Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/566BECC8EE1711EFB60E2F5CC4F9AE02.roa
File: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (raw, json)
Hash identifier: U6f6OEgNO9G7tnJE8PE9Soyl3bJOGu5+tt1ALRGB7dY=
Subject key identifier: EC:0D:F4:A4:3F:5F:DF:0C:89:A2:DD:87:43:93:C0:27:B3:EF:5E:28
Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial: 036E
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/566BECC8EE1711EFB60E2F5CC4F9AE02.roa
Signing time: Tue 18 Feb 2025 16:42:27 +0000
ROA not before: Tue 18 Feb 2025 16:42:27 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 13378
IP address blocks: 103.178.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878 (0x36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDCF1
Validity
Not Before: Feb 18 16:42:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67b4b873-863b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:8c:71:7f:dd:bb:e1:db:50:64:eb:d1:45:
4a:69:9b:7d:a6:cd:65:0d:6c:55:f6:3f:2a:36:01:
73:f6:39:26:ba:39:57:b2:a1:1b:a0:90:87:49:ff:
57:50:51:53:be:02:6d:91:02:c0:70:4d:6c:98:11:
4e:b7:b9:e0:4f:ca:dd:b1:e1:7f:f6:36:3d:27:7d:
c1:16:ab:5d:13:e4:0d:45:81:40:3f:bc:61:5b:ae:
bc:8b:73:c3:3b:82:ee:ba:40:1a:2f:26:4c:5b:33:
14:9b:cf:c2:bb:85:22:bb:af:84:27:8f:a5:22:0d:
a2:52:cc:5a:b9:44:2c:bb:5d:23:cc:1c:59:97:2a:
49:3d:14:94:12:7f:72:26:e9:68:a7:57:22:bb:fd:
93:b0:9e:ae:e5:7f:c1:65:78:44:87:7e:8e:18:af:
37:03:43:e5:50:1f:44:67:ea:30:06:85:46:28:53:
0a:f2:d1:7d:0d:0f:91:7c:8b:78:1b:61:44:d9:d5:
f3:80:9d:a7:4b:ca:f6:83:80:fb:de:0d:7c:0a:05:
25:f1:99:7a:c4:f4:1d:01:1d:57:2d:7f:c7:19:48:
9e:e9:eb:70:51:f2:d5:a0:a4:28:19:1d:20:8e:f0:
03:4d:7a:8f:12:c7:ba:fe:ac:de:fc:a0:70:34:38:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:F4:A4:3F:5F:DF:0C:89:A2:DD:87:43:93:C0:27:B3:EF:5E:28
X509v3 Authority Key Identifier:
keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/566BECC8EE1711EFB60E2F5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.56.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:04:c1:6c:3a:c1:1a:c0:76:4a:2d:ab:34:af:85:f6:bd:c0:
9d:d8:05:65:ac:41:c4:a0:86:23:e8:f1:2f:3b:59:10:05:4e:
05:16:a2:f4:cc:66:c4:f7:66:a2:6a:a1:9f:37:cb:9f:10:de:
9c:4c:bc:4a:98:93:d0:58:62:6b:fa:8a:36:3b:5d:fc:96:e1:
8d:93:05:89:67:28:23:1e:ee:9c:73:c1:63:e6:f1:30:38:f7:
7a:42:9e:b5:f0:14:8f:b2:8f:4a:7e:14:63:fc:11:94:eb:6d:
b2:1e:75:b4:bb:27:70:64:5c:a4:dc:06:37:59:6e:87:04:a2:
7a:c5:77:f9:3b:97:36:ef:7f:68:f5:3a:fe:eb:d5:02:68:bd:
22:73:a3:f8:d4:e1:1d:fe:a2:5c:ba:9a:02:6e:5f:49:97:6e:
18:a4:d6:2b:0b:0b:ae:e4:32:49:eb:13:e4:bd:1a:29:23:f5:
9f:f8:8e:b0:4a:37:1a:ca:4a:f8:9f:5a:d3:b4:28:23:36:91:
f8:e0:9d:b9:97:46:c4:cb:c2:b0:a5:55:db:eb:45:9b:66:72:
52:de:ae:63:49:6c:d9:21:22:26:3e:14:8f:40:59:0d:12:72:
d6:7c:be:80:28:bf:12:b1:80:9e:19:15:e4:29:e4:2d:05:67:
35:48:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:04:58 2025 by rpki-client