Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa
File: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (raw, json)
Hash identifier: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY=
Subject key identifier: E0:96:69:DF:DB:92:48:C2:64:44:5E:32:B5:F2:78:60:84:5E:A3:D0
Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC
Certificate serial: 07D2
Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa
Signing time: Tue 28 Jan 2025 20:39:44 +0000
ROA not before: Tue 28 Jan 2025 20:39:44 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 132512
IP address blocks: 103.244.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189E7C
Validity
Not Before: Jan 28 20:39:44 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6799408f-3167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:c2:a6:bb:29:4f:d9:ce:7f:b8:fd:47:93:
3e:04:82:54:07:34:e0:2f:35:76:4d:f0:da:68:1f:
69:4b:ba:62:a2:1a:c0:90:ae:bf:a7:c8:1e:35:48:
e9:59:c5:36:90:ba:93:08:e0:d6:98:e5:c6:18:35:
df:6e:b5:ee:34:2d:7d:19:3c:67:12:57:cb:8f:5b:
52:4c:9b:f4:5e:4c:9f:0f:2b:2a:ef:21:ea:57:e5:
a9:ef:d3:cd:61:8f:2e:14:9e:86:32:cb:0e:47:f3:
a5:17:fa:a2:17:7f:1c:85:9d:a7:de:4e:b3:05:73:
6f:fe:be:60:2f:4e:36:58:ed:31:05:7b:0c:b1:a9:
76:33:13:c7:3c:cc:c6:97:ac:67:7b:2e:2a:9b:fd:
08:57:17:24:49:33:09:a2:93:30:1c:0e:10:fc:49:
19:10:ea:72:c3:4e:c1:1f:d5:4d:da:19:a9:10:c2:
db:5a:30:82:50:14:02:29:65:bc:99:f5:e9:9b:29:
41:2c:39:e6:1e:c7:24:3c:e4:82:cb:b8:d8:aa:25:
87:e1:81:46:a3:45:86:36:b1:56:30:0f:16:cc:da:
52:4e:b5:ec:80:a4:64:8c:7d:ea:a5:1b:e8:73:96:
7b:6d:cf:6d:ec:08:ed:00:31:85:46:2d:32:93:13:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:96:69:DF:DB:92:48:C2:64:44:5E:32:B5:F2:78:60:84:5E:A3:D0
X509v3 Authority Key Identifier:
keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a0:95:c7:c2:a1:54:84:d9:8e:f2:89:92:f7:96:ce:be:19:
05:d3:1c:48:c3:09:09:9c:4c:cb:74:96:3f:ec:41:d5:79:34:
03:b4:93:bb:ca:a2:ff:02:13:c5:b8:f0:31:89:aa:78:a8:e1:
38:35:58:54:97:bd:28:3d:76:47:58:8f:e6:ec:2a:65:cb:e9:
f4:0d:b0:73:85:55:e2:42:53:79:a7:dc:c7:18:5e:f5:a8:45:
bd:8d:85:88:cc:9f:6d:dd:34:56:f5:40:01:f5:9e:5d:7c:cf:
de:11:4a:91:d1:52:94:09:3a:94:b8:f8:e5:76:8a:1d:f6:cd:
64:11:fb:15:58:07:18:dc:ea:d1:7d:cf:cd:12:9f:96:8c:d3:
f3:f8:03:6b:32:52:ee:d5:d9:ab:aa:ea:45:cb:e1:5e:ec:ed:
d9:22:ea:cc:bf:5f:69:5f:1d:ee:83:84:ff:75:f1:b7:56:c9:
83:26:08:41:ce:2d:e1:87:db:72:7d:a6:cd:8f:98:53:a4:57:
5e:09:e3:e1:b1:39:7c:c5:b1:9e:2e:f0:47:65:99:d7:23:a7:
d1:fd:69:5b:4b:f5:3a:9b:25:8e:fb:b8:c8:09:14:6b:3f:f8:
cf:0c:af:25:94:93:18:1a:25:c2:75:4c:d9:8a:68:14:8e:fa:
aa:9a:9a:6b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw
OTlENTQ3Q0MwHhcNMjUwMTI4MjAzOTQ0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk5NDA4Zi0zMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyFnCprspT9nOf7j9R5M+BIJUBzTgLzV2TfDaaB9pS7piohrAkK6/p8geNUjp
WcU2kLqTCODWmOXGGDXfbrXuNC19GTxnElfLj1tSTJv0XkyfDysq7yHqV+Wp79PN
YY8uFJ6GMssOR/OlF/qiF38chZ2n3k6zBXNv/r5gL042WO0xBXsMsal2MxPHPMzG
l6xney4qm/0IVxckSTMJopMwHA4Q/EkZEOpyw07BH9VN2hmpEMLbWjCCUBQCKWW8
mfXpmylBLDnmHsckPOSCy7jYqiWH4YFGo0WGNrFWMA8WzNpSTrXsgKRkjH3qpRvo
c5Z7bc9t7AjtADGFRi0ykxOSKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOCWad/b
kkjCZEReMrXyeGCEXqPQMB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC
QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODlFN0MvRkMxRUI3MENEQkE5MTFFQThBMDE3MDdEQzRGOUFFMDIvMkVDMEM5NkFE
QkFCMTFFQUJGQzFBQzdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn9L8wDQYJKoZIhvcNAQELBQADggEBAF+glcfCoVSE2Y7y
iZL3ls6+GQXTHEjDCQmcTMt0lj/sQdV5NAO0k7vKov8CE8W48DGJqnio4Tg1WFSX
vSg9dkdYj+bsKmXL6fQNsHOFVeJCU3mn3McYXvWoRb2NhYjMn23dNFb1QAH1nl18
z94RSpHRUpQJOpS4+OV2ih32zWQR+xVYBxjc6tF9z80Sn5aM0/P4A2syUu7V2auq
6kXL4V7s7dki6sy/X2lfHe6DhP918bdWyYMmCEHOLeGH23J9ps2PmFOkV14J4+Gx
OXzFsZ4u8Edlmdcjp9H9aVtL9TqbJY77uMgJFGs/+M8MryWUkxgaJcJ1TNmKaBSO
+qqamms=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:50 2025 by rpki-client