Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/C56E8DD2724511EEBCA61115C4F9AE02.roa
File: C56E8DD2724511EEBCA61115C4F9AE02.roa (raw, json)
Hash identifier: 09bFX2dGjr3s64xPntk+AHhbgnnoKQa9dhQxXv7NDRc=
Subject key identifier: 0F:4F:E2:D9:5B:B3:90:19:EA:C5:AD:C4:53:AE:39:26:82:6E:11:25
Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial: 06F2
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/C56E8DD2724511EEBCA61115C4F9AE02.roa
Signing time: Tue 14 Jan 2025 21:40:51 +0000
ROA not before: Tue 14 Jan 2025 21:40:51 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150774
IP address blocks: 103.159.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1778 (0x6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D85E
Validity
Not Before: Jan 14 21:40:51 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6786d9e3-8030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:e8:fc:d1:7b:64:76:51:3c:e5:46:03:4f:
a4:9c:cd:2c:51:cb:9e:70:1a:85:21:ef:df:cf:5d:
05:4b:54:1f:39:77:26:bf:da:ed:8e:10:9e:bc:35:
e5:5a:7d:f6:be:83:c7:ee:3f:98:9f:0c:23:20:a9:
16:2c:01:3f:d7:53:e4:28:a4:cd:9b:e7:74:c6:63:
cb:7a:e0:d0:f1:aa:85:f4:46:47:0c:a4:58:4a:a5:
52:09:17:a1:cc:29:19:6a:e0:77:a2:09:4d:69:b4:
61:8e:86:6a:06:d1:e8:79:d9:50:4b:0c:c9:57:ff:
54:9b:ad:73:8c:1d:3c:ce:f7:85:1f:76:42:64:58:
9d:4e:10:a4:d4:cc:67:5e:38:8c:25:04:f9:6a:16:
08:1a:c7:6b:4c:b7:39:72:26:2f:83:8d:bb:01:bb:
05:be:d0:55:e1:b9:5e:6b:a1:72:10:ce:18:8c:78:
ac:03:6b:87:3b:8a:e1:07:96:99:4b:5b:25:19:02:
f0:10:41:4f:79:db:99:29:53:99:4c:75:53:85:46:
34:86:82:ec:37:99:9d:54:1b:80:6f:5a:6c:8e:fa:
55:9b:e4:9a:b4:77:c9:e7:3a:ef:e3:1f:00:a9:c7:
dc:33:ac:82:0b:e8:2a:e7:84:19:b5:b8:51:ad:49:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4F:E2:D9:5B:B3:90:19:EA:C5:AD:C4:53:AE:39:26:82:6E:11:25
X509v3 Authority Key Identifier:
keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/C56E8DD2724511EEBCA61115C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7b:9c:f1:8b:58:26:b8:23:b1:2c:d5:d1:c3:a3:db:c6:19:
48:3c:4b:a5:28:7d:e2:62:8c:38:18:59:ae:af:b0:4a:88:5d:
23:e6:6e:e9:d1:b0:52:24:cc:68:04:cf:3f:72:87:f4:fa:57:
86:09:b6:fd:07:20:9c:23:8c:cd:ad:98:05:87:9a:10:3d:b9:
6e:d5:59:c4:5f:12:dd:a6:e3:59:ad:db:55:fb:46:15:ac:e0:
52:a9:89:5b:86:de:e5:41:26:ac:35:46:5f:7c:f7:8d:d8:32:
c9:a6:23:a4:69:6d:95:dc:82:0c:73:f3:0f:e7:37:85:ff:d7:
9e:78:30:8f:7d:ec:d5:1e:e9:ba:1a:27:ef:33:de:0e:a5:7b:
dd:59:4f:9e:9d:6d:31:48:71:b0:68:3b:fe:32:e2:b8:ef:61:
a7:0d:54:cb:97:59:1f:9f:d3:95:82:b7:43:36:39:95:21:67:
fb:96:b2:39:59:d4:ac:87:4b:f4:6a:6d:11:5b:eb:89:bb:16:
67:53:6b:31:d5:2e:4b:5c:1e:d6:76:19:47:d9:0c:fd:e5:4e:
56:06:81:e5:dd:96:70:33:d6:41:29:47:b3:14:56:4c:5d:7b:
f4:d5:82:bd:27:74:0b:08:68:84:d7:b4:aa:ba:bf:71:56:6f:
41:2c:b2:11
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC
RTM0OTBFNzAwHhcNMjUwMTE0MjE0MDUxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg2ZDllMy04MDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv17o/NF7ZHZRPOVGA0+knM0sUcuecBqFIe/fz10FS1QfOXcmv9rtjhCevDXl
Wn32voPH7j+YnwwjIKkWLAE/11PkKKTNm+d0xmPLeuDQ8aqF9EZHDKRYSqVSCReh
zCkZauB3oglNabRhjoZqBtHoedlQSwzJV/9Um61zjB08zveFH3ZCZFidThCk1Mxn
XjiMJQT5ahYIGsdrTLc5ciYvg427AbsFvtBV4blea6FyEM4YjHisA2uHO4rhB5aZ
S1slGQLwEEFPeduZKVOZTHVThUY0hoLsN5mdVBuAb1psjvpVm+SatHfJ5zrv4x8A
qcfcM6yCC+gq54QZtbhRrUklQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA9P4tlb
s5AZ6sWtxFOuOSaCbhElMB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC
QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ4NUUvNzNFRjkwOUMzQkI1MTFFQkI0RDEzNzdEQzRGOUFFMDIvQzU2RThERDI3
MjQ1MTFFRUJDQTYxMTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnn6swDQYJKoZIhvcNAQELBQADggEBAI17nPGLWCa4I7Es
1dHDo9vGGUg8S6UofeJijDgYWa6vsEqIXSPmbunRsFIkzGgEzz9yh/T6V4YJtv0H
IJwjjM2tmAWHmhA9uW7VWcRfEt2m41mt21X7RhWs4FKpiVuG3uVBJqw1Rl98943Y
MsmmI6RpbZXcggxz8w/nN4X/1554MI997NUe6boaJ+8z3g6le91ZT56dbTFIcbBo
O/4y4rjvYacNVMuXWR+f05WCt0M2OZUhZ/uWsjlZ1KyHS/RqbRFb64m7FmdTazHV
LktcHtZ2GUfZDP3lTlYGgeXdlnAz1kEpR7MUVkxde/TVgr0ndAsIaITXtKq6v3FW
b0EsshE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:39 2025 by rpki-client