Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/4643A5E4703011EFA1A7CB20C4F9AE02.roa
File: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (raw, json)
Hash identifier: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=
Subject key identifier: AC:36:98:75:D1:45:F0:F1:C9:6A:E8:C7:88:B4:A9:CF:5A:32:ED:5D
Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial: 0362
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/4643A5E4703011EFA1A7CB20C4F9AE02.roa
Signing time: Sun 09 Feb 2025 01:03:06 +0000
ROA not before: Sun 09 Feb 2025 01:03:06 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 141159
IP address blocks: 103.178.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDCF1
Validity
Not Before: Feb 9 01:03:06 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a7fec9-879f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:1e:ff:89:85:cd:27:10:0d:27:11:3f:fa:
ab:ac:cc:9c:d2:dc:bb:3b:76:d9:e6:38:93:6f:1d:
29:da:a7:15:00:0e:91:49:6c:ec:39:00:48:77:17:
92:99:80:2a:5b:79:2c:e1:38:b1:50:a3:1c:74:6a:
11:12:cc:5b:76:de:ea:a8:75:c3:f4:41:e1:d4:ec:
e1:43:db:bb:c9:e6:de:51:a5:9d:a6:6c:97:6e:7b:
e0:1b:ab:dc:a2:89:de:51:57:df:4f:6c:d2:74:cf:
8a:f4:6a:a2:91:e5:13:28:a3:a3:24:be:f0:10:be:
be:5a:57:c3:34:5b:76:7e:35:fe:29:a8:b1:b2:5e:
23:0e:c3:8c:aa:f9:f6:94:87:25:cd:fe:7b:67:a3:
1b:5e:b5:62:59:b3:ca:cd:cc:bf:0e:18:24:19:7a:
6d:15:85:23:94:1f:0f:5e:16:82:7c:4a:50:cf:35:
ba:e9:95:ef:94:69:b7:e5:f7:af:d3:5f:b8:ec:55:
6e:0f:06:50:d9:e1:f2:22:8f:a8:cc:3a:41:76:11:
5f:26:92:48:63:8a:48:89:b2:76:a3:14:f3:2e:7b:
2d:ad:ac:c6:66:ec:ea:d1:67:6b:74:a7:2a:9e:52:
67:7d:17:2a:c4:9f:08:32:fe:db:d8:7a:d8:aa:70:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:36:98:75:D1:45:F0:F1:C9:6A:E8:C7:88:B4:A9:CF:5A:32:ED:5D
X509v3 Authority Key Identifier:
keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/4643A5E4703011EFA1A7CB20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.57.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7d:24:d9:dc:71:78:fd:0a:8f:39:06:33:59:21:e9:f9:5e:
f8:1a:3d:4a:bf:cf:a1:81:a3:c3:26:91:32:8a:d2:83:79:68:
48:24:c5:41:b9:4c:ec:02:be:63:29:dd:9e:06:62:c3:b7:c3:
df:f5:6b:ff:63:25:8f:78:2c:3d:c6:60:2a:38:39:20:27:37:
9c:63:c6:a7:b2:5c:a6:cc:f6:ae:40:5d:a1:0b:be:7e:de:59:
dd:39:f0:23:6d:83:c3:ae:52:63:d2:64:70:85:0c:4b:a0:ff:
2a:93:2f:1b:40:4a:b7:94:5a:a3:fa:ba:a7:5d:aa:be:21:2c:
0a:63:5d:41:00:f7:c9:5a:b9:68:02:9f:8f:c4:ed:a7:e6:11:
c4:39:56:b4:9d:c8:a0:8b:b5:22:ca:0a:ab:9b:1a:69:56:b9:
c8:c0:ae:2a:b1:ce:d0:e2:18:80:93:4b:93:e8:dd:a8:4b:60:
09:d0:e6:1d:71:da:83:c6:24:19:19:cc:40:d7:3d:35:7d:22:
29:9c:f1:91:5a:34:b6:ce:31:ab:47:16:c4:20:3c:2e:20:34:
84:3c:88:74:bc:b4:fa:37:cb:73:a4:88:90:79:70:aa:0f:3f:
f0:4c:0c:ce:98:e8:c3:bf:17:82:ab:3f:86:84:0b:b8:4f:df:
51:58:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:19:21 2025 by rpki-client