Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/675707260BDA11F0A768300AC4F9AE02.roa
File: 675707260BDA11F0A768300AC4F9AE02.roa (raw, json)
Hash identifier: wilBGqna+OfcXED1b/uTuE5R5bjXwDBDwAo+DwpXl+8=
Subject key identifier: 5B:B6:AB:F6:F7:1C:EB:73:75:01:0D:50:65:36:28:43:51:27:84:1C
Certificate issuer: /CN=A91820CC/serialNumber=B746424E34E899E14CD339D073BB5F4918FD0787
Certificate serial: 02
Authority key identifier: B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/675707260BDA11F0A768300AC4F9AE02.roa
Signing time: Fri 28 Mar 2025 13:41:51 +0000
ROA not before: Fri 28 Mar 2025 13:41:51 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 30967
IP address blocks: 103.94.214.0/24 maxlen: 24
103.94.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820CC
Validity
Not Before: Mar 28 13:41:51 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67e6a71f-9dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:69:ee:b8:bf:e0:90:98:9d:5a:e2:1b:f3:
64:e2:9c:9b:25:a1:74:a0:16:36:4f:a6:29:04:25:
58:6d:b4:d2:9a:05:b9:59:07:f5:5b:15:51:d7:67:
d4:f3:7c:b6:22:0f:82:bb:26:c5:ca:f4:3d:94:e1:
59:dd:57:72:fd:5d:a7:fa:5f:95:d2:4f:49:24:bc:
f1:51:55:81:be:7e:d1:76:c3:58:88:95:93:b3:16:
4a:38:69:cf:b3:23:95:d3:17:e2:96:55:cd:f9:18:
8f:b5:5a:07:dd:91:2a:93:2f:93:7a:b1:75:c3:3d:
dd:60:bf:33:80:91:ba:a1:02:24:d0:86:0f:6f:f9:
90:53:65:7e:99:e6:e5:54:1a:f7:28:13:c1:29:8d:
5c:e7:ba:22:08:f8:9d:79:eb:a2:23:94:96:99:94:
39:ad:84:df:0e:bb:e8:34:d5:78:6d:17:1d:6a:4c:
1a:22:e6:62:b4:e9:12:fa:54:7b:83:fe:67:82:5d:
63:a4:d7:b1:b1:27:28:9b:1f:4f:41:e4:f2:ae:6d:
12:8e:0f:5e:f9:2c:d8:64:2c:14:45:56:df:5c:1c:
33:a7:50:7c:5a:1a:ca:21:03:f5:2d:d5:78:3d:2b:
eb:b7:39:09:9e:00:99:b6:0d:cb:bf:fd:b8:0c:e8:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B6:AB:F6:F7:1C:EB:73:75:01:0D:50:65:36:28:43:51:27:84:1C
X509v3 Authority Key Identifier:
keyid:B7:46:42:4E:34:E8:99:E1:4C:D3:39:D0:73:BB:5F:49:18:FD:07:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/t0ZCTjTomeFM0znQc7tfSRj9B4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0ZCTjTomeFM0znQc7tfSRj9B4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/936B43320BD911F08C607F87C4F9AE02/675707260BDA11F0A768300AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.214.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:26:6b:2a:16:70:81:78:36:4a:f5:f1:0a:67:5a:c1:91:ee:
ce:74:2b:72:5d:9b:13:b1:37:76:6b:c9:91:7a:92:74:6d:47:
5a:0b:e2:c6:40:58:fa:e2:b9:bf:73:b1:31:ac:3e:3e:a4:9b:
9b:a0:88:5e:ba:20:ec:74:3a:e4:96:dc:01:cc:3c:f6:96:ea:
30:5f:cf:36:63:2f:e4:09:b4:26:8a:91:89:21:9d:78:bf:fc:
22:36:98:cc:c2:0b:47:aa:b2:a6:7b:8e:44:ff:46:c1:22:62:
ff:b4:d8:87:8a:17:ab:71:85:e1:ae:31:75:94:ad:4d:cf:e5:
3f:ca:a1:e9:09:44:8b:99:47:b1:4a:7a:0c:00:d5:79:a5:24:
83:7a:55:56:51:ae:92:88:17:1d:10:1d:84:87:ce:da:fa:35:
e5:04:ce:17:07:21:9a:20:3b:58:cf:48:a6:02:18:5c:5f:55:
73:11:fd:f9:c8:28:a9:a9:91:3c:f8:49:9c:4f:2d:77:ef:1d:
70:12:b3:7a:bd:26:3c:74:2f:f3:bb:cc:86:cb:d2:11:fb:0b:
9f:01:fe:2b:39:1b:ec:45:62:11:68:71:f1:d4:ac:40:9b:ba:
89:b7:0f:d8:9d:03:6e:51:ab:ba:f0:ee:74:0a:11:69:8d:04:
3b:83:fd:72
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MjBDQzExMC8GA1UEBRMoQjc0NjQyNEUzNEU4OTlFMTRDRDMzOUQwNzNCQjVGNDkx
OEZEMDc4NzAeFw0yNTAzMjgxMzQxNTFaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZTZhNzFmLTlkZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkmWnuuL/gkJidWuIb82TinJsloXSgFjZPpikEJVhttNKaBblZB/VbFVHXZ9Tz
fLYiD4K7JsXK9D2U4VndV3L9Xaf6X5XST0kkvPFRVYG+ftF2w1iIlZOzFko4ac+z
I5XTF+KWVc35GI+1WgfdkSqTL5N6sXXDPd1gvzOAkbqhAiTQhg9v+ZBTZX6Z5uVU
GvcoE8EpjVznuiII+J1566IjlJaZlDmthN8Ou+g01XhtFx1qTBoi5mK06RL6VHuD
/meCXWOk17GxJyibH09B5PKubRKOD175LNhkLBRFVt9cHDOnUHxaGsohA/Ut1Xg9
K+u3OQmeAJm2Dcu//bgM6EktAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUW7ar9vcc
63N1AQ1QZTYoQ1EnhBwwHwYDVR0jBBgwFoAUt0ZCTjTomeFM0znQc7tfSRj9B4cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyMENDLzkzNkI0MzMyMEJE
OTExRjA4QzYwN0Y4N0M0RjlBRTAyL3QwWkNUalRvbWVGTTB6blFjN3RmU1JqOUI0
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdDBaQ1RqVG9tZUZNMHpuUWM3dGZTUmo5QjRjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjBDQy85MzZCNDMzMjBCRDkxMUYwOEM2MDdGODdDNEY5QUUwMi82NzU3MDcyNjBC
REExMUYwQTc2ODMwMEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWde1jANBgkqhkiG9w0BAQsFAAOCAQEAjyZrKhZwgXg2SvXx
CmdawZHuznQrcl2bE7E3dmvJkXqSdG1HWgvixkBY+uK5v3OxMaw+PqSbm6CIXrog
7HQ65JbcAcw89pbqMF/PNmMv5Am0JoqRiSGdeL/8IjaYzMILR6qypnuORP9GwSJi
/7TYh4oXq3GF4a4xdZStTc/lP8qh6QlEi5lHsUp6DADVeaUkg3pVVlGukogXHRAd
hIfO2vo15QTOFwchmiA7WM9IpgIYXF9VcxH9+cgoqamRPPhJnE8td+8dcBKzer0m
PHQv87vMhsvSEfsLnwH+Kzkb7EViEWhx8dSsQJu6ibcP2J0DblGruvDudAoRaY0E
O4P9cg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:18 2025 by rpki-client