Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa
File: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (raw, json)
Hash identifier: RyLNM9Y2xKP2/pPGOLqXFeZG9/xveuZYuPTjdQJUT2M=
Subject key identifier: B7:4C:6B:AD:94:4B:30:95:C9:60:4D:6D:7B:60:96:EE:D9:E1:10:B2
Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
Certificate serial: 0415
Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa
Signing time: Sat 11 Jan 2025 00:13:35 +0000
ROA not before: Sat 11 Jan 2025 00:13:35 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 149037
IP address blocks: 103.177.68.0/23 maxlen: 24
2400:3860::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1045 (0x415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143035
Validity
Not Before: Jan 11 00:13:35 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6781b7ae-43a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:50:56:17:31:dc:22:fa:75:dc:20:e6:22:
ff:9a:e9:80:2d:a8:07:ad:6a:57:2f:24:7d:ff:90:
b2:98:54:de:5a:13:bc:e3:e0:a0:dc:f3:7f:fa:f7:
8a:69:2a:b5:0f:bf:14:85:b7:05:5e:b4:94:88:2c:
68:29:4c:5f:d8:10:58:92:f7:34:b6:eb:67:db:98:
31:3c:ea:f4:6e:0a:3b:41:e4:db:9f:73:e1:b1:33:
89:29:a4:34:b2:80:23:8a:3f:e4:c9:d7:0f:69:cd:
71:93:7e:bb:fb:aa:fc:26:bd:26:90:8e:3d:36:75:
be:29:dc:aa:a9:11:f0:58:c7:bc:6c:1e:33:49:96:
19:f3:89:6b:bb:cd:62:be:1b:1f:7c:ef:55:6c:88:
60:c0:b9:ec:59:ce:4d:0f:80:1e:3b:15:0e:4c:80:
75:4e:30:dc:a8:bb:50:35:8d:de:85:1d:1e:10:80:
e3:1a:e0:51:f5:d8:24:3f:df:47:f0:1b:46:66:4d:
0a:78:ae:fe:12:f0:ec:58:a0:4a:9e:1d:c0:f1:08:
29:02:03:94:5b:3f:77:5f:a5:88:96:85:46:df:02:
a7:53:89:c0:e9:84:cb:60:21:62:2e:4c:cb:3f:3e:
aa:5f:f9:4a:0e:23:71:a5:be:9c:1d:51:58:d5:ab:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4C:6B:AD:94:4B:30:95:C9:60:4D:6D:7B:60:96:EE:D9:E1:10:B2
X509v3 Authority Key Identifier:
keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/6B47EC68529E11EC9C7C2081C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.68.0/23
IPv6:
2400:3860::/32
Signature Algorithm: sha256WithRSAEncryption
73:a2:ce:4d:40:3b:66:4a:e6:fb:ae:3d:f5:e7:58:4f:bf:d0:
b2:7f:4b:9d:54:75:01:7f:f9:4f:86:5f:3a:47:8f:7a:91:93:
d8:32:3e:1b:41:fe:10:07:2f:54:59:03:c6:e1:1f:6a:6c:d0:
70:50:97:ce:b7:d5:fc:0f:ce:09:cc:71:54:67:7e:57:05:95:
ab:9d:f1:28:20:b3:12:2c:c7:5d:62:72:f7:c5:10:c4:b6:92:
db:d4:d8:91:5a:12:b1:e9:66:79:26:38:7f:cc:8d:c1:c5:01:
46:f8:c0:00:41:83:ec:8e:f1:ac:4c:fd:f1:56:91:18:da:39:
6f:c7:12:2e:4a:fb:67:19:d1:39:a8:e5:c7:33:9c:1b:e1:5d:
a9:bc:78:34:23:34:be:60:60:74:1b:9f:c0:b7:86:a7:cc:72:
77:63:16:1f:3b:e9:3e:f4:e7:6c:fe:30:83:f1:d9:52:79:d6:
6f:9e:9a:e8:b4:89:16:7e:c8:0f:28:98:41:ee:4a:90:7b:b6:
dd:c0:67:fa:73:00:ca:36:21:fc:a6:df:c0:6c:f7:17:75:b3:
c7:1f:de:50:75:73:65:70:17:72:75:b1:0e:b4:23:09:8b:af:
ae:fa:91:23:f5:04:09:4b:73:b8:02:b3:2e:3b:0b:94:fc:b1:
20:97:7a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:24 2025 by rpki-client