Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa
File: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (raw, json)
Hash identifier: o30eNhjoxZ8FSPolycjRhI/R0tGnW0OcwMartfSl8R0=
Subject key identifier: EE:1F:B5:E3:38:47:A0:F8:66:E8:95:8A:CE:D5:68:85:78:35:3A:15
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 090D
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa
Signing time: Tue 04 Mar 2025 21:28:47 +0000
ROA not before: Tue 04 Mar 2025 21:28:47 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137199
IP address blocks: 103.101.234.0/23 maxlen: 23
103.115.12.0/23 maxlen: 23
103.115.13.0/24 maxlen: 24
2401:d6c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317 (0x90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4
Validity
Not Before: Mar 4 21:28:47 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c7708e-3901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:72:31:f1:ed:db:0a:11:8f:2e:67:9d:21:e6:
72:19:16:f4:48:f0:02:a0:9e:0d:38:94:72:8d:8d:
18:9c:06:4f:e4:26:0f:7e:d7:c6:30:31:67:4a:e5:
47:ab:83:d5:86:32:46:6e:23:ed:0f:53:aa:e1:3e:
8d:9a:fe:e7:39:a5:d5:b6:83:41:51:4b:0a:10:80:
90:a4:07:c5:35:fa:19:f7:59:c5:39:e3:be:db:22:
e8:33:6b:45:45:14:b2:b3:66:ad:26:ff:27:b5:36:
e0:1e:ec:48:8d:0b:fe:61:e8:9a:8f:06:47:01:2e:
b8:9d:c8:40:dc:ab:d3:20:c8:78:19:86:20:a8:28:
67:3e:3d:08:53:ef:95:86:23:26:bb:c9:fc:bd:d5:
09:16:1b:a0:de:0d:c4:b1:5f:7f:a5:12:7f:47:28:
20:33:10:ee:95:12:5b:c6:52:34:ca:07:41:4c:10:
bd:6a:9a:3f:c1:d4:a3:7b:de:ec:6f:44:51:2d:4a:
55:94:cc:83:71:a3:a8:c0:33:32:af:a8:4f:69:28:
02:f0:a0:04:12:43:ff:b2:c3:28:4f:36:e0:7a:cd:
82:73:73:22:5b:3c:11:5d:8a:45:40:8b:3b:49:38:
7d:d5:62:d8:73:f8:f5:80:7c:d8:04:8c:e3:d7:78:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1F:B5:E3:38:47:A0:F8:66:E8:95:8A:CE:D5:68:85:78:35:3A:15
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.234.0/23
103.115.12.0/23
IPv6:
2401:d6c0::/32
Signature Algorithm: sha256WithRSAEncryption
34:2a:4f:92:c0:2a:00:3d:de:6f:46:2d:82:cb:18:ff:87:a9:
ba:dd:ba:b7:00:8e:6b:9f:ec:56:0f:19:ae:03:d9:d8:25:f1:
1a:ef:b0:f6:e8:18:38:5b:d9:fe:e9:b3:cd:03:8c:cb:ec:88:
5a:d0:d6:83:3f:a6:6a:d3:38:e6:36:8c:37:d4:ec:52:24:2a:
43:f0:9d:82:86:f9:1b:7c:96:8b:14:51:d5:36:40:33:aa:83:
b1:51:50:98:d2:4a:24:46:29:06:68:e6:5c:12:b2:6e:94:17:
53:eb:22:50:dc:a0:0c:c7:65:7b:39:f3:4a:ba:68:78:ff:7b:
f6:53:41:6c:48:3d:de:fb:8a:78:c7:4c:de:82:2f:bc:41:d6:
02:e2:d8:7a:71:f7:68:50:13:13:df:19:6b:e0:58:68:3d:8f:
a2:dc:ee:25:d9:e4:be:d8:64:33:ed:87:b4:66:de:b4:66:3f:
33:41:93:9e:16:2c:dc:58:bf:bf:ea:96:b9:a2:14:b5:97:98:
d6:a4:d2:7a:25:59:87:78:f5:ef:d9:84:8d:f1:57:8b:61:83:
e3:7f:10:02:24:5d:da:29:f5:d1:9b:86:e3:61:4a:b2:c6:33:
9e:29:3a:2b:48:31:7e:1a:2b:48:db:1f:93:f3:b9:f9:62:50:
34:f1:c9:ed
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3
QTI2REJEMjUwHhcNMjUwMzA0MjEyODQ3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2M3NzA4ZS0zOTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4XIx8e3bChGPLmedIeZyGRb0SPACoJ4NOJRyjY0YnAZP5CYPftfGMDFnSuVH
q4PVhjJGbiPtD1Oq4T6Nmv7nOaXVtoNBUUsKEICQpAfFNfoZ91nFOeO+2yLoM2tF
RRSys2atJv8ntTbgHuxIjQv+YeiajwZHAS64nchA3KvTIMh4GYYgqChnPj0IU++V
hiMmu8n8vdUJFhug3g3EsV9/pRJ/RyggMxDulRJbxlI0ygdBTBC9apo/wdSje97s
b0RRLUpVlMyDcaOowDMyr6hPaSgC8KAEEkP/ssMoTzbges2Cc3MiWzwRXYpFQIs7
STh91WLYc/j1gHzYBIzj13gfSwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFO4fteM4
R6D4ZuiVis7VaIV4NToVMB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC
OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkFGQTQvQjY3ODYyRkFBQjk1MTFFQUIyNTU5QzVCQzRGOUFFMDIvNjYwMkFFRTJD
RDc0MTFFRkIzREM4MTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAFnZeoDBAFncwwwDQQCAAIwBwMFACQB1sAwDQYJKoZIhvcN
AQELBQADggEBADQqT5LAKgA93m9GLYLLGP+HqbrdurcAjmuf7FYPGa4D2dgl8Rrv
sPboGDhb2f7ps80DjMvsiFrQ1oM/pmrTOOY2jDfU7FIkKkPwnYKG+Rt8losUUdU2
QDOqg7FRUJjSSiRGKQZo5lwSsm6UF1PrIlDcoAzHZXs580q6aHj/e/ZTQWxIPd77
injHTN6CL7xB1gLi2Hpx92hQExPfGWvgWGg9j6Lc7iXZ5L7YZDPth7Rm3rRmPzNB
k54WLNxYv7/qlrmiFLWXmNak0nolWYd49e/ZhI3xV4thg+N/EAIkXdop9dGbhuNh
SrLGM54pOitIMX4aK0jbH5PzufliUDTxye0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:37:36 2025 by rpki-client