Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/816A256CF57311EA86849119C4F9AE02.roa
File: 816A256CF57311EA86849119C4F9AE02.roa (raw, json)
Hash identifier: jh/uFXEIZPMO8B1QG/kheiWEegpd+33S7ffLLKrSdB0=
Subject key identifier: FF:6D:77:D5:0C:C1:A7:FB:90:08:C3:88:C0:B2:F0:1C:DC:03:60:30
Certificate issuer: /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Certificate serial: 078D
Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/816A256CF57311EA86849119C4F9AE02.roa
Signing time: Tue 31 Dec 2024 21:09:59 +0000
ROA not before: Tue 31 Dec 2024 21:09:59 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 18013
IP address blocks: 103.145.58.0/24 maxlen: 24
103.145.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1933 (0x78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EE2
Validity
Not Before: Dec 31 21:09:59 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67745da7-574d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:e6:88:0f:78:7e:37:23:31:68:61:bb:d8:
94:ee:26:8e:99:ef:7d:e7:44:32:0c:72:29:95:4e:
43:b9:2d:1d:cf:e4:db:6c:3f:7f:a6:21:f2:f4:4f:
f7:09:60:d4:03:66:80:b9:c3:9d:31:9e:4e:49:b1:
ae:50:8c:ab:3c:24:1d:97:0c:e2:b5:19:64:c8:c9:
7d:15:9a:08:4a:62:3e:d3:ca:68:0d:6d:05:37:76:
b2:6d:39:7d:de:01:e4:a1:07:ea:5f:be:10:f6:62:
5e:5b:4d:8d:ac:15:08:15:83:8c:ce:91:4e:b7:6d:
17:b2:5b:4b:61:ba:6a:65:39:60:3a:c7:ad:6a:47:
03:fa:09:fe:28:39:a7:ee:ef:62:e4:4d:db:fd:d2:
da:b3:c6:e8:8d:18:ef:97:4e:8d:6b:56:cb:22:3d:
8c:05:b6:53:f5:0d:f8:24:15:fe:fd:25:ff:6c:17:
de:3a:79:bb:c6:d3:e7:4c:6d:49:58:53:54:f3:d4:
5e:3e:b6:53:c7:52:d5:a0:de:ae:d7:a6:f3:1e:2c:
01:96:23:ee:2d:00:4d:24:7c:c8:18:49:37:34:ef:
c2:1c:01:f6:b7:43:f5:d2:5a:3b:22:4c:ec:05:f8:
58:dc:c3:36:55:d3:9a:bb:ed:53:61:43:67:c8:d9:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6D:77:D5:0C:C1:A7:FB:90:08:C3:88:C0:B2:F0:1C:DC:03:60:30
X509v3 Authority Key Identifier:
keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/816A256CF57311EA86849119C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.58.0/23
Signature Algorithm: sha256WithRSAEncryption
73:f4:b0:09:14:45:94:c5:a2:92:c4:45:d3:fa:5b:2b:d4:98:
52:ec:51:50:28:3b:93:aa:cf:4a:f7:04:25:8b:c1:54:ca:19:
28:c1:87:be:67:ae:aa:7c:cd:b1:e0:dd:15:09:f6:01:bd:28:
01:31:1a:77:f3:3a:c8:0d:a9:24:6b:bf:e9:82:60:29:ea:e1:
65:08:f2:7c:3b:b4:b7:e9:56:bb:33:fa:e4:4e:3d:e5:d7:fa:
d1:6e:82:79:c9:3b:6d:f6:17:c8:28:8f:2f:7e:42:ee:5f:24:
3b:17:34:80:b2:d9:45:3d:6f:aa:bf:a0:5a:ed:a4:e7:e0:74:
2c:eb:6e:83:bc:43:71:8a:d4:c2:5b:13:a4:b2:1c:d3:17:6a:
2d:d9:ba:9a:3c:92:cc:47:e6:12:af:57:ed:d4:f3:e7:8f:d1:
df:d6:55:60:58:52:63:03:57:43:72:d8:df:92:b6:90:4d:21:
de:83:04:7b:f2:2a:d8:f5:be:37:76:ba:8d:9b:6a:ea:88:cf:
d4:11:55:bd:8a:c0:09:38:c1:a4:66:ec:80:08:63:f3:0e:30:
4c:b7:8f:78:37:65:46:96:61:9a:4a:77:51:f5:10:89:7c:02:
74:77:8d:b4:df:4c:f2:84:7f:26:40:49:84:7c:ca:f8:62:05:
af:c9:6b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:27:32 2025 by rpki-client