Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/C18726F486D711EBA06B0E64C4F9AE02.roa
File: C18726F486D711EBA06B0E64C4F9AE02.roa (raw, json)
Hash identifier: 46EUYT6r3IQXKkQnGUbOAbbi8lZTq+8CIfeQWVvyW6o=
Subject key identifier: FE:A5:AF:D4:54:34:8F:B4:3F:B7:6D:D4:26:08:EC:F9:68:56:63:15
Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial: 0634
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/C18726F486D711EBA06B0E64C4F9AE02.roa
Signing time: Sun 02 Feb 2025 22:32:10 +0000
ROA not before: Sun 02 Feb 2025 22:32:10 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 133926
IP address blocks: 103.44.63.0/24 maxlen: 24
2407:880:9f00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1588 (0x634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BBC
Validity
Not Before: Feb 2 22:32:10 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679ff269-f6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:11:a8:5d:2e:85:64:78:2d:f6:88:4a:9e:e6:
eb:dc:cb:28:6b:56:8e:48:30:8a:33:4a:4a:a8:a7:
40:74:d0:d8:d0:4d:8c:33:34:90:aa:24:ac:59:ef:
71:be:81:6a:c6:04:a6:e0:81:8f:23:fe:ed:95:0c:
ee:7e:36:d6:3a:1d:4a:52:d8:08:c8:f7:65:e6:a3:
f8:d0:d4:d9:98:22:59:bc:2a:2d:cf:62:25:cc:26:
f0:81:20:71:fb:7e:b3:21:a9:dd:2d:ee:c7:74:66:
7f:d4:a6:f1:34:d0:2e:c3:5b:d2:f6:64:10:28:07:
0c:a6:ed:fd:22:97:16:22:41:d8:db:68:c7:78:37:
5f:de:19:0f:ec:2d:d8:6f:ad:f8:c4:17:6d:03:c9:
1c:1c:7c:fd:12:43:0f:53:0f:ba:67:22:5a:0c:31:
96:b3:55:bc:85:00:3d:a4:e7:bb:73:a2:99:53:e6:
b6:86:47:9e:7f:7f:b9:fc:ef:74:b8:da:13:45:8b:
01:60:37:6a:0b:27:bd:22:39:cf:7a:a9:67:24:e7:
4f:34:e7:c6:62:ca:df:90:69:9a:aa:99:2e:5f:18:
13:d0:2c:f3:61:55:ae:3e:b0:e2:bf:8b:ef:0d:4f:
56:7d:f2:79:e7:e8:45:c6:b7:3c:6c:5d:d4:3f:07:
7a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A5:AF:D4:54:34:8F:B4:3F:B7:6D:D4:26:08:EC:F9:68:56:63:15
X509v3 Authority Key Identifier:
keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/C18726F486D711EBA06B0E64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.44.63.0/24
IPv6:
2407:880:9f00::/48
Signature Algorithm: sha256WithRSAEncryption
07:70:9d:4a:43:e6:b8:c7:ce:cf:74:90:8b:b2:06:f6:31:49:
da:10:9d:14:a8:71:c1:74:2f:9c:bd:97:42:59:09:4c:5d:29:
29:33:5f:c4:e8:6a:5e:25:c8:8e:41:df:32:b7:c9:e7:e9:f3:
7a:be:45:5b:9e:3e:ba:3c:d5:6e:e0:d0:84:22:4a:a1:f1:9c:
9f:f1:05:26:c1:3f:86:51:29:5e:b9:9d:8c:84:1d:3c:80:ca:
c1:8c:0a:a0:c8:7f:00:22:a8:5a:c4:a3:5e:42:29:c4:12:9b:
02:d4:f6:3c:1b:dd:87:d1:bc:94:73:2b:20:03:73:8a:9c:f8:
a0:3a:f2:fa:8a:14:1e:6f:6a:20:61:e0:72:7f:f9:42:78:6b:
31:d8:86:4e:3f:dc:29:6e:9a:6d:02:35:65:33:75:2b:1b:22:
f1:46:e3:f7:bf:e9:71:e3:8f:30:1c:e3:ca:e6:80:59:62:6e:
96:8b:c6:95:7b:36:fd:b9:2b:9e:a6:d4:0a:46:8d:cd:f5:7d:
76:e9:22:53:ec:8a:12:74:e7:9f:8c:0e:67:d8:bf:a4:ac:fd:
c4:32:02:fb:2f:70:45:0d:43:74:27:de:27:c1:77:66:3d:2d:
3f:78:09:f7:a1:59:2d:85:fd:4c:3d:34:3f:a0:52:b7:7d:64:
ae:af:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:44 2025 by rpki-client