Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/5C266D92B5EA11EF91D0F96AC4F9AE02.roa
File: 5C266D92B5EA11EF91D0F96AC4F9AE02.roa (raw, json)
Hash identifier: fxyY/MGdrYTEnHMCJuSQOlsyYA8g9qztLHUGmf0Zo2g=
Subject key identifier: 19:01:43:81:93:CA:DF:05:3C:9D:20:EC:C9:96:FD:47:A4:6A:13:BE
Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial: 03CF
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/5C266D92B5EA11EF91D0F96AC4F9AE02.roa
Signing time: Mon 09 Dec 2024 04:59:24 +0000
ROA not before: Mon 09 Dec 2024 04:59:24 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 149436
IP address blocks: 103.179.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 975 (0x3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46FD
Validity
Not Before: Dec 9 04:59:24 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6756792c-3701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:21:3a:65:61:d1:84:3f:ee:9e:12:3e:af:
ef:85:12:1a:f2:49:77:ca:8f:e5:28:a0:70:8e:aa:
f1:dc:fa:f8:14:15:50:41:c4:c4:08:c4:2f:3f:23:
25:4c:c0:32:cf:89:2d:03:48:81:65:c3:d6:46:dd:
27:b0:e5:3d:85:18:7a:2a:52:c5:20:43:cc:af:67:
64:0f:fc:83:7c:a2:4f:d0:08:d7:e8:77:dd:18:64:
1b:87:6c:36:53:ba:8b:42:40:fe:15:36:d5:98:05:
7f:f3:6b:2a:33:72:dc:5e:ce:30:bd:3a:85:e2:1c:
74:90:21:44:e1:5c:b3:5f:72:8f:bf:df:33:ce:e4:
71:1d:af:89:dc:86:09:6f:ae:ac:ee:8d:36:61:1e:
5a:b6:0a:92:b2:6a:e6:8d:e6:f8:d1:04:f0:97:37:
f1:9c:69:b6:2f:84:d6:18:40:63:0c:8e:5b:5d:ef:
b2:fa:28:ea:0c:4e:f7:8d:58:c3:f0:71:94:7d:fc:
46:a0:bb:6b:7b:8c:46:bc:c1:2b:f4:83:3b:05:dc:
b7:8d:4c:59:70:7c:5f:70:28:14:64:6d:bd:d4:83:
b8:b7:61:6e:41:1f:25:3a:d2:f7:6a:04:15:c0:71:
d9:d9:34:6c:09:09:62:ad:b7:b3:b5:08:2f:60:35:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:01:43:81:93:CA:DF:05:3C:9D:20:EC:C9:96:FD:47:A4:6A:13:BE
X509v3 Authority Key Identifier:
keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/5C266D92B5EA11EF91D0F96AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b7:46:69:f9:52:b1:67:7f:6c:d6:01:62:c9:e6:50:51:ac:
12:70:46:f2:14:6d:3a:26:0b:b8:6e:9c:08:f4:bd:f5:b1:3a:
ed:0a:8f:ed:89:a2:4a:92:7a:ac:37:f2:85:b2:0f:81:a5:b0:
38:cc:99:10:31:59:68:51:21:53:4f:fb:70:f3:b7:31:b1:8b:
37:02:f2:f1:ae:c6:46:8b:41:1d:c3:29:c9:3b:6b:33:67:54:
60:5c:e3:02:2a:32:0a:e4:7f:1f:fe:b9:49:1b:df:1a:fb:91:
fb:2e:ee:85:81:85:e5:cc:20:4a:e2:c7:e0:4d:12:e5:d5:df:
4f:9b:76:4e:85:27:e9:ad:50:44:75:1b:6f:f3:98:aa:d2:4b:
8a:a2:31:7b:50:6b:11:2a:65:bb:e4:14:1a:c7:44:17:19:9a:
4b:79:7d:80:2c:a8:73:3c:b1:38:9c:f5:a8:a7:21:8f:77:c3:
2f:41:32:65:63:df:10:26:15:15:bb:a4:b7:66:cf:84:e3:1d:
a0:4c:49:4f:e6:4e:90:27:f6:17:f7:45:24:c9:b3:f5:cf:4c:
c8:5c:34:19:0b:06:5a:72:df:2d:f8:0a:c7:50:93:ac:65:db:
0b:0f:95:f0:0b:c7:32:92:30:3d:4e:3e:a9:43:cd:34:b0:ec:
9b:88:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:20:40 2025 by rpki-client