Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/98281C68C74D11EFBDEB795AC4F9AE02.roa
File: 98281C68C74D11EFBDEB795AC4F9AE02.roa (raw, json)
Hash identifier: AIVNJI4ml2hm0sk+tjU7ezgPrM6ruoUwi1BLVLUi/kc=
Subject key identifier: 7A:56:7F:93:2C:B7:62:8A:2E:DE:92:52:9A:89:B9:7B:16:57:4D:9C
Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial: 11EB
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/98281C68C74D11EFBDEB795AC4F9AE02.roa
Signing time: Tue 31 Dec 2024 08:02:35 +0000
ROA not before: Tue 31 Dec 2024 08:02:35 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 24039
IP address blocks: 103.193.208.0/22 maxlen: 22
203.190.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4587 (0x11eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177358
Validity
Not Before: Dec 31 08:02:35 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6773a51b-b662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:43:22:85:ae:7c:a2:25:dd:97:cc:af:5f:
d6:e2:25:2e:d8:4c:7e:dd:01:2e:e5:6c:32:9d:7d:
1a:89:07:82:d5:40:8f:5f:f9:16:b1:a2:ec:b5:1c:
ed:04:c9:31:71:60:d8:99:07:52:20:21:fd:c2:fe:
3b:c9:fd:8b:69:73:95:0b:0c:6b:37:99:a7:40:c9:
41:d8:7e:6e:7f:64:e0:be:35:73:ac:31:ee:05:26:
1c:6a:ba:71:44:49:d0:3a:ab:a4:d4:c8:c8:b5:b5:
11:9a:90:94:1e:fc:82:39:d7:29:ce:a6:7a:74:a4:
d3:da:ef:52:9a:11:c7:57:4b:2e:ed:83:31:94:d4:
96:05:be:52:46:6b:66:da:77:e6:21:16:36:b5:19:
40:24:a2:ad:56:24:d9:8e:bd:b8:0d:3a:49:9a:ab:
4a:3c:7e:ef:7c:65:b6:4b:06:1f:26:80:e6:8d:d2:
b3:5f:0f:bb:d0:d5:5d:e5:f3:aa:a5:98:46:e9:2a:
a1:31:73:6f:74:db:2a:3b:eb:29:36:7d:b7:0e:c9:
5c:30:7f:da:8b:24:ba:31:0a:f3:08:a2:5a:d0:f7:
40:cc:33:8d:dc:56:84:e2:2b:65:53:d7:6f:d5:e9:
82:75:53:33:d2:21:2a:89:1b:26:c7:6f:aa:55:c5:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:56:7F:93:2C:B7:62:8A:2E:DE:92:52:9A:89:B9:7B:16:57:4D:9C
X509v3 Authority Key Identifier:
keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/98281C68C74D11EFBDEB795AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.193.208.0/22
203.190.223.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ae:59:15:da:09:e2:a3:13:9d:36:93:2a:d8:0a:73:d6:55:
78:d2:76:ab:73:db:f8:02:ce:6a:0e:03:7d:6c:32:23:99:74:
a0:a6:6c:27:0c:89:e9:45:42:f6:f3:0b:cb:f0:60:67:de:31:
f7:23:d5:99:ab:85:1a:38:1c:30:b4:eb:2a:6b:5c:16:f9:60:
88:ee:53:31:36:d6:83:64:6e:c5:87:5c:c3:76:0a:56:05:25:
3a:40:fe:fb:69:13:bb:5d:75:ad:fe:03:82:35:cb:91:98:cf:
ae:b4:64:3b:1c:c2:ee:88:ea:cc:33:ed:3e:46:9c:eb:f8:e8:
7b:41:42:ac:16:ee:46:15:58:9b:10:c7:aa:e8:ff:b2:34:70:
18:44:0b:9d:14:30:06:98:74:ad:e9:9c:44:e3:c8:18:63:9e:
61:4b:69:53:49:fc:ad:6f:1a:05:ad:59:f6:1c:8d:31:68:9f:
52:4d:5e:52:c2:77:e0:59:9c:38:77:cf:a9:c3:c1:ee:b1:ff:
96:3c:8d:28:35:39:28:2d:cb:96:b8:b4:75:b2:39:dc:26:8d:
6b:50:32:b7:c4:03:a9:34:7d:56:53:38:23:7d:13:1a:e7:50:
05:86:6c:dd:13:a9:19:85:11:8c:54:6a:2b:8d:f4:16:c6:ce:
dd:23:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:17:26 2025 by rpki-client