Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/12A549F8BFC111ECBF03EF63C4F9AE02.roa
File: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (raw, json)
Hash identifier: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=
Subject key identifier: 41:CB:A9:B8:2E:14:E7:CF:7B:2B:E1:25:D2:A6:0C:57:11:06:33:00
Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial: 0315
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/12A549F8BFC111ECBF03EF63C4F9AE02.roa
Signing time: Mon 27 Jan 2025 00:54:01 +0000
ROA not before: Mon 27 Jan 2025 00:54:01 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 63889
IP address blocks: 103.179.242.0/24 maxlen: 24
103.179.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF7F6
Validity
Not Before: Jan 27 00:54:01 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6796d928-4765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:b0:ae:c3:da:19:e4:3d:e7:af:d7:8a:12:
5f:eb:b7:de:ef:d6:7a:a9:63:ca:f0:e9:0b:fa:11:
bd:f8:8e:25:6e:71:80:2b:c1:09:dd:12:cd:ad:59:
f2:b2:d1:2b:8f:76:03:f5:96:ad:6c:23:c8:21:ec:
12:c5:f4:33:00:06:7b:ab:f8:65:14:cf:c7:ec:25:
19:4e:da:ba:77:9b:2f:d7:f5:a3:42:6a:92:06:4a:
4b:b1:82:f9:ac:b1:70:83:af:04:a9:9a:ec:d5:81:
8b:a4:00:bf:a9:85:6f:a6:4d:ab:09:86:73:a8:b1:
e7:ca:05:e0:4e:32:2a:be:ff:00:2e:2e:15:56:72:
b0:ae:fc:76:34:6e:2c:2b:a2:de:c8:e0:55:4b:d2:
ea:e2:a4:e7:7c:03:85:7f:5a:ef:c4:84:b0:e4:53:
14:ab:8c:5d:d8:0b:23:76:56:d8:91:b6:88:71:ec:
b1:2b:b3:43:9f:9e:35:a1:ba:e2:30:6b:8d:8c:be:
e9:b2:46:66:cc:f1:a8:ce:da:db:c1:2a:93:79:e6:
78:6a:1a:c4:d1:ee:49:17:c3:ee:f2:55:cd:6a:6b:
e3:86:ee:97:59:ee:3a:ab:42:fc:00:0f:57:ac:91:
68:1b:bc:ac:41:6f:29:65:ff:ff:a8:89:09:2a:a6:
62:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CB:A9:B8:2E:14:E7:CF:7B:2B:E1:25:D2:A6:0C:57:11:06:33:00
X509v3 Authority Key Identifier:
keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/12A549F8BFC111ECBF03EF63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.242.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:28:a5:9a:61:9f:2c:cf:24:c9:c0:16:27:ef:4a:f7:80:a9:
8f:5c:3a:9b:68:9b:5f:80:43:27:35:60:e0:37:c5:e0:76:ee:
be:4c:d2:ca:32:4c:ed:2d:19:e9:a8:68:66:ea:28:43:d6:6f:
7c:48:1f:7b:01:ab:02:c8:54:a3:55:c8:b9:e3:6f:78:95:94:
c0:4f:54:45:1f:46:01:b1:54:0e:c8:14:7e:12:8a:3a:f0:d9:
90:89:1a:99:9b:86:e1:0e:88:76:8e:2f:88:a9:78:7e:be:7c:
c5:dc:a0:53:6d:ba:85:0d:4b:8c:c9:a2:82:12:c9:2f:75:a7:
b4:fd:5f:16:a2:43:a9:b5:cb:d9:e8:30:5d:ce:4c:24:1f:18:
e9:e6:d9:bb:74:85:8e:af:6b:9f:b5:fd:9e:c4:61:c3:e3:a6:
3a:51:2b:b8:5e:f1:54:d6:75:a9:f1:54:18:26:c1:7c:dd:4c:
b9:70:bb:5d:21:f1:bf:36:ac:bf:72:8f:c0:70:23:bf:03:90:
5f:fa:f4:93:19:6d:92:00:6e:f6:a8:23:ea:8a:78:51:0a:06:
45:9a:66:fe:a7:bc:d7:bc:1e:76:65:a6:bc:95:6b:8e:f0:71:
73:41:60:df:91:1e:06:85:63:9c:91:c1:b7:fe:c6:b8:64:32:
c6:a4:23:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:09 2025 by rpki-client