Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/446E8606745311EDBF95BB2CC4F9AE02.roa
File: 446E8606745311EDBF95BB2CC4F9AE02.roa (raw, json)
Hash identifier: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=
Subject key identifier: EF:E8:89:65:36:A2:4D:A3:2C:98:32:DB:9B:0D:78:E4:9E:91:C6:AE
Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial: 0314
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/446E8606745311EDBF95BB2CC4F9AE02.roa
Signing time: Mon 27 Jan 2025 00:54:00 +0000
ROA not before: Mon 27 Jan 2025 00:54:00 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 55020
IP address blocks: 103.179.242.0/24 maxlen: 24
103.179.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 788 (0x314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF7F6
Validity
Not Before: Jan 27 00:54:00 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6796d928-0cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:32:ab:9e:e3:b9:ca:9e:98:70:18:fc:6c:
18:1a:5d:dc:bd:74:ea:1d:3c:da:1e:44:47:0c:79:
93:52:0e:a5:31:49:61:7a:20:57:65:65:91:8f:c7:
8e:ac:95:b2:eb:45:01:f1:28:ee:2d:0b:45:6d:6e:
1d:2c:28:5b:e5:4a:a1:5b:a7:a8:ba:bf:62:11:60:
01:35:5b:d0:c1:df:6f:34:7f:2e:b0:a0:4c:d6:ea:
09:f7:02:72:a0:f2:86:b2:09:09:59:9b:4e:e9:0d:
87:2e:b8:86:f0:46:8f:78:f7:68:3b:c5:03:d1:23:
40:e5:8d:08:83:53:08:cc:87:28:de:e8:83:2c:78:
52:91:a0:45:d9:72:39:e1:36:6b:d3:ec:33:8e:0c:
a3:e0:e7:7e:f9:86:12:a0:26:0a:b8:bc:9a:a9:33:
85:98:dd:54:ec:cd:e4:f0:93:5d:85:bd:5c:5d:81:
b9:7d:2e:48:09:a1:de:c4:54:48:48:ac:90:1e:61:
6a:36:91:94:20:b9:b7:c2:30:16:8d:c7:36:f6:c6:
1d:c7:4f:38:0b:05:2a:0d:25:2b:fd:ba:c9:59:81:
5b:77:b7:eb:95:b0:82:f3:71:6e:b6:14:fa:93:1c:
cb:56:77:d8:55:25:18:ec:11:1e:83:47:17:42:3f:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E8:89:65:36:A2:4D:A3:2C:98:32:DB:9B:0D:78:E4:9E:91:C6:AE
X509v3 Authority Key Identifier:
keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/446E8606745311EDBF95BB2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.242.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:e3:2f:b1:dc:80:ea:f9:08:58:ec:06:92:74:ca:1a:88:bc:
be:6e:b8:e6:90:b7:35:95:b1:53:85:b4:07:3c:fd:63:e1:d5:
2c:7f:17:49:7f:68:8d:d2:91:95:77:17:e1:62:ef:88:a8:c5:
ea:58:c4:5e:ff:65:e5:97:ff:6d:41:cc:23:81:00:0f:39:15:
6c:5d:80:92:6d:3b:b3:b6:b0:67:5f:78:fa:76:dc:10:74:9e:
da:a0:bf:ce:04:96:c5:2a:92:1b:47:86:a7:63:04:27:9b:55:
2b:70:4a:0d:2a:59:33:c7:b3:5c:4f:43:42:5c:db:aa:b8:fe:
5b:38:74:68:40:22:20:42:fa:16:bb:87:26:61:96:12:2e:15:
02:cc:44:66:32:91:19:c4:6e:b7:9f:a5:22:f9:b2:cf:2f:20:
e8:47:1d:40:5f:75:db:58:a2:21:eb:10:14:11:4f:a9:f8:5b:
1f:22:e4:88:c7:ce:40:c7:89:59:7b:b8:3e:95:2a:3e:4c:91:
8d:6e:0f:2c:18:87:20:07:bd:b1:27:74:d5:49:a3:a8:e1:28:
e6:40:3e:07:be:5e:1c:50:24:bd:cd:e3:ee:6d:f6:91:b0:82:
f4:89:60:51:01:eb:80:bb:bb:09:9e:9c:6c:c8:d5:d3:d6:05:
a3:28:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:46 2025 by rpki-client