Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/53D9F48C483911EC8AA7367DC4F9AE02.roa
File: 53D9F48C483911EC8AA7367DC4F9AE02.roa (raw, json)
Hash identifier: 1NR+tnJ45Q4jHKO0RrikxVvAQ3Q5BP6Ygv+HU+N1w8w=
Subject key identifier: F5:BA:B0:84:D8:DF:1D:8A:5B:BE:2C:E5:2E:0F:BA:1E:5E:88:08:77
Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED
Certificate serial: 0433
Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/53D9F48C483911EC8AA7367DC4F9AE02.roa
Signing time: Thu 02 Jan 2025 23:53:40 +0000
ROA not before: Thu 02 Jan 2025 23:53:40 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 6939
IP address blocks: 103.176.58.0/24 maxlen: 24
103.176.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1075 (0x433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919968F
Validity
Not Before: Jan 2 23:53:40 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67772703-f715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:30:7a:cd:ee:65:3e:5f:19:25:89:62:b4:
67:b9:2a:03:cc:d6:c3:36:57:7c:b8:29:0b:f5:95:
e1:05:4c:67:f3:9f:ee:2f:ac:f1:17:f5:3a:10:56:
b4:82:b7:1e:c4:3f:23:f8:50:ce:a3:24:36:1a:c5:
83:0c:43:c6:50:d7:1e:15:8f:d4:ed:ec:46:91:cc:
06:22:c7:aa:e2:4f:39:0a:2c:72:71:86:65:45:b9:
c7:0e:f5:73:58:75:94:c5:0a:02:f1:d4:4c:85:f7:
1b:2c:be:21:26:0e:08:0c:36:7a:37:cf:1b:ca:21:
e8:93:8c:c2:32:c9:4d:c7:c4:9e:6e:e2:a5:c9:46:
01:00:26:d8:b4:5c:c5:77:84:be:5f:3e:2a:25:ec:
97:35:78:e9:2d:4f:fd:f0:34:49:99:57:eb:99:26:
5c:0e:8c:14:34:74:da:53:9a:5e:11:77:4d:9c:5d:
bd:f4:f7:5b:81:7a:c2:d7:36:04:3e:e3:03:d0:a5:
34:b0:3c:80:85:32:3b:64:dc:45:f1:c9:49:ff:2f:
c0:a3:1e:2e:4f:cf:ab:af:d4:ef:24:ee:16:fd:b1:
18:e7:93:90:24:7f:13:bd:50:d0:7f:9e:a1:a4:f1:
ed:a9:01:2a:75:cb:86:f5:21:2e:8f:1a:3e:53:ec:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BA:B0:84:D8:DF:1D:8A:5B:BE:2C:E5:2E:0F:BA:1E:5E:88:08:77
X509v3 Authority Key Identifier:
keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/53D9F48C483911EC8AA7367DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.58.0/23
Signature Algorithm: sha256WithRSAEncryption
86:c9:77:98:14:b9:9d:20:20:56:01:98:ab:ea:55:e9:f6:bc:
7d:a8:f0:f2:76:95:1a:ae:56:3a:ab:88:b9:de:84:f3:bc:ea:
34:7f:c2:12:d4:8f:3d:5b:aa:6e:4c:04:4d:26:a4:d1:61:b4:
2b:6f:02:e4:74:ba:d4:64:6b:5b:19:bc:2e:61:d9:27:08:1c:
2d:2e:49:69:7a:4b:3c:ee:b3:f8:71:e9:5a:78:48:24:b7:c2:
57:7c:55:c8:01:dc:a0:c5:f7:48:cc:12:69:77:29:a2:68:bb:
81:cc:bd:cf:82:f5:34:d4:b9:d9:a8:6a:2e:fd:59:88:1c:c0:
be:3d:4b:32:86:79:b6:0e:c8:27:81:04:1e:60:a0:c8:08:6d:
d7:8a:6b:63:b2:1d:7e:0b:63:2d:c9:a5:2c:d0:2d:13:fa:fd:
d1:01:58:87:0e:ac:0f:87:e4:83:3a:14:15:d3:d3:8d:54:fc:
87:b7:a6:b1:d6:d9:37:56:fc:b2:af:e6:e0:00:74:d5:ad:5a:
d0:b4:59:bd:d7:f5:a1:99:34:19:c4:84:da:9e:cf:d9:37:49:
f5:b5:2c:97:76:44:27:4f:b2:af:5f:32:c0:56:ae:f1:8d:b6:
5c:74:e6:49:0a:db:ee:66:af:aa:72:e2:7e:cf:3a:b3:16:9c:
34:35:54:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:34:49 2025 by rpki-client