Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/BBE12BE88ACD11EF997F2066C4F9AE02.roa
File: BBE12BE88ACD11EF997F2066C4F9AE02.roa (raw, json)
Hash identifier: 68zEBxGXfrQ8sdNOFVU2ZHoivHL+1LfOSFnEvIXLiQY=
Subject key identifier: 2A:40:53:92:FC:39:9D:B0:01:52:9C:17:81:FB:35:21:65:53:B2:F3
Certificate issuer: /CN=A9180913/serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595
Certificate serial: 047D
Authority key identifier: 15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/BBE12BE88ACD11EF997F2066C4F9AE02.roa
Signing time: Wed 08 Jan 2025 23:43:43 +0000
ROA not before: Wed 08 Jan 2025 23:43:43 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 147296
IP address blocks: 103.174.136.0/23 maxlen: 23
103.174.136.0/24 maxlen: 24
103.174.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180913
Validity
Not Before: Jan 8 23:43:43 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=677f0daf-f678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4c:b7:9f:04:77:1f:18:77:74:38:28:1a:3f:
d7:41:d2:fb:b7:90:62:cc:9a:69:1d:2b:01:71:b1:
b4:24:51:41:f2:0e:f8:51:04:1b:e0:d1:bc:36:d9:
a1:d0:9e:cc:cc:10:61:cd:07:2f:8e:83:2b:4a:7d:
f0:13:6f:02:6b:f8:fb:d3:78:6b:e2:0f:7a:f6:e0:
c7:ad:59:31:91:24:4d:9f:2a:71:cd:cc:7d:5b:38:
28:14:3b:54:14:c4:36:2c:57:77:e4:fb:f0:32:16:
15:1e:14:92:cb:2f:f5:7f:51:76:12:37:fb:86:ff:
eb:50:0b:e4:23:9a:29:1b:02:78:a1:07:cc:80:82:
7d:04:88:17:fa:3e:e8:11:a0:06:fe:6f:21:a2:28:
02:32:31:a0:61:08:0e:3e:ff:4e:a5:8c:51:bf:c1:
f7:cd:2c:16:c8:47:0d:5a:b1:22:62:3d:1c:e0:3a:
14:f0:c8:02:9e:70:e4:54:be:44:41:f4:39:1d:80:
de:b2:03:8b:d7:8d:a1:ec:1a:44:74:08:90:5d:f6:
e3:df:a0:bc:ec:18:4c:60:6d:7d:1f:b2:df:34:d2:
38:81:1b:8b:2e:0b:15:17:87:f3:d6:bd:75:9d:66:
11:b8:28:3f:20:dd:bc:b6:a6:1b:d8:7c:50:47:0d:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:40:53:92:FC:39:9D:B0:01:52:9C:17:81:FB:35:21:65:53:B2:F3
X509v3 Authority Key Identifier:
keyid:15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/BBE12BE88ACD11EF997F2066C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.136.0/23
Signature Algorithm: sha256WithRSAEncryption
64:06:88:ac:ca:81:41:a1:d2:ee:08:84:4c:c2:2c:54:af:c2:
f9:cf:1d:84:37:45:cc:7d:47:19:73:00:31:c4:1d:be:2a:d4:
62:95:d2:df:26:02:3e:f4:2f:94:d3:70:1b:f8:78:bb:7d:d6:
fa:83:e0:d3:29:4e:87:29:45:71:3c:97:40:52:00:8a:61:9f:
5c:a1:f9:ca:66:df:c0:99:69:47:84:1a:ba:bc:60:05:22:b5:
71:7c:f6:4d:6e:9a:3d:1b:02:60:53:81:92:d2:e4:d6:38:55:
f4:5c:97:01:4c:43:7b:a7:63:12:e8:98:ef:46:07:da:69:dc:
45:0a:a7:26:3f:a5:39:b6:f8:61:bf:48:6b:19:b3:06:57:c8:
55:4e:d6:db:25:20:89:91:5d:79:63:59:cf:c2:9a:85:2e:07:
03:d9:7f:67:ab:44:f9:32:3d:af:be:2e:b6:b6:a5:ed:af:12:
eb:50:ee:fc:e0:34:b9:17:17:2c:53:63:57:ca:f7:bc:69:8a:
7e:25:28:d1:e8:04:45:a5:92:1b:1b:d1:9f:d5:4f:b5:ed:e6:
fc:66:19:cb:37:59:16:7c:98:f0:6b:a4:f4:1f:c9:a5:75:29:
86:97:2c:73:d9:df:df:2c:87:ca:1d:d0:a6:64:ab:2d:78:93:
8f:97:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:01:41 2025 by rpki-client