Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/E6F081CAB4D111EFB518113FC4F9AE02.roa
File: E6F081CAB4D111EFB518113FC4F9AE02.roa (raw, json)
Hash identifier: gmtg83b40Tkb+D3gBbZ+Di+lUHrNe5TxNxrJ6h+P2/o=
Subject key identifier: A2:21:E3:B7:C2:CF:5E:87:38:35:54:17:5A:D8:B3:68:30:EB:B1:71
Certificate issuer: /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Certificate serial: 04D0
Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/E6F081CAB4D111EFB518113FC4F9AE02.roa
Signing time: Sat 07 Dec 2024 19:31:49 +0000
ROA not before: Sat 07 Dec 2024 19:31:49 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 214408
IP address blocks: 103.101.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1232 (0x4d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117373
Validity
Not Before: Dec 7 19:31:49 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6754a2a4-4e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:0d:9e:e5:23:55:45:1e:a6:40:88:2a:73:
5c:04:32:22:95:bd:6a:99:00:19:83:3f:2f:82:35:
42:48:1d:ba:b7:2b:f5:a3:ef:b4:93:d2:6e:6c:92:
2e:d0:99:11:2b:f1:4f:6f:f0:bf:ce:f8:8e:f2:37:
4c:60:a2:6e:ab:64:af:1d:ac:3f:4c:20:68:a4:b2:
0b:e1:bd:d9:75:7e:e3:31:07:73:6e:67:5c:e4:e2:
a5:60:62:ae:ce:8f:7a:6f:b5:43:74:f0:ac:62:1b:
1c:0f:16:51:83:18:8a:39:b9:f7:14:02:8e:e3:c5:
06:8b:8b:c2:b2:d4:83:93:82:39:5b:b5:70:84:bb:
13:55:d6:00:76:bd:b6:70:48:d4:72:3f:39:5a:3f:
f6:68:48:29:b8:12:d1:5f:50:f1:b6:64:79:a4:26:
c1:f6:e6:25:a0:5a:da:ff:1d:d3:0b:86:33:e6:6d:
c9:94:12:38:07:b8:6f:4c:33:d1:bd:17:ea:7a:74:
5a:b8:78:d4:68:20:09:73:4b:15:d5:40:4c:e8:4a:
e3:fc:5d:cc:51:ec:2d:de:32:c4:19:e6:60:ea:c3:
d9:81:9d:9f:46:1d:ee:4b:54:bf:76:db:98:b5:fa:
4b:5a:7d:e6:02:8c:78:66:8b:f9:02:4e:10:ce:c8:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:21:E3:B7:C2:CF:5E:87:38:35:54:17:5A:D8:B3:68:30:EB:B1:71
X509v3 Authority Key Identifier:
keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/E6F081CAB4D111EFB518113FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.85.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f6:18:bc:a1:6e:20:9d:0e:55:14:fc:85:de:e5:6a:b2:ba:
fa:f0:b8:44:8a:f7:2a:cb:ab:32:d9:d7:4e:38:d1:d9:04:0f:
28:5e:96:08:5a:22:0d:16:de:f4:9a:5c:a7:a4:f6:9d:cc:fb:
6f:c7:15:99:ae:88:93:56:a4:3c:5e:46:d1:16:8b:19:15:39:
e1:1f:f2:8c:83:37:53:bd:48:3b:fe:3d:9e:2c:9b:c5:2c:50:
b2:8c:8b:aa:f7:7d:0c:e1:c5:e5:36:e4:bd:e3:86:f1:59:7d:
c7:7e:45:c1:92:01:c5:c7:11:6c:47:c0:7a:d1:9a:88:79:d8:
5e:94:ea:3c:b4:cf:0c:03:a1:7f:b3:5e:08:f9:03:38:d1:7b:
2d:25:2c:49:15:12:95:aa:5f:bf:00:a1:ed:d6:43:fb:19:31:
38:c4:92:8b:49:bc:70:24:be:93:77:51:50:03:82:4e:9d:27:
81:df:05:1d:1c:af:0c:80:05:6c:05:14:07:51:4a:0c:c0:97:
93:df:65:c7:49:ce:86:3f:3c:78:44:2a:e9:d5:af:4d:6c:6e:
67:59:cc:d4:37:39:b0:fc:16:56:cb:84:53:d5:46:68:7b:4a:
e8:e7:95:ec:6a:b5:58:de:52:f4:02:ed:3c:b4:12:59:a8:f6:
97:1c:be:7c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTczNzMxMTAvBgNVBAUTKDYxODQxRDFFREFCRjlGRjBGNjAxOEM2MTEwMTdBRjcx
OTYyN0EyNEQwHhcNMjQxMjA3MTkzMTQ5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzU0YTJhNC00ZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA21YNnuUjVUUepkCIKnNcBDIilb1qmQAZgz8vgjVCSB26tyv1o++0k9JubJIu
0JkRK/FPb/C/zviO8jdMYKJuq2SvHaw/TCBopLIL4b3ZdX7jMQdzbmdc5OKlYGKu
zo96b7VDdPCsYhscDxZRgxiKObn3FAKO48UGi4vCstSDk4I5W7VwhLsTVdYAdr22
cEjUcj85Wj/2aEgpuBLRX1DxtmR5pCbB9uYloFra/x3TC4Yz5m3JlBI4B7hvTDPR
vRfqenRauHjUaCAJc0sV1UBM6Erj/F3MUewt3jLEGeZg6sPZgZ2fRh3uS1S/dtuY
tfpLWn3mAox4Zov5Ak4QzsjQJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKIh47fC
z16HODVUF1rYs2gw67FxMB8GA1UdIwQYMBaAFGGEHR7av5/w9gGMYRAXr3GWJ6JN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM3My9CRkE5QzM2MjIz
QUExMUVDQTgxMTZCMjdDNEY5QUUwMi9ZWVFkSHRxX25fRDJBWXhoRUJldmNaWW5v
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lZUWRIdHFfbl9EMkFZeGhFQmV2Y1pZbm9rMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTczNzMvQkZBOUMzNjIyM0FBMTFFQ0E4MTE2QjI3QzRGOUFFMDIvRTZGMDgxQ0FC
NEQxMTFFRkI1MTgxMTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZVUwDQYJKoZIhvcNAQELBQADggEBABX2GLyhbiCdDlUU
/IXe5WqyuvrwuESK9yrLqzLZ10440dkEDyhelghaIg0W3vSaXKek9p3M+2/HFZmu
iJNWpDxeRtEWixkVOeEf8oyDN1O9SDv+PZ4sm8UsULKMi6r3fQzhxeU25L3jhvFZ
fcd+RcGSAcXHEWxHwHrRmoh52F6U6jy0zwwDoX+zXgj5AzjRey0lLEkVEpWqX78A
oe3WQ/sZMTjEkotJvHAkvpN3UVADgk6dJ4HfBR0crwyABWwFFAdRSgzAl5PfZcdJ
zoY/PHhEKunVr01sbmdZzNQ3ObD8FlbLhFPVRmh7SujnlexqtVjeUvQC7Ty0Elmo
9pccvnw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:48:40 2025 by rpki-client