Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F69540BA810811ED9EA03683C4F9AE02.roa
File: F69540BA810811ED9EA03683C4F9AE02.roa (raw, json)
Hash identifier: AmVibyk3kyTCjjmayzEhVr/vWHjKhAHUPjsO+1Nf/Sw=
Subject key identifier: 78:A2:1D:33:F1:8F:53:A1:3A:80:78:DD:5F:37:D2:4C:62:BB:41:55
Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial: 0137
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F69540BA810811ED9EA03683C4F9AE02.roa
Signing time: Sat 03 Aug 2024 04:54:58 +0000
ROA not before: Sat 03 Aug 2024 04:54:58 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 16509
IP address blocks: 103.190.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91781C0
Validity
Not Before: Aug 3 04:54:58 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66adb822-ed2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:d0:8d:02:26:12:e8:03:8e:f6:7a:c0:73:
6f:4d:4e:02:6c:c1:b0:55:a6:f8:a1:a3:b1:57:24:
ab:66:0b:5b:52:d5:4b:9d:b1:d8:e5:2b:14:a1:4d:
ff:54:9f:e1:6d:43:6d:0c:24:8e:a5:9c:a4:26:10:
7d:e6:78:ea:3f:6b:85:fe:34:24:e9:3e:d1:f0:70:
ec:d9:1f:ac:2d:8d:73:27:52:57:ff:31:c8:f7:3a:
1b:3f:93:f1:66:73:f2:b5:e0:1c:be:58:9a:c3:4f:
70:d2:14:d4:55:3f:2c:3a:dc:63:90:8b:e6:78:da:
10:98:70:d8:31:08:ca:a1:41:47:14:72:29:60:97:
2b:05:06:61:bd:f1:96:5b:8b:85:96:a3:5b:f7:9d:
97:3e:84:aa:75:b6:99:55:10:4d:27:4f:43:83:4c:
4d:77:a7:d4:5c:41:5e:e5:64:16:e7:ae:e8:cd:3c:
5c:4f:15:d0:39:b1:bf:03:95:49:2c:17:25:93:14:
1d:25:87:e4:cf:67:3d:13:01:4d:f1:15:2c:74:7d:
32:ad:c8:52:28:69:67:5f:34:bf:62:a2:38:8f:77:
cd:4a:bf:ca:ad:8a:c7:9b:fa:e4:6b:d9:f9:e2:d1:
18:84:c1:55:21:b2:19:a7:70:20:50:10:6c:22:81:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A2:1D:33:F1:8F:53:A1:3A:80:78:DD:5F:37:D2:4C:62:BB:41:55
X509v3 Authority Key Identifier:
keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F69540BA810811ED9EA03683C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.166.0/24
Signature Algorithm: sha256WithRSAEncryption
45:10:1c:7a:5f:9e:6c:b0:6f:a2:4b:ea:5a:79:c3:1c:9e:28:
66:c5:fc:2b:d2:98:2e:27:e1:41:9d:f1:27:43:93:68:e2:d4:
f8:2b:86:de:84:d0:e1:56:90:e5:d6:6d:59:0d:34:ad:cb:1b:
f7:4c:82:2c:08:c1:03:18:79:34:1b:7b:0b:db:1c:77:46:c5:
8e:28:1c:15:f9:ba:7c:10:18:ad:11:22:43:c3:72:f7:e6:64:
83:51:b0:0b:79:1f:fd:e4:c8:8f:11:a6:1f:86:fc:19:20:7f:
c9:30:21:b3:4d:f2:55:03:7a:15:b1:e5:05:a1:0f:14:52:be:
db:ad:f2:85:b0:c5:dc:d8:d4:c9:59:1c:d7:d4:a8:cf:fc:cd:
c3:85:b1:b3:46:5f:89:b8:f7:e8:6c:91:19:5e:67:91:fa:d4:
20:e7:16:c3:b1:b3:03:83:b2:bf:a2:37:15:3b:6d:85:44:9c:
4f:34:a1:1e:cc:50:d0:5e:13:86:ec:08:91:3e:22:50:ac:ae:
99:17:27:99:42:eb:5d:5f:e9:e6:6c:61:9b:f6:e9:ff:0f:cd:
3d:2c:3a:5e:1a:75:5a:4f:b7:de:19:a6:09:42:7d:73:3c:7e:
01:03:44:aa:10:3d:c7:3f:c9:0b:92:a4:0d:cb:a2:1e:11:6e:
a3:f2:65:5a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1
N0U4QzEzQ0UwHhcNMjQwODAzMDQ1NDU4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmFkYjgyMi1lZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyCjQjQImEugDjvZ6wHNvTU4CbMGwVab4oaOxVySrZgtbUtVLnbHY5SsUoU3/
VJ/hbUNtDCSOpZykJhB95njqP2uF/jQk6T7R8HDs2R+sLY1zJ1JX/zHI9zobP5Px
ZnPyteAcvliaw09w0hTUVT8sOtxjkIvmeNoQmHDYMQjKoUFHFHIpYJcrBQZhvfGW
W4uFlqNb952XPoSqdbaZVRBNJ09Dg0xNd6fUXEFe5WQW567ozTxcTxXQObG/A5VJ
LBclkxQdJYfkz2c9EwFN8RUsdH0yrchSKGlnXzS/YqI4j3fNSr/KrYrHm/rka9n5
4tEYhMFVIbIZp3AgUBBsIoHBnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHiiHTPx
j1OhOoB43V830kxiu0FVMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx
MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzgxQzAvMkYyODlFRDY4MTA0MTFFREJFQzY1MDg3QzRGOUFFMDIvRjY5NTQwQkE4
MTA4MTFFRDlFQTAzNjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnvqYwDQYJKoZIhvcNAQELBQADggEBAEUQHHpfnmywb6JL
6lp5wxyeKGbF/CvSmC4n4UGd8SdDk2ji1Pgrht6E0OFWkOXWbVkNNK3LG/dMgiwI
wQMYeTQbewvbHHdGxY4oHBX5unwQGK0RIkPDcvfmZINRsAt5H/3kyI8Rph+G/Bkg
f8kwIbNN8lUDehWx5QWhDxRSvtut8oWwxdzY1MlZHNfUqM/8zcOFsbNGX4m49+hs
kRleZ5H61CDnFsOxswODsr+iNxU7bYVEnE80oR7MUNBeE4bsCJE+IlCsrpkXJ5lC
611f6eZsYZv26f8PzT0sOl4adVpPt94ZpglCfXM8fgEDRKoQPcc/yQuSpA3Loh4R
bqPyZVo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:53:02 2025 by rpki-client