Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/6F51887283FA11EC9C033067C4F9AE02.roa
File: 6F51887283FA11EC9C033067C4F9AE02.roa (raw, json)
Hash identifier: XwBfTGBdHYip+l3Cww7cDDqUdig6aiSXjJ7XX34v/4M=
Subject key identifier: 4E:2D:E8:99:B1:F3:0D:D6:73:C4:3E:C7:36:AC:8A:0A:DF:76:83:93
Certificate issuer: /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
Certificate serial: 03A0
Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/6F51887283FA11EC9C033067C4F9AE02.roa
Signing time: Fri 31 Jan 2025 01:14:30 +0000
ROA not before: Fri 31 Jan 2025 01:14:30 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 10075
IP address blocks: 103.179.62.0/23 maxlen: 24
2400:4ba0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627F3
Validity
Not Before: Jan 31 01:14:30 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679c23f6-6f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:e4:e5:07:40:7a:bc:19:a5:e3:65:76:9f:
68:31:b3:cd:d4:36:78:53:95:43:b5:85:e0:32:bc:
1d:ad:08:8b:a5:10:7b:dd:5d:2b:5b:9b:16:f9:4e:
eb:8a:b9:dd:91:21:ae:2c:45:45:70:e3:42:64:ef:
00:c9:1f:e0:e9:fd:fd:bc:8f:5c:35:e7:c4:00:44:
a5:66:d9:c2:28:25:05:ad:8c:6a:13:9c:54:e0:af:
a4:a7:b5:68:4e:f0:bc:15:42:d5:00:e8:e1:e8:77:
27:2c:a9:a2:6d:5c:ff:2a:9f:7c:5d:cc:84:b6:35:
8c:90:97:82:ae:f3:4d:bb:92:81:0e:49:9b:c3:96:
a2:b2:d5:cd:ae:cc:bb:f4:ec:e2:2b:53:dd:ac:db:
01:72:34:e8:cf:23:54:54:5e:04:3c:2c:9a:7e:de:
16:ee:a7:e6:df:13:25:6f:6b:45:6f:51:c9:17:31:
87:67:90:ae:9c:39:ba:9c:c7:cd:89:28:6c:b1:93:
dd:2c:08:bf:26:14:71:6b:80:29:78:df:ed:66:f0:
1c:12:72:1d:32:be:ee:a4:17:21:d3:a5:62:a5:3f:
1d:bf:43:ab:d0:5e:9f:6c:0c:ef:5e:91:f8:5e:67:
3b:8e:47:8f:a5:e7:49:7c:dc:01:c9:a2:5b:8a:cd:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2D:E8:99:B1:F3:0D:D6:73:C4:3E:C7:36:AC:8A:0A:DF:76:83:93
X509v3 Authority Key Identifier:
keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/6F51887283FA11EC9C033067C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.62.0/23
IPv6:
2400:4ba0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:c0:c3:d6:50:13:c5:07:d9:d4:8c:79:cf:ee:f4:c4:20:9b:
38:07:d6:91:f0:58:c6:46:4a:04:98:55:21:69:63:0e:c9:75:
cc:b2:d1:c8:19:0d:06:b9:97:9f:7b:af:4d:5e:93:49:b5:c2:
3e:20:84:44:b8:d6:c6:1e:c0:ab:f9:0e:78:b2:89:51:e0:46:
9c:ff:a0:3e:db:f2:5e:22:ec:cb:bc:a1:36:84:ec:28:db:18:
9a:7b:04:fa:a5:e1:12:7b:b1:6d:4f:1a:43:e2:ed:7c:2b:c6:
27:c1:e5:dc:b5:9a:8e:39:f7:aa:e9:19:30:9c:7c:27:35:89:
df:e9:a4:37:7b:bd:0e:b3:7f:af:0b:0f:83:21:61:76:77:cb:
f7:b2:3b:62:75:62:e2:77:f9:47:72:76:45:83:ba:20:40:19:
07:6f:5b:cd:ce:93:bc:c6:b7:ea:f7:e1:b4:61:2d:12:01:0c:
56:0a:1f:a1:a2:60:c9:66:30:f9:65:2b:c1:32:7b:8a:c5:e8:
59:c2:2e:b6:f2:84:bf:d7:21:5e:96:a9:d7:88:97:58:84:00:
33:84:5d:79:06:eb:ab:1d:f4:a9:83:3c:e5:97:e3:d9:7e:85:
48:43:92:69:6d:1e:39:3f:b0:60:11:b8:12:fa:85:65:98:a9:
e0:32:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:34 2025 by rpki-client