Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/9D77DCA4599A11ECA574BF52C4F9AE02.roa
File: 9D77DCA4599A11ECA574BF52C4F9AE02.roa (raw, json)
Hash identifier: /fF1tdSaYFH2w1w+0HXHgYqEthaF4A0sGCD2uCBxpiY=
Subject key identifier: 55:21:F9:A1:3C:24:CA:2C:5C:88:6F:A5:A8:E3:E3:5B:54:A1:89:24
Certificate issuer: /CN=A91A65C4/serialNumber=3A16C404BFED347244A30A5AFFF66E4992AA2821
Certificate serial: 03F7
Authority key identifier: 3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/9D77DCA4599A11ECA574BF52C4F9AE02.roa
Signing time: Sat 21 Dec 2024 00:22:36 +0000
ROA not before: Sat 21 Dec 2024 00:22:36 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 149281
IP address blocks: 103.177.220.0/23 maxlen: 24
2001:df0:2bc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1015 (0x3f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A65C4
Validity
Not Before: Dec 21 00:22:36 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67660a4b-6e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:da:4a:db:70:39:16:53:51:c1:5f:83:f3:
1b:ee:0f:d0:a1:38:b6:65:09:99:06:ba:46:83:4f:
fb:57:bb:11:b6:27:97:7f:1e:ff:d2:f0:d6:94:f8:
07:61:cd:e0:e0:bc:ff:ce:49:43:96:4e:2a:25:6f:
1f:ed:04:46:ed:85:e7:63:7d:ee:21:51:9a:00:5c:
f5:7b:76:56:46:09:26:b2:7a:6a:b4:de:10:ef:72:
df:25:e6:69:59:ed:f1:93:1f:95:bb:db:63:fb:77:
33:6b:29:b8:94:a1:bf:2e:5c:6c:23:09:88:07:5b:
70:b4:9d:c2:72:d6:0a:e6:e1:8e:21:39:11:1c:1f:
81:3e:68:45:1c:b1:e8:7b:e2:3c:76:cc:e2:50:df:
40:02:4d:d2:23:a0:48:cd:7e:ce:8c:e5:04:3d:a2:
a4:a2:67:9d:f1:e8:ef:84:a3:ff:61:a2:49:19:7f:
92:ec:78:f1:73:e6:0b:32:b1:03:8b:43:1d:e3:54:
07:24:af:49:47:eb:ed:28:d8:ef:bf:ed:ff:8b:c6:
ca:b2:ef:e1:52:53:9b:59:19:1b:d2:36:df:3a:0b:
b9:63:57:cf:a3:03:12:d6:ef:7e:18:a6:7c:a6:b3:
72:8c:f6:3a:6d:e1:fd:21:55:df:a0:47:de:60:ee:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:21:F9:A1:3C:24:CA:2C:5C:88:6F:A5:A8:E3:E3:5B:54:A1:89:24
X509v3 Authority Key Identifier:
keyid:3A:16:C4:04:BF:ED:34:72:44:A3:0A:5A:FF:F6:6E:49:92:AA:28:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/OhbEBL_tNHJEowpa__ZuSZKqKCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhbEBL_tNHJEowpa__ZuSZKqKCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A65C4/3E3A5502599811EC9391D550C4F9AE02/9D77DCA4599A11ECA574BF52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.220.0/23
IPv6:
2001:df0:2bc0::/48
Signature Algorithm: sha256WithRSAEncryption
26:b8:c6:0d:71:14:c7:82:9c:79:73:0b:ad:b6:62:50:e9:31:
f3:a2:53:b1:34:df:05:44:35:6f:aa:79:d9:ec:4c:49:37:9a:
bf:fe:a0:09:2e:c2:7c:69:1b:cc:36:18:f6:db:69:56:05:09:
97:77:ac:d5:b4:91:5a:4d:ae:4c:08:cd:65:bb:92:6f:9f:67:
06:f1:93:0f:30:9f:0f:22:8b:53:a0:6e:37:0e:90:a8:c5:2e:
dc:6a:cf:ca:e8:16:93:a6:16:b2:a5:9c:0f:7f:6f:02:3b:79:
b0:e9:58:1a:2e:4e:1c:34:6d:f5:85:dd:86:54:96:ad:54:d0:
4c:45:d9:36:df:8b:7c:e3:f0:6d:ce:5d:ae:5f:40:df:52:5d:
a1:db:39:37:c8:9d:4f:a2:11:b3:a5:ee:c2:13:d7:f2:e4:78:
8c:f9:6a:cc:16:f9:dc:6b:00:13:98:cc:76:72:53:9b:2d:07:
c8:4f:31:0e:f8:c5:6c:31:af:41:c4:4f:4d:b9:bd:19:78:cc:
04:82:a4:b2:01:f2:3e:33:7c:1f:2a:f4:11:ae:01:8d:e7:40:
eb:25:62:ad:e6:cf:8f:8d:40:f3:03:2d:f1:ae:7e:53:30:10:
7d:e9:ca:27:32:15:23:f0:d1:31:b6:f1:e6:6c:63:04:e5:aa:
4b:e2:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:04:50 2025 by rpki-client