Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/FFC266D67AB911ED876A9C69C4F9AE02.roa
File: FFC266D67AB911ED876A9C69C4F9AE02.roa (raw, json)
Hash identifier: x+rV8NMDxJnP7Y4pFMvSOchKU5gJBi1Knt1w24Yg258=
Subject key identifier: 37:A1:40:FA:60:74:54:FE:17:24:2F:00:3A:91:07:B3:0D:DD:DF:0B
Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Certificate serial: 0171
Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/FFC266D67AB911ED876A9C69C4F9AE02.roa
Signing time: Wed 27 Nov 2024 02:26:25 +0000
ROA not before: Wed 27 Nov 2024 02:26:25 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 150681
IP address blocks: 103.53.160.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116907
Validity
Not Before: Nov 27 02:26:25 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67468350-6bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:f1:9e:02:fa:2d:56:e4:9f:a1:ec:67:13:
b2:7d:d5:ed:99:85:e3:9c:c3:0d:b5:cd:87:b4:d7:
be:8a:0e:a4:b6:3b:86:6b:91:3a:40:e8:1a:17:cb:
6b:c9:de:27:49:7a:c6:b3:14:bc:17:bc:2f:e7:4c:
3d:f3:07:a6:a8:27:fc:1b:60:fa:25:14:09:47:b7:
ba:ec:be:98:5e:cf:19:62:5b:f3:9b:3c:6a:51:77:
8c:7d:83:6c:ea:0a:7b:49:14:1d:36:b9:0e:f6:62:
37:67:27:81:11:44:41:ce:b5:47:66:5f:58:b4:23:
c7:44:2b:fc:96:49:61:96:77:d5:35:8b:c5:bd:0d:
99:86:12:c8:7b:29:41:b7:5f:d5:7d:ad:01:9f:95:
68:e7:e3:2d:47:d1:79:14:26:0e:92:11:b6:4e:cd:
8f:4f:c5:c3:6d:94:89:ea:6f:67:f7:13:38:cd:01:
5d:69:08:8e:41:3e:32:10:f3:7a:48:d8:f5:12:ab:
49:eb:af:b5:43:10:69:e5:66:a6:6b:c9:26:f1:31:
e8:48:f9:36:3e:ba:f4:7e:ae:bc:fb:47:8c:0b:11:
a1:83:4c:d2:c9:b0:c6:58:ec:61:9c:c4:2c:02:c4:
11:df:3f:14:8e:6e:bd:ed:bc:7c:e4:eb:76:04:6c:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A1:40:FA:60:74:54:FE:17:24:2F:00:3A:91:07:B3:0D:DD:DF:0B
X509v3 Authority Key Identifier:
keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/FFC266D67AB911ED876A9C69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.53.160.0/23
Signature Algorithm: sha256WithRSAEncryption
80:a0:e2:07:40:ab:89:5e:7b:3c:3c:02:23:09:3b:1e:d1:a7:
e0:09:26:0d:35:32:b2:9c:f8:88:fd:50:45:2c:fd:76:52:af:
12:94:6a:ca:f0:3c:b5:93:7c:e4:16:7e:bf:5d:cb:ee:f7:8d:
3b:12:6e:23:30:ba:40:f3:8b:95:64:2e:af:43:ad:f0:b7:2d:
ca:01:bb:b6:4c:5d:45:d7:b6:c3:d7:e1:c7:9d:b4:a3:48:96:
98:d1:58:38:a6:4b:6c:16:d5:9e:70:7d:a5:1b:d7:04:62:b4:
a3:60:9a:f0:56:34:31:4b:5f:a2:04:e9:55:08:b2:25:0a:d1:
31:48:58:54:eb:54:b8:e7:79:ce:ad:31:9f:3f:eb:f5:96:c8:
04:c1:67:5b:f1:16:90:c3:55:1a:0e:0c:6a:dc:43:0b:03:29:
5d:e0:68:f8:05:96:74:ea:a5:ab:5d:4d:59:3e:d3:d5:96:3f:
88:6c:7c:d2:bd:3a:8d:36:17:a0:92:81:46:29:ea:6c:f7:56:
34:cb:cb:21:fa:29:69:81:73:3f:3b:8c:26:de:e0:9a:cf:d3:
38:7d:0b:55:e1:26:4a:5c:87:80:c3:de:b7:04:fb:0f:c3:74:
af:e9:43:9d:04:21:d2:f0:67:0e:0f:56:9f:c1:c9:7d:a1:3d:
de:ec:a7:ed
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5MDcxMTAvBgNVBAUTKENBMDA3MEFDNTIwMUQ2RjZBNzc1QUE1MjVENTNEOEUz
MzBFMzIwOTYwHhcNMjQxMTI3MDIyNjI1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQ2ODM1MC02YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxm7xngL6LVbkn6HsZxOyfdXtmYXjnMMNtc2HtNe+ig6ktjuGa5E6QOgaF8tr
yd4nSXrGsxS8F7wv50w98wemqCf8G2D6JRQJR7e67L6YXs8ZYlvzmzxqUXeMfYNs
6gp7SRQdNrkO9mI3ZyeBEURBzrVHZl9YtCPHRCv8lklhlnfVNYvFvQ2ZhhLIeylB
t1/Vfa0Bn5Vo5+MtR9F5FCYOkhG2Ts2PT8XDbZSJ6m9n9xM4zQFdaQiOQT4yEPN6
SNj1EqtJ66+1QxBp5Wama8km8THoSPk2Prr0fq68+0eMCxGhg0zSybDGWOxhnMQs
AsQR3z8Ujm697bx85Ot2BGxvoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDehQPpg
dFT+FyQvADqRB7MN3d8LMB8GA1UdIwQYMBaAFMoAcKxSAdb2p3WqUl1T2OMw4yCW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkwNy9CNTZBN0NCMDdB
QjcxMUVEOUI5NTM1NjlDNEY5QUUwMi95Z0J3ckZJQjF2YW5kYXBTWFZQWTR6RGpJ
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lnQndyRklCMXZhbmRhcFNYVlBZNHpEaklKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY5MDcvQjU2QTdDQjA3QUI3MTFFRDlCOTUzNTY5QzRGOUFFMDIvRkZDMjY2RDY3
QUI5MTFFRDg3NkE5QzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnNaAwDQYJKoZIhvcNAQELBQADggEBAICg4gdAq4leezw8
AiMJOx7Rp+AJJg01MrKc+Ij9UEUs/XZSrxKUasrwPLWTfOQWfr9dy+73jTsSbiMw
ukDzi5VkLq9DrfC3LcoBu7ZMXUXXtsPX4cedtKNIlpjRWDimS2wW1Z5wfaUb1wRi
tKNgmvBWNDFLX6IE6VUIsiUK0TFIWFTrVLjnec6tMZ8/6/WWyATBZ1vxFpDDVRoO
DGrcQwsDKV3gaPgFlnTqpatdTVk+09WWP4hsfNK9Oo02F6CSgUYp6mz3VjTLyyH6
KWmBcz87jCbe4JrP0zh9C1XhJkpch4DD3rcE+w/DdK/pQ50EIdLwZw4PVp/ByX2h
Pd7sp+0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:40:06 2025 by rpki-client