Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/5803FE3880CD11EB83E8035FC4F9AE02.roa
File: 5803FE3880CD11EB83E8035FC4F9AE02.roa (raw, json)
Hash identifier: NgLitwn58Hzqdz8jFqI6KtHUu7WwdEhFCnvHC3Qm5IU=
Subject key identifier: 5C:9B:F4:47:C9:EB:E7:ED:69:AA:E9:E9:13:F3:DE:C7:E1:DB:C4:EC
Certificate issuer: /CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388
Certificate serial: 0647
Authority key identifier: FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/5803FE3880CD11EB83E8035FC4F9AE02.roa
Signing time: Wed 26 Mar 2025 22:33:50 +0000
ROA not before: Wed 26 Mar 2025 22:33:50 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141782
IP address blocks: 103.163.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1607 (0x647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C673
Validity
Not Before: Mar 26 22:33:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e480ce-85be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9d:ff:18:b7:7a:d0:21:d9:32:a1:e5:61:4d:
08:f4:15:e0:9d:5c:a4:54:e2:31:e5:23:68:e5:f1:
32:61:a0:72:fd:53:c9:67:70:b8:41:84:27:57:a2:
39:88:39:ba:3b:c2:40:47:57:99:83:f7:1b:3d:c4:
9f:8d:c5:11:61:35:ae:b0:75:72:90:58:b8:5b:6f:
60:fa:83:77:91:56:e7:fc:43:7b:70:20:ae:99:37:
30:6a:b2:dd:d4:7f:7e:2c:2e:f2:2d:61:1c:cf:8e:
d8:6f:ef:40:25:03:c1:96:9a:a6:e2:f7:6a:c8:f9:
fc:11:8d:6e:86:22:f3:32:87:c5:0b:4b:06:b7:05:
3d:08:71:b7:87:3e:a1:64:89:1b:1a:b1:3d:f7:1d:
1f:06:5e:4a:ac:7f:1b:9a:bd:3c:bf:12:55:dc:2a:
a2:8c:46:42:1e:39:fd:44:fa:22:85:2a:05:d3:9c:
34:e6:c3:c7:1a:69:3e:1b:a4:ee:e5:ad:54:4f:6a:
09:b1:c0:97:4a:dd:1f:32:a3:ad:6d:f0:c7:83:4f:
a9:b5:db:eb:ce:8b:f6:4a:64:2a:60:4a:62:c8:00:
e4:5d:d7:43:2a:a2:fd:e7:03:14:94:34:d0:e0:df:
df:45:b7:92:17:f8:89:7a:28:be:3f:03:52:ee:4e:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:F4:47:C9:EB:E7:ED:69:AA:E9:E9:13:F3:DE:C7:E1:DB:C4:EC
X509v3 Authority Key Identifier:
keyid:FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/5803FE3880CD11EB83E8035FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.236.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:c8:06:84:0c:35:24:28:43:c5:b5:9b:32:c1:d6:52:a2:93:
79:f4:ef:99:a2:a7:c1:da:5c:12:ea:64:0a:21:b0:50:04:b7:
cd:dc:10:f8:f6:f6:78:0a:7f:9c:7f:ae:d2:21:8f:77:b0:66:
3c:e7:b9:3c:dc:75:84:0e:0f:11:9b:bd:8d:96:ff:be:e3:f6:
5f:f1:9b:f9:3a:54:a3:41:d5:8f:74:8f:8a:69:d3:f1:d1:6f:
5d:9e:bb:70:d5:de:0d:14:a4:03:85:29:b5:2e:e0:87:2f:01:
44:7c:ef:3b:42:c6:33:c8:cb:2b:90:90:7a:ab:7f:57:59:b9:
8b:cc:40:b8:e2:e3:03:a3:69:8e:ed:8c:57:c3:15:02:23:0e:
26:c7:fd:1f:ae:e0:47:24:78:54:a7:34:c8:b4:0a:dd:06:e0:
4a:c9:07:d6:88:ee:1d:3b:4b:e5:6e:c7:41:9e:f3:e4:72:04:
95:94:fe:8d:4f:81:0f:6c:b0:42:09:71:5c:5b:d6:79:d6:b3:
c3:45:59:67:8e:ea:fb:8a:f5:f2:d1:b4:88:9e:e7:99:71:94:
d2:10:5b:89:af:10:96:47:16:57:66:df:d6:0e:d8:2c:c0:e5:
04:da:c4:71:68:8a:51:40:fe:1e:d0:9e:fb:1a:cb:65:7a:7a:
ff:09:bc:42
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM2NzMxMTAvBgNVBAUTKEZFRTlGREQ0QjBFODMxMzE4OEEwODlGN0E4N0ZCN0Qw
MTUzMjUzODgwHhcNMjUwMzI2MjIzMzUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2U0ODBjZS04NWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Z3/GLd60CHZMqHlYU0I9BXgnVykVOIx5SNo5fEyYaBy/VPJZ3C4QYQnV6I5
iDm6O8JAR1eZg/cbPcSfjcURYTWusHVykFi4W29g+oN3kVbn/EN7cCCumTcwarLd
1H9+LC7yLWEcz47Yb+9AJQPBlpqm4vdqyPn8EY1uhiLzMofFC0sGtwU9CHG3hz6h
ZIkbGrE99x0fBl5KrH8bmr08vxJV3CqijEZCHjn9RPoihSoF05w05sPHGmk+G6Tu
5a1UT2oJscCXSt0fMqOtbfDHg0+ptdvrzov2SmQqYEpiyADkXddDKqL95wMUlDTQ
4N/fRbeSF/iJeii+PwNS7k5pkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFyb9EfJ
6+ftaarp6RPz3sfh28TsMB8GA1UdIwQYMBaAFP7p/dSw6DExiKCJ96h/t9AVMlOI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY3My9BRTVGQjEwMjgw
Q0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01UR0lvSW4zcUgtMzBCVXlV
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL191bjkxTERvTVRHSW9JbjNxSC0zMEJVeVU0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEM2NzMvQUU1RkIxMDI4MENCMTFFQkI3N0FCODVEQzRGOUFFMDIvNTgwM0ZFMzg4
MENEMTFFQjgzRTgwMzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFno+wwDQYJKoZIhvcNAQELBQADggEBAMvIBoQMNSQoQ8W1
mzLB1lKik3n075mip8HaXBLqZAohsFAEt83cEPj29ngKf5x/rtIhj3ewZjznuTzc
dYQODxGbvY2W/77j9l/xm/k6VKNB1Y90j4pp0/HRb12eu3DV3g0UpAOFKbUu4Icv
AUR87ztCxjPIyyuQkHqrf1dZuYvMQLji4wOjaY7tjFfDFQIjDibH/R+u4EckeFSn
NMi0Ct0G4ErJB9aI7h07S+Vux0Ge8+RyBJWU/o1PgQ9ssEIJcVxb1nnWs8NFWWeO
6vuK9fLRtIie55lxlNIQW4mvEJZHFldm39YO2CzA5QTaxHFoilFA/h7Qnvsay2V6
ev8JvEI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:55:20 2025 by rpki-client