Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa
File: 819150603F3411EF85BAC749C4F9AE02.roa (raw, json)
Hash identifier: W4tDaOtoueXLJGV231Xq5px334ORbAFdGWpLgfvtl8E=
Subject key identifier: 4C:0A:E0:7F:C3:69:3F:79:93:0C:C5:A2:93:77:D6:5F:C0:2A:B3:44
Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Certificate serial: 03C9
Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa
Signing time: Thu 13 Feb 2025 02:14:11 +0000
ROA not before: Thu 13 Feb 2025 02:14:11 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 149483
IP address blocks: 103.180.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 969 (0x3c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168126
Validity
Not Before: Feb 13 02:14:11 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67ad5573-5dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:e1:cf:aa:bb:2c:bc:f5:f7:5d:53:12:5b:
1a:54:45:c9:7c:01:65:c6:c2:fb:63:c3:88:9b:5d:
7e:25:f6:79:47:f3:ef:a2:43:1c:27:87:f2:85:db:
01:f1:da:3d:5a:83:c2:26:66:02:12:44:b7:6e:8d:
41:61:c1:64:f4:9b:78:36:d2:9c:2e:f1:b6:ad:44:
29:9b:35:1a:10:a9:ba:98:10:63:f4:63:75:5d:dd:
d8:ca:7e:c0:9e:02:ad:e7:dd:8d:68:8f:5f:9f:b6:
91:d4:7e:4b:e6:00:68:00:49:82:e7:8b:98:2e:cf:
a3:3d:e2:71:0a:c5:4b:79:d2:3e:7e:94:e9:2a:fa:
f7:35:62:53:ca:fd:ef:c3:04:59:f1:87:42:ed:5f:
83:65:94:06:92:3b:58:e4:67:6e:77:3d:d0:cb:5a:
9a:d5:4f:d8:b2:cb:16:6e:c5:ec:ea:0a:1e:f3:cb:
5e:c1:cf:cf:a1:39:76:ca:00:07:70:ac:9c:cd:03:
9c:f7:7b:12:82:b5:75:06:c2:59:d8:36:b1:46:bc:
6d:a1:ba:4b:e2:ce:f7:12:8d:7d:f2:71:79:15:e5:
5a:bf:1d:b5:93:b0:92:a8:f0:e6:50:fd:f5:79:0a:
09:9b:ca:c0:7f:24:d9:db:36:c6:c0:f8:8f:c2:65:
3d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0A:E0:7F:C3:69:3F:79:93:0C:C5:A2:93:77:D6:5F:C0:2A:B3:44
X509v3 Authority Key Identifier:
keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/819150603F3411EF85BAC749C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.203.0/24
Signature Algorithm: sha256WithRSAEncryption
81:61:e9:5f:f0:a3:90:78:27:aa:f5:eb:92:ad:bb:2a:49:36:
6b:c7:b9:6a:9a:7a:c5:43:d0:b5:82:a3:b9:88:62:c1:81:70:
48:4d:bc:c9:f0:2b:c8:77:cd:61:4d:06:2f:4c:a5:f2:90:64:
71:d6:e8:be:d1:e1:5e:95:5a:42:fb:23:0f:e2:b2:df:fe:3a:
83:81:73:91:1b:74:3d:d1:96:12:93:18:e0:40:6a:d0:19:85:
7d:d9:f6:57:62:87:85:40:18:b2:6a:bc:58:36:4d:39:39:b2:
09:de:ff:e2:a3:2e:21:66:f0:e6:28:9b:ff:9d:88:ca:c6:7e:
be:25:1c:42:16:57:3e:60:0b:e7:3f:81:9f:b4:5c:2c:33:9d:
29:70:0c:cc:e9:37:b7:e0:81:c0:57:16:a9:1a:db:47:3b:ef:
2d:d1:4e:28:85:e6:49:77:79:b8:36:13:5a:4a:45:fb:e1:e0:
a0:1f:91:86:de:3f:92:d6:e7:d8:d0:8a:0d:e8:40:2c:0e:e8:
e6:3b:af:6a:99:b0:ad:21:0c:f5:1c:0c:f4:ab:fd:fd:d9:f5:
e7:95:e3:63:1a:09:ac:77:c9:8d:30:ad:6d:f2:1a:73:3a:23:
17:ec:0e:af:ab:7b:29:b1:a0:ad:11:b6:52:0d:c5:64:dc:be:
33:94:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:17 2025 by rpki-client