Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/AB6C302EB5F311EDA0148B2DC4F9AE02.roa
File: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (raw, json)
Hash identifier: 4FOvuF+lrbDRETyeVF9s3HBZnjQN5y+IfUmzH88TfmQ=
Subject key identifier: E8:29:09:AD:6F:AA:1F:5D:8E:18:AB:C5:D9:80:14:91:95:2C:11:42
Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Certificate serial: 017A
Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/AB6C302EB5F311EDA0148B2DC4F9AE02.roa
Signing time: Sat 01 Mar 2025 05:26:26 +0000
ROA not before: Sat 01 Mar 2025 05:26:26 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 134597
IP address blocks: 103.55.242.0/24 maxlen: 24
103.55.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91433B3
Validity
Not Before: Mar 1 05:26:26 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67c29a81-abf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:e0:c1:44:5d:c7:ca:a0:67:0c:ea:f7:e0:
98:44:cf:cd:76:b8:f1:c6:ef:2a:da:a0:a2:b2:18:
de:88:aa:40:dc:b0:74:47:cb:e6:5e:83:54:55:bb:
34:05:8e:f2:c0:fd:7b:d0:fb:f3:2d:96:26:aa:4d:
0c:82:a7:98:48:b6:7a:6d:63:21:c5:91:ab:2d:60:
f5:d2:aa:2f:ba:bb:7f:42:43:4a:37:e9:99:5a:0c:
bd:b4:12:2f:f1:95:e5:8b:21:3b:ca:cd:66:83:fc:
ef:cf:86:b9:e4:7c:a0:13:de:c1:fb:33:a9:fc:26:
ce:b2:b9:e4:5a:bb:ea:9c:a4:56:52:a3:d2:ed:de:
09:ed:02:d2:67:8f:b0:e7:13:e5:f9:c7:26:cc:d4:
28:4e:4a:c0:e9:c1:80:ca:f9:a2:af:42:ce:90:2c:
31:93:6e:5c:fc:77:4d:70:5d:7f:1c:c9:53:1f:13:
34:78:ba:f2:bd:ca:1c:75:b6:02:6c:13:fb:a2:92:
ba:2f:3b:a1:44:08:8a:0d:07:b4:be:07:7f:f8:d3:
23:a4:0f:41:f0:78:45:5a:93:a2:69:d4:87:d0:55:
1b:07:39:55:e0:7e:ed:6a:55:5b:3a:ce:61:56:99:
d5:6c:c4:c0:56:2a:fb:e5:fe:f3:1b:c8:2e:9d:8a:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:29:09:AD:6F:AA:1F:5D:8E:18:AB:C5:D9:80:14:91:95:2C:11:42
X509v3 Authority Key Identifier:
keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/AB6C302EB5F311EDA0148B2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.55.242.0/23
Signature Algorithm: sha256WithRSAEncryption
10:89:5f:dd:88:97:00:18:7d:ca:ef:c9:65:b0:3d:87:d7:ff:
2c:d5:0c:0e:10:a2:f7:53:fb:60:79:d8:f3:8f:91:4d:a0:93:
5c:54:33:0f:16:15:db:57:db:02:9a:21:79:d3:87:d8:40:f7:
7f:87:87:ca:bb:c3:7d:5a:45:6c:da:e1:d6:15:47:5a:20:03:
e8:63:4c:15:c6:5c:0e:95:7e:4b:dc:5a:1f:55:f1:e0:7c:62:
71:e2:33:15:f1:2c:e0:b1:6a:3b:cf:20:65:50:b7:2e:62:1b:
d8:07:7c:c1:83:e4:58:b1:dc:78:2c:92:4d:dd:fc:6b:22:3d:
62:66:4d:2f:e3:53:1d:06:4c:e5:c4:23:d2:6c:bc:35:63:f2:
88:f3:69:ed:1d:66:40:40:b0:66:5f:c2:6f:56:04:bf:88:bf:
0e:bd:65:3f:a1:fc:1a:b5:78:fe:c9:04:54:95:9d:7a:69:a3:
04:e6:7b:23:f8:81:31:12:44:12:cb:e0:db:86:1b:52:58:f2:
61:82:12:ec:77:1d:2a:cb:f8:b3:cb:43:68:d9:54:bc:b2:93:
da:66:8e:17:f4:1c:9f:1a:a4:54:a3:9d:05:5a:78:d3:7b:01:
09:d7:28:54:a8:27:71:8f:98:a0:ce:c7:42:66:37:1f:f8:bc:
14:f2:9d:5f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMzQjMxMTAvBgNVBAUTKDU2QkI2RjMxMzdEOEREOUVCOTdFMzgzQkM3RjQ2MUQ5
MEY4NURERkUwHhcNMjUwMzAxMDUyNjI2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2MyOWE4MS1hYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzLLgwURdx8qgZwzq9+CYRM/Ndrjxxu8q2qCishjeiKpA3LB0R8vmXoNUVbs0
BY7ywP170PvzLZYmqk0MgqeYSLZ6bWMhxZGrLWD10qovurt/QkNKN+mZWgy9tBIv
8ZXliyE7ys1mg/zvz4a55HygE97B+zOp/CbOsrnkWrvqnKRWUqPS7d4J7QLSZ4+w
5xPl+ccmzNQoTkrA6cGAyvmir0LOkCwxk25c/HdNcF1/HMlTHxM0eLryvcocdbYC
bBP7opK6LzuhRAiKDQe0vgd/+NMjpA9B8HhFWpOiadSH0FUbBzlV4H7talVbOs5h
VpnVbMTAVir75f7zG8gunYpXpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOgpCa1v
qh9djhirxdmAFJGVLBFCMB8GA1UdIwQYMBaAFFa7bzE32N2euX44O8f0YdkPhd3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzNCMy9CREZFMThDQ0I1
RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNaNjVmamc3eF9SaDJRLUYz
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZydHZNVGZZM1o2NWZqZzd4X1JoMlEtRjNmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDMzQjMvQkRGRTE4Q0NCNUYwMTFFREE3RDBFRjdDQzRGOUFFMDIvQUI2QzMwMkVC
NUYzMTFFREEwMTQ4QjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnN/IwDQYJKoZIhvcNAQELBQADggEBABCJX92IlwAYfcrv
yWWwPYfX/yzVDA4QovdT+2B52POPkU2gk1xUMw8WFdtX2wKaIXnTh9hA93+Hh8q7
w31aRWza4dYVR1ogA+hjTBXGXA6VfkvcWh9V8eB8YnHiMxXxLOCxajvPIGVQty5i
G9gHfMGD5Fix3Hgskk3d/GsiPWJmTS/jUx0GTOXEI9JsvDVj8ojzae0dZkBAsGZf
wm9WBL+Ivw69ZT+h/Bq1eP7JBFSVnXppowTmeyP4gTESRBLL4NuGG1JY8mGCEux3
HSrL+LPLQ2jZVLyyk9pmjhf0HJ8apFSjnQVaeNN7AQnXKFSoJ3GPmKDOx0JmNx/4
vBTynV8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:59:00 2025 by rpki-client