Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/81AA7D1A3E5811EFAE13B943C4F9AE02.roa
File: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (raw, json)
Hash identifier: WIZmU+L0O9RcMZGa4g5/Y6rLFYKaR2VClhlEkEMS/7E=
Subject key identifier: 0F:54:F8:C0:5C:11:8B:3F:97:68:05:5B:EB:4B:80:7B:0C:58:EC:DB
Certificate issuer: /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Certificate serial: 66
Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/81AA7D1A3E5811EFAE13B943C4F9AE02.roa
Signing time: Fri 17 Jan 2025 05:18:34 +0000
ROA not before: Fri 17 Jan 2025 05:18:34 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 10022
IP address blocks: 103.224.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91790EC
Validity
Not Before: Jan 17 05:18:34 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6789e82a-110b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:45:52:ae:9f:a6:8e:47:40:0a:13:f1:0a:
61:b0:14:b8:74:22:c1:59:9e:12:03:62:58:15:09:
30:44:06:a0:a1:c1:00:d8:a2:58:c7:76:46:4d:65:
c0:f4:6a:46:ed:f3:68:85:3c:71:69:b4:e6:7d:00:
53:f2:eb:7b:e0:6a:18:3e:65:96:97:1a:fe:48:70:
b0:f9:c1:78:72:0f:06:2f:89:e1:2b:d3:e9:4c:eb:
66:ee:dd:db:12:04:f2:35:0e:28:7e:cf:8c:86:e0:
e8:63:6e:0b:c9:2c:50:eb:99:dd:4f:a4:18:93:fb:
60:7a:6e:68:ea:b6:0d:f3:58:b7:c2:48:98:96:7f:
1c:db:01:0c:96:46:96:c0:b0:d4:35:02:94:82:ae:
12:ed:e7:cb:c3:ff:5a:c5:13:0c:4a:5a:42:ed:3e:
b4:62:fe:ee:c7:a0:0d:ed:97:1d:d4:7d:55:cb:63:
dd:39:54:3d:ce:d0:01:4a:99:34:b5:1d:df:2b:14:
1e:18:6e:b5:27:58:92:a0:6d:92:54:f2:af:b2:cb:
8e:6e:85:c2:04:28:0d:f2:5f:61:6f:93:75:ef:2a:
85:3d:09:ce:06:5f:9c:d9:9a:7b:14:0f:7c:9c:cb:
2d:29:60:e1:dc:c4:5d:a3:38:01:68:bd:fd:c2:a5:
63:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:54:F8:C0:5C:11:8B:3F:97:68:05:5B:EB:4B:80:7B:0C:58:EC:DB
X509v3 Authority Key Identifier:
keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/81AA7D1A3E5811EFAE13B943C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:68:36:a6:b2:b3:1e:50:0a:b2:f2:d5:2b:e4:10:dc:68:83:
d0:ff:fe:b0:9f:ab:f1:09:4d:b6:25:0e:91:14:57:f7:d5:87:
7a:4d:d8:c6:61:2d:9d:f1:0a:21:a4:9f:df:ad:4c:a8:23:e0:
bb:af:47:cf:d3:85:b7:c0:95:72:d7:bc:77:71:cc:13:d0:13:
99:09:17:a0:db:a8:12:c8:b5:ce:b2:64:cf:53:a2:ec:50:be:
49:b4:2d:c9:27:80:64:54:ff:b5:93:ba:ea:7a:48:aa:44:6f:
58:3a:3f:9e:d2:cd:4f:a1:ed:7f:dc:13:a6:f2:65:91:1b:3f:
ce:8f:46:5f:d5:a7:d7:ee:fb:14:b6:c6:bd:84:53:7c:0e:a3:
79:12:5e:05:9f:e4:b5:30:ef:d6:b2:92:87:2b:35:77:23:77:
a6:31:5a:02:af:a3:b3:af:76:ff:b6:b7:e4:11:1e:77:25:1b:
3e:02:9f:d7:07:ae:e7:ee:5d:de:3c:0d:ea:ea:3d:31:ea:3d:
da:e6:4c:5b:cc:7c:9a:64:4f:75:ad:af:8d:1b:97:7d:be:bc:
15:bf:23:65:ee:16:ab:05:e3:1b:ef:1b:e6:ff:00:2f:af:8e:
14:58:d3:a7:6a:2b:8b:b7:cb:99:ac:93:b2:9c:64:2c:10:0b:
d8:e2:1d:69
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
OTBFQzExMC8GA1UEBRMoMjkzQ0UxREVEMUE2NDA0QjAwQjJDMENDRkIzRjNDRUFG
QjIxQTUwODAeFw0yNTAxMTcwNTE4MzRaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ODllODJhLTExMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCeWEVSrp+mjkdAChPxCmGwFLh0IsFZnhIDYlgVCTBEBqChwQDYoljHdkZNZcD0
akbt82iFPHFptOZ9AFPy63vgahg+ZZaXGv5IcLD5wXhyDwYvieEr0+lM62bu3dsS
BPI1Dih+z4yG4OhjbgvJLFDrmd1PpBiT+2B6bmjqtg3zWLfCSJiWfxzbAQyWRpbA
sNQ1ApSCrhLt58vD/1rFEwxKWkLtPrRi/u7HoA3tlx3UfVXLY905VD3O0AFKmTS1
Hd8rFB4YbrUnWJKgbZJU8q+yy45uhcIEKA3yX2Fvk3XvKoU9Cc4GX5zZmnsUD3yc
yy0pYOHcxF2jOAFovf3CpWO/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUD1T4wFwR
iz+XaAVb60uAewxY7NswHwYDVR0jBBgwFoAUKTzh3tGmQEsAssDM+z886vshpQgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5MEVDLzI0QjhCRkUwM0U1
ODExRUY5OTZEQTMyMUM0RjlBRTAyL0tUemgzdEdtUUVzQXNzRE0tejg4NnZzaHBR
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvS1R6aDN0R21RRXNBc3NETS16ODg2dnNocFFnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTBFQy8yNEI4QkZFMDNFNTgxMUVGOTk2REEzMjFDNEY5QUUwMi84MUFBN0QxQTNF
NTgxMUVGQUUxM0I5NDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGfgazANBgkqhkiG9w0BAQsFAAOCAQEAa2g2prKzHlAKsvLV
K+QQ3GiD0P/+sJ+r8QlNtiUOkRRX99WHek3YxmEtnfEKIaSf361MqCPgu69Hz9OF
t8CVcte8d3HME9ATmQkXoNuoEsi1zrJkz1Oi7FC+SbQtySeAZFT/tZO66npIqkRv
WDo/ntLNT6Htf9wTpvJlkRs/zo9GX9Wn1+77FLbGvYRTfA6jeRJeBZ/ktTDv1rKS
hys1dyN3pjFaAq+js692/7a35BEedyUbPgKf1weu5+5d3jwN6uo9Meo92uZMW8x8
mmRPda2vjRuXfb68Fb8jZe4WqwXjG+8b5v8AL6+OFFjTp2ori7fLmayTspxkLBAL
2OIdaQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:50:11 2025 by rpki-client