Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/16B9139A238311EEA2B7992CC4F9AE02.roa
File: 16B9139A238311EEA2B7992CC4F9AE02.roa (raw, json)
Hash identifier: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=
Subject key identifier: 8B:FF:05:3C:9A:13:09:A6:22:FB:06:AC:EE:B3:8E:03:E5:ED:6B:0B
Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial: 0311
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/16B9139A238311EEA2B7992CC4F9AE02.roa
Signing time: Mon 27 Jan 2025 00:53:58 +0000
ROA not before: Mon 27 Jan 2025 00:53:58 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 140212
IP address blocks: 103.179.242.0/24 maxlen: 24
103.179.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785 (0x311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF7F6
Validity
Not Before: Jan 27 00:53:58 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6796d925-e988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:25:94:f0:2d:21:28:85:87:01:3b:96:ce:
41:7a:4e:81:9f:eb:43:b7:ea:e0:d5:66:ab:7d:ae:
29:b5:33:4b:86:33:40:6a:a1:43:60:11:da:61:4f:
bf:b2:01:dd:2b:b4:e1:19:72:a8:ca:a8:8c:8b:9c:
61:cf:6c:0f:32:9b:56:58:2d:aa:e7:54:a6:ca:79:
b9:f1:fb:ad:d4:4a:92:8d:13:17:d9:55:1b:b1:ed:
f6:2c:c1:4b:08:71:21:6a:58:fc:05:4f:ae:9a:74:
1e:12:30:ca:a5:29:ce:6a:f3:41:0f:6d:f5:a2:a2:
a4:11:a8:5f:ca:9a:91:b8:48:de:aa:f5:d9:97:20:
24:8b:bf:35:6a:e0:a1:75:9e:37:22:95:96:2d:44:
18:df:ad:02:8a:cc:4a:da:9d:1b:a4:40:15:f1:be:
0d:46:7c:ca:c5:a1:68:e9:e1:91:39:57:0e:31:e9:
b9:13:a9:30:a6:78:77:d6:93:f4:12:54:17:2e:5a:
ad:64:4d:9a:e4:db:d0:f4:b1:ab:47:29:9c:bf:f5:
3c:19:38:81:af:b3:e2:ce:4c:ae:28:fb:4f:d6:a5:
57:dd:5e:9a:d2:7c:ce:c6:6d:c1:4f:31:15:9a:ea:
77:76:e4:93:0f:06:0c:79:53:3c:e3:1d:a0:4a:b7:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FF:05:3C:9A:13:09:A6:22:FB:06:AC:EE:B3:8E:03:E5:ED:6B:0B
X509v3 Authority Key Identifier:
keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/16B9139A238311EEA2B7992CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.242.0/23
Signature Algorithm: sha256WithRSAEncryption
72:ef:16:2d:bf:36:4d:9a:fe:1d:51:23:27:8a:42:fc:48:de:
85:e1:15:92:da:5d:14:b8:c5:e7:d1:bf:e2:b9:ed:3a:6f:44:
d4:44:3c:9f:1a:eb:ad:01:3a:c1:a8:22:b0:8a:5f:77:c4:8c:
3c:1d:09:11:0e:0e:e7:bf:b9:fe:be:c1:40:ad:07:72:f3:89:
36:34:cb:07:56:82:fc:fb:ea:5a:79:c7:8b:aa:0a:de:2c:18:
df:4a:a8:62:0b:12:4a:1d:cc:5a:5c:dc:c4:e5:b4:12:cd:17:
d5:50:0a:11:4e:cd:85:ce:5f:ea:12:62:84:86:01:34:ed:69:
81:e0:96:d3:37:99:b6:00:7d:e4:87:c8:1d:65:6a:3e:82:fe:
2c:82:9a:4d:fb:f8:33:89:d4:ac:d2:1c:42:59:29:15:d1:32:
56:a0:7d:3a:2d:3b:c1:60:ed:77:97:88:c6:67:14:10:db:7e:
d4:d6:7e:f8:87:b9:9c:fb:02:d8:b0:08:ea:a5:85:1b:72:83:
7e:93:72:f3:77:66:e7:d7:e5:c6:46:ab:bb:76:c3:e9:8d:e7:
5d:26:0f:ce:c9:47:f2:eb:0c:c0:af:f2:67:7b:66:5b:4a:11:
36:58:6a:f2:2d:8c:0d:23:3f:62:d3:3b:6f:aa:5a:65:5d:14:
74:6a:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:11 2025 by rpki-client