Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/159DA092E9B711EFB8454123C4F9AE02.roa
File: 159DA092E9B711EFB8454123C4F9AE02.roa (raw, json)
Hash identifier: tjoX2rKURmmp0SIpilUWla3AD/nRXhfocceVz0iL1og=
Subject key identifier: FD:B3:DF:C2:9B:22:BE:6D:AA:9D:68:54:99:42:E2:7B:64:7E:D4:2D
Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Certificate serial: 03EB
Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/159DA092E9B711EFB8454123C4F9AE02.roa
Signing time: Thu 27 Feb 2025 02:25:23 +0000
ROA not before: Thu 27 Feb 2025 02:25:23 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 149433
IP address blocks: 103.179.128.0/23 maxlen: 23
103.179.128.0/24 maxlen: 24
103.179.129.0/24 maxlen: 24
2401:eee0::/32 maxlen: 32
2401:eee0::/34 maxlen: 34
2401:eee0:4000::/34 maxlen: 34
2401:eee0:8000::/34 maxlen: 34
2401:eee0:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1003 (0x3eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA81
Validity
Not Before: Feb 27 02:25:23 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67bfcd12-7965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a5:7d:d3:e8:eb:13:09:9a:c5:b2:8c:5b:cd:
61:fe:61:7c:81:e6:dd:f7:2f:95:7f:86:c7:a3:e0:
ad:4c:7d:b7:53:74:59:e3:3d:51:77:ad:61:eb:b1:
38:f8:94:4c:14:66:df:bd:2b:ba:68:33:f8:85:53:
8c:e6:9b:f5:4f:1a:95:e1:16:3d:ce:37:84:66:c6:
b6:45:68:aa:00:fc:2e:4d:1a:a9:96:4f:5f:e5:a0:
63:07:1a:37:7d:a0:49:e3:78:64:92:98:22:03:fe:
2b:5a:7e:e0:28:e7:5b:d9:9a:c8:05:dd:4b:2d:09:
0e:b8:24:fc:db:55:b8:be:54:a8:7d:0d:f9:32:00:
49:c0:09:d8:2d:3b:66:54:b6:b8:5d:bb:72:68:02:
42:bb:74:15:1a:90:19:fb:89:b7:3a:45:ca:9e:fe:
92:4a:be:3b:b0:1a:26:30:e9:10:6e:11:8f:aa:0f:
67:b6:3e:c4:b2:48:8e:cd:7f:d5:ca:1d:3c:2a:84:
6c:7a:d1:92:7e:2b:0b:ed:a9:74:94:2a:54:cc:43:
f3:8a:a1:4c:53:8d:39:21:50:ae:83:93:a3:92:a5:
8a:f7:01:94:03:6f:61:03:40:cb:ad:91:78:1c:5d:
8b:e3:1c:0d:42:1a:1a:d3:23:cd:83:0c:39:29:2a:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B3:DF:C2:9B:22:BE:6D:AA:9D:68:54:99:42:E2:7B:64:7E:D4:2D
X509v3 Authority Key Identifier:
keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/159DA092E9B711EFB8454123C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.128.0/23
IPv6:
2401:eee0::/32
Signature Algorithm: sha256WithRSAEncryption
53:3c:45:a7:da:a2:8e:e8:b6:f2:bf:52:33:24:83:ae:61:67:
e8:c7:1d:00:ba:1e:c2:0e:03:29:3e:df:f9:2a:8b:2c:32:30:
08:f9:34:6a:88:5f:6d:19:48:61:20:45:02:1f:9c:e2:03:3f:
a5:60:6d:cf:d2:bf:9f:e9:90:07:17:c9:29:29:c2:0f:7d:54:
a8:12:27:07:68:d0:08:8e:6e:7e:ae:73:95:eb:d7:28:2d:51:
29:71:89:c1:4f:3d:af:ea:00:2e:5e:bc:8f:c7:f3:cd:7a:0f:
37:17:43:1b:f1:9a:08:26:64:8d:87:40:eb:d6:33:10:32:f1:
37:cb:fe:1a:95:a3:03:69:8c:c9:86:08:6c:a5:51:33:d9:8a:
8f:60:3d:46:46:9c:d1:64:95:89:9e:11:b6:41:3f:6e:db:be:
2d:d0:3a:dc:6d:b0:d7:cb:f0:ff:ac:41:25:de:62:1a:c1:5e:
fa:f3:2a:7d:b9:df:fd:c8:45:db:69:f5:2d:18:a2:91:6d:50:
0a:89:0c:68:0d:60:12:37:74:ca:d4:fb:77:9c:71:3a:70:2f:
94:68:f2:e1:87:ad:7e:1e:38:99:95:3e:97:86:69:81:70:7f:
88:d9:0c:da:8e:55:a8:9a:13:5c:0e:a5:97:5f:af:b4:fe:e2:
b1:43:1c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:09:03 2025 by rpki-client