Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/EC1850C003E511F0BDE3D75DC4F9AE02.roa
File: EC1850C003E511F0BDE3D75DC4F9AE02.roa (raw, json)
Hash identifier: uEFfIdPBzET4pbG+zxhvkDgeOx1aBUTNDkTiyRF/gkA=
Subject key identifier: 3B:E0:FE:D5:B7:77:E8:97:FC:06:A2:08:0B:D8:BB:FA:FA:B6:36:D3
Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial: 135A
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/EC1850C003E511F0BDE3D75DC4F9AE02.roa
Signing time: Tue 18 Mar 2025 10:44:09 +0000
ROA not before: Tue 18 Mar 2025 10:44:09 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 58895
IP address blocks: 103.120.117.0/24 maxlen: 24
103.120.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4954 (0x135a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91809AD
Validity
Not Before: Mar 18 10:44:09 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67d94e79-0710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:5d:d3:68:a1:57:49:3e:02:63:fc:84:a8:
83:b4:8b:29:c3:21:d8:54:9c:ba:96:ae:73:be:bf:
fb:3f:11:c1:80:b7:8a:29:b5:b1:d0:b6:b1:32:e1:
6b:80:26:f5:47:a7:4c:eb:71:c4:04:7c:02:8c:82:
fd:20:f6:84:63:c5:bd:27:c5:7a:ee:a0:99:9e:71:
5f:a7:8c:66:cb:15:05:61:16:d5:02:3a:6a:b0:39:
5e:a8:61:76:f6:78:37:fa:ca:1e:51:c7:d6:db:d9:
b4:70:2e:9d:da:41:93:d7:21:d3:81:1d:46:a4:ba:
c3:3e:67:af:06:e2:91:ba:7e:4d:52:36:18:7a:1a:
be:94:63:5c:d0:64:e4:e9:23:ac:d0:be:91:a7:cf:
78:38:29:6f:e1:75:50:42:ba:8c:1a:d1:1b:d4:20:
93:4a:48:b9:2e:1e:1e:28:04:3c:3f:56:99:37:03:
c9:32:9c:01:58:3c:33:77:77:b0:c6:11:f6:2c:49:
27:91:52:47:3a:9f:b6:98:05:3e:a6:35:93:ab:d3:
1e:f4:2c:8f:e2:2c:a4:be:5f:5b:e5:9f:34:2c:e9:
4c:8e:68:7a:13:bd:6c:19:8a:e5:e3:ac:51:71:84:
da:2f:36:72:1b:43:3e:ce:b9:38:ad:43:11:fa:bc:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E0:FE:D5:B7:77:E8:97:FC:06:A2:08:0B:D8:BB:FA:FA:B6:36:D3
X509v3 Authority Key Identifier:
keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/EC1850C003E511F0BDE3D75DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.117.0-103.120.118.255
Signature Algorithm: sha256WithRSAEncryption
a2:25:84:5c:95:69:72:d9:40:3b:0d:bc:3c:62:85:89:e1:5a:
1d:f5:b5:0d:e4:4f:ee:e2:cf:74:6e:16:24:2f:57:b0:d0:c2:
21:21:10:ca:b3:61:7f:c2:a9:9c:bb:84:39:cb:70:6f:91:4e:
78:65:0c:e2:c5:d4:37:6b:e9:01:65:18:c8:6e:21:87:fb:67:
40:95:5b:60:43:29:57:56:8d:86:43:73:6d:38:51:81:73:45:
83:30:34:0a:90:21:f0:fe:3a:a6:c1:24:ea:08:a6:e0:fb:0a:
f5:9f:aa:99:0b:8c:39:ac:0e:c5:1f:77:b4:f2:33:05:e9:72:
ca:73:b4:f7:0e:b3:7b:93:bc:4b:35:39:02:8d:9d:34:e8:0c:
bf:d4:75:73:f5:f1:d9:06:26:ec:85:03:a7:5d:82:da:fc:f1:
32:24:1b:11:59:3d:cd:ef:a4:1f:60:ab:67:6e:28:89:32:6d:
56:f8:7a:14:80:f5:89:67:38:87:78:5e:a9:56:3d:bf:88:c4:
df:59:89:af:b7:40:64:3b:e7:22:f5:50:be:8c:c5:19:7c:65:
15:74:09:14:36:94:03:7b:86:8b:e6:fc:cb:ba:e1:7b:f1:33:
15:64:ac:f7:cf:ca:5c:17:93:86:de:e2:6d:f4:f1:d6:a7:2d:
e7:5f:f1:51
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICE1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG
MDNBNjA1QzMwHhcNMjUwMzE4MTA0NDA5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Q5NGU3OS0wNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyKRd02ihV0k+AmP8hKiDtIspwyHYVJy6lq5zvr/7PxHBgLeKKbWx0LaxMuFr
gCb1R6dM63HEBHwCjIL9IPaEY8W9J8V67qCZnnFfp4xmyxUFYRbVAjpqsDleqGF2
9ng3+soeUcfW29m0cC6d2kGT1yHTgR1GpLrDPmevBuKRun5NUjYYehq+lGNc0GTk
6SOs0L6Rp894OClv4XVQQrqMGtEb1CCTSki5Lh4eKAQ8P1aZNwPJMpwBWDwzd3ew
xhH2LEknkVJHOp+2mAU+pjWTq9Me9CyP4iykvl9b5Z80LOlMjmh6E71sGYrl46xR
cYTaLzZyG0M+zrk4rUMR+rzIrQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFDvg/tW3
d+iX/AaiCAvYu/r6tjbTMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3
NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODA5QUQvNjU2REQyNkFBNzY4MTFFODkzMzNDNzI1QzRGOUFFMDIvRUMxODUwQzAw
M0U1MTFGMEJERTNENzVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAGd4dQMEAGd4djANBgkqhkiG9w0BAQsFAAOCAQEAoiWE
XJVpctlAOw28PGKFieFaHfW1DeRP7uLPdG4WJC9XsNDCISEQyrNhf8KpnLuEOctw
b5FOeGUM4sXUN2vpAWUYyG4hh/tnQJVbYEMpV1aNhkNzbThRgXNFgzA0CpAh8P46
psEk6gim4PsK9Z+qmQuMOawOxR93tPIzBelyynO09w6ze5O8SzU5Ao2dNOgMv9R1
c/Xx2QYm7IUDp12C2vzxMiQbEVk9ze+kH2CrZ24oiTJtVvh6FID1iWc4h3heqVY9
v4jE31mJr7dAZDvnIvVQvozFGXxlFXQJFDaUA3uGi+b8y7rhe/EzFWSs98/KXBeT
ht7ibfTx1qct51/xUQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:33:46 2025 by rpki-client