Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/70F8E50039AF11EE8486453DC4F9AE02.roa
File: 70F8E50039AF11EE8486453DC4F9AE02.roa (raw, json)
Hash identifier: CQ2YO4KFwTMH/P0kajoe5d8Btg/O5fE6q6xcjIQsWNk=
Subject key identifier: EF:D4:31:63:03:58:34:80:E2:A5:BF:34:A5:DC:FE:2E:10:A2:B9:C5
Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
Certificate serial: 1179
Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/70F8E50039AF11EE8486453DC4F9AE02.roa
Signing time: Thu 16 Jan 2025 17:25:20 +0000
ROA not before: Thu 16 Jan 2025 17:25:20 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139009
IP address blocks: 103.126.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4473 (0x1179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91655EF
Validity
Not Before: Jan 16 17:25:20 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=678940ff-b74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:79:33:4a:c0:01:17:74:52:25:ce:8d:e9:
8c:ca:a2:e1:c6:52:9e:f0:f7:d3:27:b2:2b:62:c4:
c0:62:20:04:c7:71:9f:1c:8b:32:47:97:62:12:97:
c7:e4:f3:0c:48:74:1f:bf:14:66:13:4d:f5:52:4b:
0c:d2:a2:e5:3f:10:a8:4e:e1:48:c2:4b:5e:95:c2:
60:be:2c:f9:a8:1f:f5:38:6e:3e:a5:5d:f5:0d:33:
a2:a3:13:80:e7:38:bb:c6:3d:e7:d1:3c:52:09:04:
ac:55:df:78:5c:9b:ee:fa:19:a8:86:4b:b1:9e:1c:
74:52:35:58:07:70:19:55:55:00:48:47:d8:01:66:
f5:9b:9d:ea:8f:80:59:54:6e:2a:7e:8d:ba:21:6a:
76:78:c1:2c:b9:a0:fb:3a:15:3f:77:a2:03:f1:13:
68:3e:ab:e1:d3:c8:10:41:de:70:37:30:b6:9a:ad:
5f:90:18:59:ec:fb:9d:31:cf:9f:43:70:72:c4:49:
1c:8e:b1:df:4f:1d:07:c6:fb:4d:6d:0e:20:ff:e9:
1e:4f:82:91:4f:5e:b4:66:26:3c:22:11:5a:5c:62:
9b:07:78:69:6e:43:8a:74:55:43:bd:d3:8e:61:9d:
2e:5b:c0:6f:54:92:fd:ff:1f:a6:82:6e:5d:96:1b:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D4:31:63:03:58:34:80:E2:A5:BF:34:A5:DC:FE:2E:10:A2:B9:C5
X509v3 Authority Key Identifier:
keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/70F8E50039AF11EE8486453DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.150.0/24
Signature Algorithm: sha256WithRSAEncryption
63:46:dd:dd:ec:9e:9e:b5:8f:e6:49:4d:53:cf:a6:ba:25:c1:
10:a2:0d:5d:1c:22:29:96:46:1c:21:63:61:d5:86:0a:f2:87:
72:6b:fe:f2:39:25:4a:83:5d:c7:77:8c:47:e4:6a:f8:b8:36:
41:22:20:9c:ad:96:bc:42:9a:6f:51:a4:d4:41:b4:3c:0f:a1:
01:ad:ca:75:3d:c4:b1:3b:c7:37:6d:be:a1:5c:ba:3e:a6:3a:
e5:d3:ae:b4:3d:e2:1c:7a:be:5f:3b:75:01:2f:2d:dc:79:06:
ba:b4:f7:fa:b6:4e:79:f2:87:bb:50:ec:2f:91:fd:1e:52:ee:
f5:62:52:c9:d2:3b:45:ca:d0:e2:24:15:6e:51:f7:34:75:62:
20:8c:55:fb:ac:6a:bf:ef:d3:16:ad:51:dd:5b:ad:22:e3:ff:
43:6d:e2:ff:ca:9f:2d:8d:c3:2e:1b:f6:5f:ac:db:8b:13:bb:
df:6f:4a:d2:82:ed:1b:85:17:fb:f2:d9:a3:0d:da:85:6d:4e:
a8:6a:b3:76:c0:56:2d:15:87:a0:71:a6:a7:bb:bf:9b:26:b5:
ea:8a:b9:b8:d8:29:4d:4b:b1:04:12:0b:b6:0d:ef:2a:43:a1:
fb:61:38:e5:e2:98:39:41:5e:eb:00:ba:bf:cf:2c:e7:9e:08:
a3:b4:64:ec
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG
MEVDQjIwQTIwHhcNMjUwMTE2MTcyNTIwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg5NDBmZi1iNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqNF5M0rAARd0UiXOjemMyqLhxlKe8PfTJ7IrYsTAYiAEx3GfHIsyR5diEpfH
5PMMSHQfvxRmE031UksM0qLlPxCoTuFIwktelcJgviz5qB/1OG4+pV31DTOioxOA
5zi7xj3n0TxSCQSsVd94XJvu+hmohkuxnhx0UjVYB3AZVVUASEfYAWb1m53qj4BZ
VG4qfo26IWp2eMEsuaD7OhU/d6ID8RNoPqvh08gQQd5wNzC2mq1fkBhZ7PudMc+f
Q3ByxEkcjrHfTx0HxvtNbQ4g/+keT4KRT160ZiY8IhFaXGKbB3hpbkOKdFVDvdOO
YZ0uW8BvVJL9/x+mgm5dlhuUCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO/UMWMD
WDSA4qW/NKXc/i4QornFMB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB
QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1RUYvNjA3NzI5RDBGQUMxMTFFOEJDNzZENjcxQzRGOUFFMDIvNzBGOEU1MDAz
OUFGMTFFRTg0ODY0NTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnfpYwDQYJKoZIhvcNAQELBQADggEBAGNG3d3snp61j+ZJ
TVPPprolwRCiDV0cIimWRhwhY2HVhgryh3Jr/vI5JUqDXcd3jEfkavi4NkEiIJyt
lrxCmm9RpNRBtDwPoQGtynU9xLE7xzdtvqFcuj6mOuXTrrQ94hx6vl87dQEvLdx5
Brq09/q2Tnnyh7tQ7C+R/R5S7vViUsnSO0XK0OIkFW5R9zR1YiCMVfusar/v0xat
Ud1brSLj/0Nt4v/Kny2Nwy4b9l+s24sTu99vStKC7RuFF/vy2aMN2oVtTqhqs3bA
Vi0Vh6Bxpqe7v5smteqKubjYKU1LsQQSC7YN7ypDofthOOXimDlBXusAur/PLOee
CKO0ZOw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:52:12 2025 by rpki-client