Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/B78B5CB6D65F11EA8B30486EC4F9AE02.roa
File: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (raw, json)
Hash identifier: MyNq7pYsfXRPiYwbL0q3/Dn2sx3QYfe2KkNfFn5PXS8=
Subject key identifier: B3:F9:02:8A:BC:B9:19:C7:32:7B:2D:FF:37:E8:7D:E9:63:08:FB:3B
Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E
Certificate serial: 07F6
Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/B78B5CB6D65F11EA8B30486EC4F9AE02.roa
Signing time: Thu 30 Jan 2025 21:10:17 +0000
ROA not before: Thu 30 Jan 2025 21:10:17 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 134737
IP address blocks: 103.149.8.0/24 maxlen: 24
103.149.9.0/24 maxlen: 24
2001:df4:6580::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F8F2
Validity
Not Before: Jan 30 21:10:17 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679beab9-41ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:bd:be:38:b7:1f:2f:37:e1:53:ed:4a:ae:
07:62:7a:de:8c:e6:4f:fe:35:ab:5f:e3:f8:f0:bf:
f0:f1:77:30:c9:c1:a2:df:13:78:b7:0e:64:05:f2:
b4:6c:07:5e:c1:71:0c:1f:c3:06:ee:ea:ef:94:f6:
f1:5c:43:86:d7:73:11:14:2a:13:99:05:5e:63:e8:
61:b1:a8:a6:b3:bf:27:28:0a:a5:71:e7:34:9b:0a:
0f:ec:cb:34:bf:1b:81:04:56:f3:67:8b:e8:4d:d7:
d5:83:bb:8d:d7:a3:70:b6:ad:7e:71:1e:b1:61:7f:
0d:c8:8f:08:89:d1:c4:7b:31:c1:f4:ee:a2:fb:5d:
fc:10:44:0e:45:2b:2a:36:70:c3:b8:a9:ca:d8:40:
01:53:9d:8a:8b:70:a2:54:08:6a:c5:0b:e4:ed:f6:
f5:66:ee:71:7f:b5:89:1a:e0:52:51:ca:7a:d4:c2:
a7:c2:5e:7e:82:52:57:ec:f3:6c:2e:3f:fb:f3:78:
57:f0:9e:01:cc:eb:2e:60:e1:ce:29:e8:fe:c4:07:
fd:84:c8:62:e6:7d:d6:f6:71:a2:d4:e0:06:ee:75:
6a:27:08:6e:a1:25:bf:0f:7e:b9:93:90:fb:27:fc:
fd:f6:c5:62:46:3b:9f:db:a8:42:db:a2:91:a8:92:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F9:02:8A:BC:B9:19:C7:32:7B:2D:FF:37:E8:7D:E9:63:08:FB:3B
X509v3 Authority Key Identifier:
keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/B78B5CB6D65F11EA8B30486EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.8.0/23
IPv6:
2001:df4:6580::/48
Signature Algorithm: sha256WithRSAEncryption
5e:d1:6c:a2:05:78:1c:42:d0:43:bd:23:2c:b8:40:e6:86:70:
7f:15:00:b4:b6:99:3c:51:96:c1:27:aa:86:b5:78:40:99:18:
de:7f:e9:77:5d:2c:2c:e3:0c:a5:3a:6e:d3:ea:46:b1:75:6c:
08:df:d7:f2:b5:95:1f:25:06:de:69:1a:e1:f6:af:c9:ae:5b:
60:48:06:d3:8f:99:f9:a4:92:8d:18:de:1e:c7:16:b4:d3:2a:
86:34:7b:e5:78:dc:49:c0:0c:a7:52:5e:5c:19:f0:1c:de:ef:
59:7d:fe:8a:f4:3d:40:32:18:95:90:76:72:b8:9f:8f:83:ab:
e2:72:45:55:60:91:5b:25:63:1f:96:8a:d0:bc:21:a4:6a:89:
4b:e5:9b:ad:31:62:51:33:c3:f4:79:a6:0e:09:25:66:ad:b9:
a5:67:4d:d8:a2:40:bc:1d:75:a2:1f:f7:91:ff:7c:ad:08:6a:
3a:e2:53:1b:04:30:1e:4b:8e:4c:0e:2d:af:58:83:98:96:a9:
74:98:3c:3e:68:71:65:ff:89:18:87:01:ed:4e:a3:0f:92:ea:
7e:1f:97:19:0e:a9:7f:6b:52:6e:04:f0:48:22:68:64:b8:32:
03:cd:ef:b3:64:9b:e0:88:8e:a2:cc:b2:d8:7e:5e:68:8a:08:
26:be:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:52:09 2025 by rpki-client