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 989 (0x3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91309C9
Validity
Not Before: Mar 3 02:26:07 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c5133f-6ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cd:2d:fb:3c:ab:89:32:ff:f9:87:db:73:34:
93:47:c2:7f:36:49:a4:90:a6:11:6f:cf:cc:63:8f:
d3:2d:e1:e7:37:12:5c:48:9f:84:41:f3:5a:99:08:
d8:d5:41:82:43:76:a0:3e:61:bb:4f:2f:3c:6b:08:
9b:9e:ae:a1:34:6d:b5:52:0c:44:89:10:2c:53:0b:
78:5e:64:ab:35:07:aa:af:cf:85:92:e6:b3:0b:0f:
5e:36:95:6c:33:4e:9f:95:e6:a9:4c:d0:0d:4d:16:
f1:57:f3:ec:f6:32:9f:15:f3:5b:c4:e3:df:ac:e0:
10:ff:81:99:eb:b6:45:8e:f6:cd:30:34:c6:5f:ad:
5c:47:82:da:de:b2:c8:36:45:bf:8b:97:82:98:f7:
f2:d0:98:8b:92:69:7f:b8:9b:9e:87:80:46:9a:05:
c9:db:2c:af:5f:af:b7:0f:9a:8d:41:fa:fd:50:94:
52:b6:fe:5b:5b:a4:4c:14:e4:55:a0:7a:54:5e:1f:
28:6e:85:ff:af:b5:8b:91:e4:69:cc:9f:68:e5:8f:
c2:84:49:3d:91:6e:9d:94:e3:85:25:ed:4e:5a:63:
09:eb:b6:38:9b:6d:e3:8c:6c:63:69:89:70:44:61:
06:17:3a:47:8e:8e:07:87:7a:ed:b5:6e:81:c8:64:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D9:79:4A:BF:31:DB:1C:9F:09:DD:C5:4C:7E:96:A9:81:A2:36:44
X509v3 Authority Key Identifier:
keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/46BFB17C739711ECAD333D27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.112.0/24
103.179.201.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5b:72:ee:f2:c3:e1:4b:6d:93:2b:58:49:16:94:b6:5a:7a:
6e:19:a4:9b:77:d8:91:c9:66:47:1e:67:87:b9:5f:78:3c:36:
f3:8f:af:b1:06:57:e7:13:98:17:5b:e4:af:e7:61:f1:3d:78:
07:b2:c3:37:ec:76:fc:70:32:84:46:2f:ba:91:28:3f:61:da:
5a:fd:c6:0f:6e:4d:27:59:ef:98:70:af:e2:0d:ed:58:3f:ff:
8f:54:06:85:0d:57:cc:26:9c:d2:69:df:9d:2e:cf:64:25:73:
e9:7c:a4:21:3a:53:17:bf:ae:ca:e8:a3:ec:2e:cc:5c:54:3d:
43:c8:91:00:54:e7:d6:dc:2a:e1:46:f4:ca:49:d5:b5:9e:4d:
26:f6:da:cb:b3:d9:3f:c3:e5:a8:cb:7e:63:e0:9a:e3:a8:bf:
f2:e4:09:e6:9d:f8:49:f5:64:b0:f7:a0:a8:39:5d:14:ba:cf:
b5:5d:d2:6a:5d:e4:a6:38:b6:57:cd:85:54:e0:54:0b:3d:c7:
16:73:bc:9b:38:3e:5b:6f:24:82:04:1a:54:1b:9f:7c:a7:18:
0d:8a:20:61:26:4e:8d:f7:02:21:9c:ef:46:00:8d:4b:e9:3a:
18:b0:04:b1:b4:08:df:c5:0c:a2:b5:49:86:58:ed:a7:1b:25:
85:34:a4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:25 2025 by rpki-client