Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/6F706208BE0F11EB90239C1AC4F9AE02.roa
File: 6F706208BE0F11EB90239C1AC4F9AE02.roa (raw, json)
Hash identifier: aJNEKMighzJgRijL/uKI8yCdGKsKV/KJafHUF4cH4Rw=
Subject key identifier: 1A:50:4E:AD:58:30:95:C3:C3:56:3F:FD:15:4F:7D:98:BB:E9:4E:0B
Certificate issuer: /CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71
Certificate serial: 0594
Authority key identifier: 61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/6F706208BE0F11EB90239C1AC4F9AE02.roa
Signing time: Thu 30 Jan 2025 23:42:36 +0000
ROA not before: Thu 30 Jan 2025 23:42:36 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 63954
IP address blocks: 103.51.220.0/24 maxlen: 24
103.94.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1428 (0x594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127656
Validity
Not Before: Jan 30 23:42:36 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=679c0e6c-1137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:b6:f5:f0:76:64:2b:e1:51:8b:05:f0:6c:
04:9c:cf:b0:c6:18:98:97:3a:b0:43:27:a4:c3:5a:
3a:4d:d1:22:32:ff:95:11:58:91:2a:97:3f:7d:90:
37:ea:67:b2:c2:86:b4:0d:e2:96:f3:98:32:76:40:
6a:1f:de:72:76:a3:93:0c:a0:ea:d1:e3:b8:a1:8b:
22:66:a0:b3:b5:61:13:d8:85:06:94:a2:a9:8c:49:
de:04:6c:34:26:e4:2a:5b:73:0b:0c:e9:86:12:4f:
f7:a8:34:ba:4c:6f:30:17:61:b3:a9:6a:9b:a4:34:
3c:52:63:82:10:39:e0:66:32:42:67:aa:ce:2c:b5:
29:12:14:70:d0:31:61:3b:4a:e1:a8:5d:b5:7b:b9:
09:1c:cf:14:f0:88:dd:16:55:dd:a5:80:37:41:b3:
b9:06:a4:4c:92:71:41:ed:13:9f:ff:ad:e6:c1:a0:
64:52:d0:7f:b0:43:c4:e3:79:49:ac:2f:17:46:9b:
ae:07:b4:cc:ed:c1:2d:cc:98:db:a5:67:30:3c:b6:
7e:f1:bf:fe:e5:a1:ea:25:ec:c1:25:a5:5e:e2:93:
d5:e3:3d:b3:95:f3:bc:66:d6:84:c5:32:c7:be:43:
44:d4:19:04:40:74:9e:99:93:bf:3d:9a:f7:92:c5:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:50:4E:AD:58:30:95:C3:C3:56:3F:FD:15:4F:7D:98:BB:E9:4E:0B
X509v3 Authority Key Identifier:
keyid:61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/6F706208BE0F11EB90239C1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.220.0/24
103.94.102.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0a:96:b7:f3:31:23:4c:05:a9:70:50:db:d4:b7:14:c3:d4:
fd:cd:1b:a4:3a:50:7b:2e:40:cf:8e:f1:61:cb:99:d1:37:b0:
8a:20:50:d3:d4:57:ae:71:3a:b5:9f:07:fe:46:a2:11:69:73:
fd:f1:fc:14:dc:cd:df:9a:7b:d7:bc:d4:1d:01:66:37:67:3d:
2c:ee:53:0b:46:26:f9:f5:c8:0a:8b:96:08:c6:84:7a:5a:ab:
8c:8d:b5:18:a1:5e:00:b5:9d:40:84:f7:95:21:e6:b6:7f:40:
03:f0:c9:c5:45:f6:f8:89:81:0a:a0:ac:b1:d6:cc:f1:eb:20:
ce:e1:2d:ac:37:cf:0c:a9:80:eb:b5:af:1f:5a:a9:09:65:40:
68:19:25:22:e1:a3:33:0a:da:86:f0:1f:3b:7d:ee:37:54:d4:
42:d4:ff:7b:cf:98:dc:ea:69:f3:a6:86:90:3c:f9:14:f9:be:
8b:da:3d:04:df:82:64:2a:ef:26:60:9d:52:6d:6e:87:88:21:
16:f4:b4:54:85:97:80:2c:76:3b:e7:72:f0:bf:6e:34:df:ac:
05:5b:b2:fd:f6:47:5e:86:46:b9:f7:0c:5c:41:d6:5d:be:f7:
73:bb:f7:0e:71:ab:ba:39:da:db:44:26:52:9a:16:c8:fd:a5:
fe:cc:b4:a3
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc2NTYxMTAvBgNVBAUTKDYxQjBBMTFCRDk0NEJDREE4NjVCQjlCMUZCRjdFRTA2
RDU3M0JENzEwHhcNMjUwMTMwMjM0MjM2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzljMGU2Yy0xMTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsA629fB2ZCvhUYsF8GwEnM+wxhiYlzqwQyekw1o6TdEiMv+VEViRKpc/fZA3
6meywoa0DeKW85gydkBqH95ydqOTDKDq0eO4oYsiZqCztWET2IUGlKKpjEneBGw0
JuQqW3MLDOmGEk/3qDS6TG8wF2GzqWqbpDQ8UmOCEDngZjJCZ6rOLLUpEhRw0DFh
O0rhqF21e7kJHM8U8IjdFlXdpYA3QbO5BqRMknFB7ROf/63mwaBkUtB/sEPE43lJ
rC8XRpuuB7TM7cEtzJjbpWcwPLZ+8b/+5aHqJezBJaVe4pPV4z2zlfO8ZtaExTLH
vkNE1BkEQHSemZO/PZr3ksWB4QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBpQTq1Y
MJXDw1Y//RVPfZi76U4LMB8GA1UdIwQYMBaAFGGwoRvZRLzahlu5sfv37gbVc71x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY1Ni84OEU4RTQyRUJF
MEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZOcUdXN214LV9mdUJ0Vnp2
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liQ2hHOWxFdk5xR1c3bXgtX2Z1QnRWenZYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc2NTYvODhFOEU0MkVCRTBDMTFFQkEzQkRBQjE4QzRGOUFFMDIvNkY3MDYyMDhC
RTBGMTFFQjkwMjM5QzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnM9wDBABnXmYwDQYJKoZIhvcNAQELBQADggEBAHwKlrfz
MSNMBalwUNvUtxTD1P3NG6Q6UHsuQM+O8WHLmdE3sIogUNPUV65xOrWfB/5GohFp
c/3x/BTczd+ae9e81B0BZjdnPSzuUwtGJvn1yAqLlgjGhHpaq4yNtRihXgC1nUCE
95Uh5rZ/QAPwycVF9viJgQqgrLHWzPHrIM7hLaw3zwypgOu1rx9aqQllQGgZJSLh
ozMK2obwHzt97jdU1ELU/3vPmNzqafOmhpA8+RT5vovaPQTfgmQq7yZgnVJtboeI
IRb0tFSFl4AsdjvncvC/bjTfrAVbsv32R16GRrn3DFxB1l2+93O79w5xq7o52ttE
JlKaFsj9pf7MtKM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:16:19 2025 by rpki-client