Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/2C4993AA271B11EF97731F0BC4F9AE02.roa
File: 2C4993AA271B11EF97731F0BC4F9AE02.roa (raw, json)
Hash identifier: 510AYYtfzA2GESknsDswoMnwkXlbF/avHNUhiFeIBXA=
Subject key identifier: D4:CB:41:A8:00:86:5F:67:3A:90:98:34:87:BB:F6:AD:79:A4:96:7A
Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial: 04E9
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/2C4993AA271B11EF97731F0BC4F9AE02.roa
Signing time: Sun 01 Dec 2024 00:03:12 +0000
ROA not before: Sun 01 Dec 2024 00:03:12 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 147018
IP address blocks: 103.173.6.0/24 maxlen: 24
103.173.7.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1257 (0x4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165362
Validity
Not Before: Dec 1 00:03:12 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=674ba7c0-85d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8c:b2:27:b8:d1:71:14:f3:fd:66:ee:d2:e8:
d3:5b:19:0d:5d:85:1c:a6:ff:03:fd:00:00:c0:a7:
d0:75:1f:5e:0b:e5:86:7f:c5:e9:a8:9a:b6:54:16:
40:d1:d0:d6:36:a4:9e:e5:63:57:b0:82:c7:d1:65:
92:c3:28:ff:ff:33:55:56:b8:06:b9:c9:67:dc:db:
5c:aa:04:c5:44:46:30:4f:7a:0f:e3:69:50:47:fe:
02:5b:ac:1e:1e:d3:96:bf:e9:5c:94:d7:f4:1a:80:
33:a5:24:48:52:0f:b5:45:18:55:28:55:61:5f:50:
5b:71:60:c8:fd:5a:50:ba:79:40:aa:ac:90:f1:9f:
bf:77:42:40:75:be:f9:87:c1:90:04:9f:7d:0e:98:
db:48:88:0a:c4:b0:16:46:95:dc:3b:cf:13:0c:aa:
68:12:ec:56:ef:28:b6:b7:16:0c:10:5b:21:f9:21:
d7:12:a9:66:dd:ed:79:c3:f5:49:cd:a5:61:26:22:
a9:59:0d:f4:5d:72:e8:3a:21:20:ad:9e:ac:a0:eb:
7a:a3:79:58:7e:94:1c:65:12:15:e9:bf:69:a7:4f:
12:c6:25:b4:80:76:b0:4a:0f:61:41:a4:4d:d1:1f:
7f:70:f4:d6:7e:3c:75:26:64:d0:41:46:c3:c1:0e:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:41:A8:00:86:5F:67:3A:90:98:34:87:BB:F6:AD:79:A4:96:7A
X509v3 Authority Key Identifier:
keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/2C4993AA271B11EF97731F0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.6.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:40:15:d4:7d:b7:26:ab:ec:4f:f1:5a:50:9b:43:ca:52:f4:
b7:71:e4:de:b9:17:f8:d2:e2:8b:e4:6e:26:a9:2f:02:d6:30:
b6:56:74:e7:40:15:1a:6e:31:22:35:43:ce:49:2a:fa:4e:94:
d7:a1:c9:f7:b1:5e:df:10:ed:79:da:3c:98:c2:4c:2b:0e:27:
24:e1:28:2b:c1:59:fd:ad:36:76:30:ae:05:3d:5c:8b:ad:16:
02:14:61:68:f8:16:05:8c:13:46:62:b5:5a:6c:30:2d:fc:8c:
0e:0f:82:8d:8b:0a:2a:33:62:5a:05:a2:e1:ac:77:36:21:8c:
a2:ba:86:eb:61:1d:b9:97:cc:bf:b0:94:da:5d:e9:62:a8:d7:
6a:41:99:f6:c2:ac:63:4e:f8:3e:c2:3e:f5:56:f4:24:22:99:
b4:9d:19:60:3e:8f:55:69:63:ca:b4:90:67:78:6d:f7:0a:e7:
51:d3:92:3c:6d:0e:bb:f3:90:e3:5d:74:02:9e:3d:df:50:18:
61:a4:eb:37:94:65:7f:1f:bd:69:81:57:9c:75:dc:78:aa:64:
8a:cd:60:e6:a4:0d:f3:8f:52:1c:3e:b6:70:1b:ef:95:b6:8b:
d7:e3:a5:a5:14:ee:f6:e5:e3:4c:ea:f9:62:9e:11:12:92:8f:
28:5b:92:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:16 2025 by rpki-client