Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/4CA4BE8E667411EF8E723587C4F9AE02.roa
File: 4CA4BE8E667411EF8E723587C4F9AE02.roa (raw, json)
Hash identifier: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=
Subject key identifier: 8E:33:31:50:0E:31:09:05:9B:93:3B:13:C6:5C:DD:33:8A:15:5B:0C
Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Certificate serial: 46
Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/4CA4BE8E667411EF8E723587C4F9AE02.roa
Signing time: Tue 31 Dec 2024 05:59:57 +0000
ROA not before: Tue 31 Dec 2024 05:59:57 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 135898
IP address blocks: 103.79.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170DD8
Validity
Not Before: Dec 31 05:59:57 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6773885d-96b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:17:11:cb:b1:52:fa:af:e7:ab:c7:a9:aa:
4d:a8:22:2d:bc:bd:68:61:d1:94:5e:84:0c:e3:20:
a9:7e:7d:37:f5:2e:b8:40:d0:ec:8a:2e:bc:1f:13:
c1:8d:cc:ab:ef:d6:1f:8f:dd:29:ff:25:c0:bf:57:
05:fb:96:3c:f6:45:bb:b1:0d:a0:bb:3f:bf:f0:e8:
ad:db:f6:d9:15:d5:62:e9:57:60:85:16:8e:a6:04:
d5:e3:b8:26:45:dc:ea:5d:b1:5b:9d:2b:74:85:35:
e6:b2:72:3d:1a:c0:3f:b6:d9:22:00:90:59:7a:90:
f7:b6:b5:44:b1:4f:23:18:c4:8a:2d:86:e6:bf:8d:
e1:4c:b9:c8:06:fd:ca:ff:1f:a7:cf:28:45:48:5f:
f2:7c:a0:38:4f:3e:46:45:c9:c7:a1:31:80:b0:b5:
9f:d7:15:c6:1c:ef:09:b4:15:62:38:8a:79:74:7f:
14:ef:89:9e:64:e2:87:e6:f0:49:0b:f0:52:d5:fe:
8d:74:31:e9:ec:48:a7:c4:97:d8:83:0d:e4:bb:da:
dc:4a:e6:69:f7:cd:65:88:86:d9:ab:23:9f:c5:ad:
6e:8b:20:14:ad:ef:a5:6e:87:ce:27:2f:0d:64:3d:
7c:22:81:47:88:9d:63:42:06:a1:ce:83:ba:3b:26:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:31:50:0E:31:09:05:9B:93:3B:13:C6:5C:DD:33:8A:15:5B:0C
X509v3 Authority Key Identifier:
keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/4CA4BE8E667411EF8E723587C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.88.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:da:ba:c4:ec:7c:af:bc:a2:45:05:8b:da:64:65:2e:09:48:
2b:12:4a:54:92:8c:b2:a5:f1:b2:c9:e9:6e:14:73:05:bd:9a:
59:6b:66:e3:d5:e0:8c:fd:18:60:49:49:ac:ff:8f:4d:07:f3:
f0:b2:39:d9:f6:2a:1c:5a:bd:18:fe:61:27:41:42:54:a6:5e:
00:fb:e0:ed:9a:85:33:2e:92:03:3e:37:5b:ee:15:da:bf:7d:
7a:b8:9b:62:0d:90:db:55:94:fe:4f:6a:78:4f:28:cf:ec:d6:
3e:8d:be:3d:f1:47:97:d1:7c:19:f8:48:06:d2:ee:20:ae:6a:
a2:77:3d:69:83:37:4c:7a:95:20:f1:9e:82:8e:77:91:a4:e6:
f9:2c:cb:d3:42:cb:e9:63:c7:75:f0:63:b6:a8:14:6c:42:cf:
21:00:d5:62:0b:df:f3:2b:90:a0:44:2b:35:7c:83:4b:13:0b:
e3:e0:7a:a2:04:ca:69:d2:c8:f4:22:11:bf:e8:d0:2f:13:99:
95:6d:25:47:fc:91:ea:a7:7a:27:82:bc:4f:c0:93:ea:24:46:
a4:4b:db:24:6b:45:1d:ac:4d:50:5a:cf:44:ed:97:9f:e1:bd:
b3:7c:a6:bf:c5:98:65:28:e9:6d:83:43:1d:e2:69:2f:67:4a:
0c:67:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:54 2025 by rpki-client