Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/78771A0C490D11EC8E4D1136C4F9AE02.roa
File: 78771A0C490D11EC8E4D1136C4F9AE02.roa (raw, json)
Hash identifier: SSW9TV8jZN6fvYq4gIStDsbEdDvovlOhUtObC7g07YA=
Subject key identifier: 7F:D2:2A:95:49:AE:72:86:1B:16:96:9F:CB:F1:B9:AD:CD:1D:0C:21
Certificate issuer: /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B
Certificate serial: 0424
Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/78771A0C490D11EC8E4D1136C4F9AE02.roa
Signing time: Thu 05 Dec 2024 00:03:31 +0000
ROA not before: Thu 05 Dec 2024 00:03:31 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 149017
IP address blocks: 103.176.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1060 (0x424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166292
Validity
Not Before: Dec 5 00:03:31 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6750edd2-b95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:1a:e0:84:28:b9:d9:4e:ec:98:1f:75:37:
8a:6d:93:c0:60:df:49:14:75:63:43:81:87:15:a0:
f6:15:e2:d5:fd:13:92:bc:31:ef:ce:f4:f1:fd:6e:
f2:02:16:8a:82:78:ac:9a:c2:29:10:34:f9:2c:e4:
da:15:cb:d5:ec:3c:6b:dc:0f:d5:75:93:34:49:b1:
65:01:80:ff:ab:3d:e3:04:8a:07:8d:e9:af:ce:29:
35:93:a7:d4:ea:cf:39:46:cb:3c:fe:ae:b0:80:a6:
e3:42:d8:d6:a5:80:0d:06:06:4b:6b:1b:45:96:a7:
2b:bf:4a:cc:bd:2b:43:69:d7:13:6a:b8:49:85:c7:
24:9a:2f:91:2d:c3:69:73:69:9d:60:dd:58:cf:cc:
17:1f:a7:17:22:ea:8a:21:e0:bf:26:c6:fc:c7:96:
35:53:39:f9:f0:c5:38:79:2d:09:f2:74:0d:5b:da:
d4:e3:34:6a:72:7f:42:75:f2:9c:be:d7:26:6e:88:
51:41:12:15:0a:e4:72:b0:30:a5:08:d7:83:ce:d4:
30:44:11:9d:81:a1:89:b5:b4:71:79:d1:c3:a6:3c:
13:46:6e:c8:c6:13:0e:03:81:b3:24:6c:fc:6c:cf:
af:cf:eb:cd:12:0a:bc:ed:5f:17:70:f7:94:eb:9c:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D2:2A:95:49:AE:72:86:1B:16:96:9F:CB:F1:B9:AD:CD:1D:0C:21
X509v3 Authority Key Identifier:
keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/78771A0C490D11EC8E4D1136C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e1:0d:f1:6c:ac:74:8c:35:ea:ed:39:9d:65:07:3a:02:4b:
07:25:60:b1:d7:0e:9a:36:ec:20:7f:24:55:a4:81:58:5e:3a:
2f:c6:82:f1:22:5a:d7:01:bc:89:5a:4a:a0:30:79:67:34:67:
06:ce:32:38:d2:9e:db:d1:f8:d4:6f:bc:bd:86:95:a9:6e:f6:
91:b9:da:09:e4:09:73:41:34:69:df:3b:98:4e:87:0e:bb:2e:
c2:47:cf:7f:f5:a6:d9:f5:e1:0c:26:fe:6f:01:ca:ab:35:d1:
99:84:58:4a:df:56:17:35:08:6c:a0:40:12:06:5f:68:f4:e9:
62:2b:5f:74:18:cf:db:d9:94:a8:ab:d9:c0:57:75:95:38:ca:
31:89:55:84:fd:a6:a1:1d:02:28:c6:8c:2b:eb:e6:bc:c0:30:
83:cf:9d:1a:62:a7:1f:ff:b3:37:7e:95:df:2e:34:99:2f:c8:
fd:de:1f:59:0d:24:9a:72:79:b6:26:3e:ff:b1:28:67:c9:38:
fb:a4:00:84:8e:dd:1c:62:95:8b:a0:60:99:f6:be:a9:f5:a2:
64:c2:c1:b6:2c:bf:7e:2b:45:3f:a5:73:3e:85:10:d2:2b:b0:
6e:f2:88:9e:fd:eb:bf:05:a0:84:85:90:ca:ec:44:8b:2c:38:
6c:02:3f:64
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYyOTIxMTAvBgNVBAUTKEE0RkIyMEM3MjQ5NzI2MkRDNDc3RjE0OTQzMDA4Rjkx
MDc3RTY1OUIwHhcNMjQxMjA1MDAwMzMxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUwZWRkMi1iOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZsa4IQoudlO7JgfdTeKbZPAYN9JFHVjQ4GHFaD2FeLV/ROSvDHvzvTx/W7y
AhaKgnismsIpEDT5LOTaFcvV7Dxr3A/VdZM0SbFlAYD/qz3jBIoHjemvzik1k6fU
6s85Rss8/q6wgKbjQtjWpYANBgZLaxtFlqcrv0rMvStDadcTarhJhcckmi+RLcNp
c2mdYN1Yz8wXH6cXIuqKIeC/Jsb8x5Y1Uzn58MU4eS0J8nQNW9rU4zRqcn9CdfKc
vtcmbohRQRIVCuRysDClCNeDztQwRBGdgaGJtbRxedHDpjwTRm7IxhMOA4GzJGz8
bM+vz+vNEgq87V8XcPeU65xgZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFH/SKpVJ
rnKGGxaWn8vxua3NHQwhMB8GA1UdIwQYMBaAFKT7IMcklyYtxHfxSUMAj5EHfmWb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI5Mi9BRUI1Njc1MDQ2
OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEppM0VkX0ZKUXdDUGtRZC1a
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BQc2d4eVNYSmkzRWRfRkpRd0NQa1FkLVpacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjYyOTIvQUVCNTY3NTA0NjhDMTFFQzhEN0JGMjY4QzRGOUFFMDIvNzg3NzFBMEM0
OTBEMTFFQzhFNEQxMTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnsHcwDQYJKoZIhvcNAQELBQADggEBAFzhDfFsrHSMNert
OZ1lBzoCSwclYLHXDpo27CB/JFWkgVheOi/GgvEiWtcBvIlaSqAweWc0ZwbOMjjS
ntvR+NRvvL2Glalu9pG52gnkCXNBNGnfO5hOhw67LsJHz3/1ptn14Qwm/m8Byqs1
0ZmEWErfVhc1CGygQBIGX2j06WIrX3QYz9vZlKir2cBXdZU4yjGJVYT9pqEdAijG
jCvr5rzAMIPPnRpipx//szd+ld8uNJkvyP3eH1kNJJpyebYmPv+xKGfJOPukAISO
3RxilYugYJn2vqn1omTCwbYsv34rRT+lcz6FENIrsG7yiJ79678FoISFkMrsRIss
OGwCP2Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:52:43 2025 by rpki-client