Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/C6DFC60A5B9B11EFA48FE643C4F9AE02.roa
File: C6DFC60A5B9B11EFA48FE643C4F9AE02.roa (raw, json)
Hash identifier: PcUbeq2GL9ETBRd6OiM02vny8hMoCCAWI9K7b/wI5lE=
Subject key identifier: B1:16:42:16:88:03:B4:5B:63:F5:3D:B8:89:40:E7:17:18:8E:8B:DF
Certificate issuer: /CN=A9177772/serialNumber=98E1E9B043E68D3769E9A68DB1C26D715108F787
Certificate serial: 55
Authority key identifier: 98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/C6DFC60A5B9B11EFA48FE643C4F9AE02.roa
Signing time: Sun 19 Jan 2025 05:28:16 +0000
ROA not before: Sun 19 Jan 2025 05:28:16 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.204.108.0/22 maxlen: 22
202.160.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177772
Validity
Not Before: Jan 19 05:28:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=678c8d6f-76e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:ed:13:3b:8f:67:a7:98:22:a2:ec:6e:2f:
b5:e7:c6:3c:c5:8a:da:93:1f:9f:f2:f4:e5:f8:59:
48:13:df:12:0c:e4:02:7c:ef:b9:a1:da:09:74:1e:
e7:6c:03:1c:c3:35:c8:e0:27:7d:3f:ba:c4:81:0e:
ac:c3:67:77:3b:bb:8c:68:c9:f0:e5:b5:08:0c:63:
57:91:98:4a:c5:13:20:40:39:fb:89:0e:78:4d:9a:
22:a7:5f:0a:9a:c3:03:d7:16:2a:42:cf:b6:a2:2c:
a9:1d:72:78:45:ed:6d:b6:c1:d3:f5:f9:87:0f:91:
81:21:5c:20:b5:61:d0:10:ff:ae:aa:42:ed:0f:35:
01:ea:a3:0e:14:15:b3:68:c1:9f:c9:75:76:fb:b7:
3e:15:e7:3d:a3:35:f0:1e:2d:35:97:6a:71:53:0b:
7b:b0:6f:8e:b1:b6:33:53:9b:e9:0a:d8:31:1a:63:
d3:9c:c5:b9:7f:00:a3:b3:43:64:cb:f2:f7:30:92:
a7:c1:1d:7b:a6:1c:89:6e:37:87:f3:1d:6d:5d:5a:
74:b2:d0:14:1f:55:a9:e4:ab:ca:04:80:5b:a3:80:
d3:24:ed:75:14:40:0c:85:6d:3b:78:c1:41:2e:05:
6c:e8:37:67:7e:69:d3:1d:ec:10:d6:08:a3:fd:05:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:16:42:16:88:03:B4:5B:63:F5:3D:B8:89:40:E7:17:18:8E:8B:DF
X509v3 Authority Key Identifier:
keyid:98:E1:E9:B0:43:E6:8D:37:69:E9:A6:8D:B1:C2:6D:71:51:08:F7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/mOHpsEPmjTdp6aaNscJtcVEI94c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHpsEPmjTdp6aaNscJtcVEI94c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177772/91FF0D925B9B11EF9CC45743C4F9AE02/C6DFC60A5B9B11EFA48FE643C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.108.0/22
202.160.152.0/22
Signature Algorithm: sha256WithRSAEncryption
44:ae:84:00:ec:d2:14:e8:f3:82:ad:12:91:dc:5e:65:0b:b1:
7d:47:05:54:5d:37:07:6d:3f:a6:46:96:cd:81:88:20:e3:ec:
15:d4:97:9a:e0:75:fe:9c:fc:0b:58:d0:31:35:e5:ad:1f:f0:
ad:15:ec:0e:e9:4e:41:a1:23:c4:79:1c:c9:60:9e:a2:d6:91:
0f:dc:34:30:e9:22:24:cd:b7:59:28:5e:21:f9:71:e8:01:4b:
df:2f:36:43:c4:56:01:c7:ef:85:af:ba:e7:b7:3b:a1:5a:1e:
1c:d4:c8:75:7c:22:64:3c:8c:bf:e4:c5:a6:90:19:52:45:5f:
25:71:40:56:4a:91:12:47:7a:af:f0:45:1e:04:64:59:7e:51:
17:d6:b3:80:ca:91:4b:17:c0:12:91:98:16:26:04:aa:9f:09:
37:67:ba:e4:71:46:39:2e:b0:fd:8e:08:38:08:f7:bc:f9:29:
3e:a8:14:50:98:fd:0a:6d:73:4b:1c:3d:9f:a4:64:a9:fa:68:
40:4c:2d:62:d9:de:b6:30:98:b3:40:f3:22:78:1a:9e:32:a7:
8b:00:c1:9c:06:e6:a3:79:1a:2e:4c:08:85:76:8f:63:80:56:
fd:b0:df:3c:e1:97:97:f5:3d:b7:dc:3e:da:c4:de:f2:68:de:
56:84:35:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:48:16 2025 by rpki-client