Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/F03F059C391D11EF9A100142C4F9AE02.roa
File: F03F059C391D11EF9A100142C4F9AE02.roa (raw, json)
Hash identifier: 5xPsXsO/x9vu20ZDUf9oCZh2wciZeGjOc7UUq3/XpCg=
Subject key identifier: C8:F5:75:2D:07:53:D9:1B:7D:A2:35:E6:09:B7:36:BC:CB:D8:4C:CC
Certificate issuer: /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
Certificate serial: 7A
Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/F03F059C391D11EF9A100142C4F9AE02.roa
Signing time: Wed 19 Feb 2025 02:24:11 +0000
ROA not before: Wed 19 Feb 2025 02:24:11 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 149501
IP address blocks: 103.181.74.0/23 maxlen: 23
103.181.74.0/24 maxlen: 24
103.181.75.0/24 maxlen: 24
2001:df0:6ac0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183A80
Validity
Not Before: Feb 19 02:24:11 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67b540cb-1de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:64:ff:8f:da:2c:7d:b7:8e:f3:aa:e1:10:22:
17:57:42:ce:9e:d2:47:0d:63:c5:55:2c:dd:c4:03:
d6:d6:88:26:16:73:fa:6d:b1:cf:9f:2c:84:f1:1f:
aa:15:a0:a7:89:a9:d1:87:ed:4d:bb:9b:22:1b:32:
b1:af:18:5b:89:00:53:90:d4:29:38:c0:04:08:32:
92:25:b6:b3:f5:96:84:a9:e3:40:f3:d2:4d:3a:57:
b1:a7:f9:8e:98:58:8d:18:99:c3:c1:06:c4:84:ce:
75:b6:4d:ee:ac:a4:07:5e:d3:8a:46:76:06:9c:2f:
9a:8e:b3:78:48:55:b0:41:36:0c:2c:c7:ca:94:41:
35:d4:f0:40:a2:c9:de:04:9f:1b:fe:cb:5a:f4:1e:
aa:7f:68:e5:d2:27:64:7d:21:ed:23:f0:6c:f2:00:
48:ca:ed:dd:a0:3d:27:6b:b1:fc:95:d6:b4:1d:b7:
f8:fb:99:b0:ae:1d:83:36:e9:c0:60:c7:18:84:e0:
1a:75:82:7f:ad:56:18:ff:f5:b2:10:56:44:4d:17:
70:61:17:50:51:33:77:5b:1a:bd:0b:fb:39:e5:2d:
1c:16:a5:f1:50:87:60:12:98:0d:45:f2:e8:5a:cd:
36:93:47:bb:fa:4f:ac:57:3d:67:b9:46:d2:28:c6:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:75:2D:07:53:D9:1B:7D:A2:35:E6:09:B7:36:BC:CB:D8:4C:CC
X509v3 Authority Key Identifier:
keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/F03F059C391D11EF9A100142C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.74.0/23
IPv6:
2001:df0:6ac0::/48
Signature Algorithm: sha256WithRSAEncryption
2a:7a:fb:f6:c8:6f:9b:96:20:c2:b0:cb:76:c5:28:06:2f:0a:
ab:f6:f1:1e:25:3a:ac:9b:97:0d:b0:fe:e2:a2:fc:f7:34:8f:
67:2d:71:a0:0f:73:4f:3f:95:bf:13:d2:92:f0:56:33:33:72:
25:fa:74:bd:29:da:60:f2:b1:f2:d5:78:39:2c:90:94:9a:ef:
12:8e:1f:d5:dc:e0:5a:58:fb:97:31:f4:c2:61:db:bb:ad:19:
ea:9c:18:d8:63:18:28:ff:23:9d:84:1b:ec:2d:c9:94:45:f9:
94:ae:3f:6c:e4:d2:5e:45:3e:26:71:39:e9:25:e3:5f:7f:6e:
78:b4:02:89:28:aa:33:40:7e:c1:c5:97:ae:1f:1c:4a:1e:d0:
5e:4e:bb:6b:4b:c0:2e:84:d6:9f:e0:82:4f:cf:f7:f4:7f:58:
b2:38:54:51:b5:31:4a:2a:59:9c:e1:0a:e0:a1:03:dd:a2:0c:
94:7c:cd:04:93:45:3c:30:64:70:3c:1a:26:69:04:96:e2:f0:
03:82:a9:3a:d4:dc:b1:ec:5f:87:ab:1a:33:8d:22:73:ea:80:
a3:2a:6e:8e:3b:a8:c2:f0:27:74:dc:ed:b6:52:54:ce:67:55:
a7:d5:12:9e:4b:16:6e:3e:6e:81:39:d1:15:f3:1b:64:ce:b2:
66:4e:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:10:33 2025 by rpki-client