Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/5840D3AE30E911EC8F3D8E6EC4F9AE02.roa
File: 5840D3AE30E911EC8F3D8E6EC4F9AE02.roa (raw, json)
Hash identifier: 46i7EPIGOrfQaLwbS3xe4vXiC1w7dKRhyM0rmaMVYzY=
Subject key identifier: CC:08:00:92:F8:F5:C0:5E:0C:B7:66:AF:8D:73:EF:85:73:0B:CE:7A
Certificate issuer: /CN=A9180913/serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595
Certificate serial: 0387
Authority key identifier: 15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/5840D3AE30E911EC8F3D8E6EC4F9AE02.roa
Signing time: Fri 03 Nov 2023 02:14:06 +0000
ROA not before: Fri 03 Nov 2023 02:14:06 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 40065
IP address blocks: 103.174.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180913
Validity
Not Before: Nov 3 02:14:06 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6544576e-de5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:e6:5d:cb:00:1f:54:0b:cf:52:0f:20:fd:
66:05:c9:69:b6:ee:3f:5e:11:8a:09:19:9c:00:6e:
cf:23:98:ba:8d:37:e7:c4:c1:fa:19:aa:67:c2:ef:
49:71:e3:9c:59:0d:77:34:63:a1:07:9b:02:40:1d:
79:2e:15:cc:be:fc:c5:af:23:eb:0a:6c:0e:a3:07:
7e:ab:c3:e8:08:64:d3:93:84:23:a6:c1:81:ce:6f:
f6:6e:2c:e2:49:5e:1e:d8:28:45:d3:1a:14:03:bb:
3d:8f:26:ea:24:45:f2:92:ec:ee:3d:9a:e5:6b:da:
27:91:06:f6:29:91:ba:ba:81:7c:14:5c:84:e3:7e:
ab:45:ed:b6:6a:4b:d8:c0:d0:1d:29:87:5c:3c:c3:
a7:3d:46:3d:ef:ef:f2:c2:fa:70:4d:06:55:64:dc:
41:3e:fa:f6:6c:25:f3:26:1a:bd:e8:31:4f:96:af:
c8:53:03:3a:7a:c2:3e:3f:57:c5:50:9a:b6:a3:81:
1a:44:27:a2:ef:d9:9e:cd:94:e3:1a:3d:c5:ee:3d:
4a:11:f5:ca:19:21:dc:67:53:97:cf:0b:da:18:bd:
54:ab:4a:b1:c4:8f:ef:76:d8:2e:1a:d1:05:6c:0f:
5d:85:d4:2d:d2:e8:8c:97:8a:06:02:80:6e:45:0c:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:08:00:92:F8:F5:C0:5E:0C:B7:66:AF:8D:73:EF:85:73:0B:CE:7A
X509v3 Authority Key Identifier:
keyid:15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/5840D3AE30E911EC8F3D8E6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.136.0/23
Signature Algorithm: sha256WithRSAEncryption
80:74:25:c4:52:f6:79:36:4f:7e:50:dd:b8:2b:9e:0e:bc:8c:
db:f9:de:58:88:8f:7e:e2:73:0c:71:0e:6f:ff:d5:ec:5a:b2:
a3:a7:f8:1c:ac:3c:02:5e:eb:1f:6e:69:51:52:e6:eb:78:33:
58:5e:73:f0:2f:68:73:b7:5d:37:c0:55:86:eb:9a:c2:4f:cc:
f3:84:dd:7b:52:1e:c5:85:5b:0b:71:a3:68:d8:da:44:8a:ac:
c1:a8:ee:d9:18:47:27:95:8e:df:ad:89:31:21:28:16:7a:e2:
43:c1:35:9e:b5:8f:9e:19:8b:8c:e4:b7:34:b4:72:a0:2b:03:
be:4e:95:92:c7:be:d9:b6:5c:46:0e:59:a8:85:63:c8:d6:ac:
39:61:c1:53:3a:d2:4b:bd:01:2c:d8:1b:c5:bb:6b:7e:6d:93:
8d:3b:27:e1:db:ca:69:ea:02:77:6a:59:3a:10:71:f8:8d:d3:
05:6b:c1:93:07:24:66:4c:d2:3e:2f:3e:03:5b:c9:88:f8:17:
03:25:3f:44:56:e1:47:45:c5:83:95:2b:c9:7f:a2:88:fe:e8:
08:65:ea:f2:39:e7:12:97:ef:3e:2d:25:d8:16:89:bd:93:ed:
92:f4:e8:13:ba:0c:c3:15:bd:e1:82:ca:6c:df:65:44:d6:d7:
dd:f4:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:49:45 2025 by rpki-client