Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/58FD7824C1CD11EF9FF6E05EC4F9AE02.roa
File: 58FD7824C1CD11EF9FF6E05EC4F9AE02.roa (raw, json)
Hash identifier: Ymz6d+uoC9hsYptWBLEo75Smcr9ZWWeqAfJRYOV/CrM=
Subject key identifier: 7F:42:38:AD:61:22:8F:08:79:11:21:0E:1D:A5:27:65:60:B2:F8:03
Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Certificate serial: 54
Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/58FD7824C1CD11EF9FF6E05EC4F9AE02.roa
Signing time: Wed 08 Jan 2025 04:19:11 +0000
ROA not before: Wed 08 Jan 2025 04:19:11 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 14618
IP address blocks: 103.78.222.0/24 maxlen: 24
103.78.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172A52
Validity
Not Before: Jan 8 04:19:11 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=677dfcbe-2f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:42:67:1e:9f:69:73:50:c7:cf:78:a2:ed:
cf:97:d3:03:ef:0f:34:dc:ac:c5:64:ce:1b:0b:dc:
04:b4:21:f5:a7:fc:e1:56:ae:89:bc:41:e7:47:80:
d6:64:63:0d:fe:0a:7a:08:3a:3f:5f:b3:c0:12:d1:
d0:ea:6d:a6:65:19:8f:59:65:d3:53:22:b6:11:75:
d1:ba:b2:dd:d8:fe:68:b7:42:c5:4a:17:6d:d6:7f:
bd:d0:0b:b6:9b:a3:87:8a:3f:81:8a:d3:c4:45:4d:
c6:b4:3a:1e:2d:b9:47:be:70:dd:42:68:eb:e2:7c:
2f:94:1c:30:86:38:f1:f4:a9:ac:b6:fb:35:31:bf:
1d:f5:9a:b3:27:d7:0b:2b:eb:3c:a2:fa:4a:1b:48:
10:b6:04:dc:66:cf:de:f2:9c:7b:02:96:c5:61:bb:
c0:26:09:aa:02:1f:d0:c2:38:04:bf:85:c5:7a:07:
44:8a:99:0a:aa:db:dd:69:bc:99:d1:8a:e0:05:d4:
f0:b7:63:17:7f:2f:9d:41:c8:e2:c9:f0:42:19:e3:
83:4b:16:b4:b5:5e:47:ff:2c:ce:54:23:1e:37:1f:
8f:a8:49:27:ae:58:bb:3b:24:1d:39:cc:28:ec:26:
93:a7:43:55:02:c9:70:d2:09:cb:7c:84:55:f9:8d:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:42:38:AD:61:22:8F:08:79:11:21:0E:1D:A5:27:65:60:B2:F8:03
X509v3 Authority Key Identifier:
keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/58FD7824C1CD11EF9FF6E05EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.222.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:73:9e:cf:aa:13:78:18:4a:bf:f0:00:9c:51:a3:28:b2:91:
54:ba:d0:b3:21:25:fc:f5:99:b9:3b:d4:4a:ee:be:77:48:06:
89:bb:c1:2d:19:d8:fe:a4:be:98:ed:5f:15:4a:c1:8d:f6:40:
7c:8b:96:a0:70:66:fb:cf:59:93:a8:c6:22:f7:f2:39:f9:dd:
92:c3:ce:59:51:11:e5:72:73:79:1e:98:47:01:26:2c:f7:fc:
ac:9b:21:22:1f:9e:83:05:5f:78:d7:40:d7:4f:62:88:23:f3:
a6:96:ef:2e:20:35:ce:ef:6e:ff:37:3a:98:23:1e:76:08:93:
dc:c8:71:0f:13:0f:7d:b2:3b:e6:10:8b:f6:ee:ad:a2:0a:14:
f1:17:3a:8f:67:46:7b:10:90:b9:e1:3b:6e:74:23:a4:da:a8:
1a:38:40:6d:3d:f9:5a:d0:77:e4:e7:45:70:09:8d:76:43:2f:
70:a5:42:ae:f6:ed:b4:b7:8f:cf:2e:af:86:e3:48:ae:ad:3b:
80:2b:54:b4:d9:08:a2:72:05:48:08:28:bd:53:03:66:b7:39:
be:29:a6:c0:f1:a5:3a:25:80:99:fc:31:e4:0f:55:5c:57:7c:
f3:5f:1a:3a:ea:df:86:0e:4e:f4:47:46:31:72:d3:a8:e6:ad:
91:2c:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:13 2025 by rpki-client