Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/4EF79184489411ED86987260C4F9AE02.roa
File: 4EF79184489411ED86987260C4F9AE02.roa (raw, json)
Hash identifier: a8Efs0GAW5Tg39h9an5o87GfSDA70jqZExOy2QFYQOc=
Subject key identifier: B2:AD:CC:2D:50:86:04:58:CB:81:6A:90:11:B1:72:37:1F:B1:71:9A
Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial: 0838
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/4EF79184489411ED86987260C4F9AE02.roa
Signing time: Tue 24 Dec 2024 20:39:29 +0000
ROA not before: Tue 24 Dec 2024 20:39:29 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 206092
IP address blocks: 103.125.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91998BE
Validity
Not Before: Dec 24 20:39:29 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676b1c01-1d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:f1:dc:32:8b:64:56:12:23:a6:16:c2:fc:
30:2f:e6:7d:e0:b3:18:a9:1d:71:50:91:21:28:3f:
7b:78:4d:90:a7:86:8f:b9:4c:28:f3:83:df:76:f0:
a4:e8:66:57:5a:01:c3:f7:6b:84:5e:89:19:86:7b:
92:25:39:d5:a2:81:21:d9:10:a9:e2:25:2a:6b:56:
1d:bd:12:9f:6a:5f:18:2c:6a:7e:df:86:42:47:63:
05:6e:68:15:a6:0b:22:3d:89:ba:7a:f7:ca:50:74:
a7:a0:45:07:30:ad:a8:e1:9d:5a:ee:1c:3a:01:21:
f6:c4:e6:19:97:ff:0c:37:50:55:72:78:d6:78:18:
58:50:04:10:db:6d:f6:71:f5:d9:21:af:7f:62:ff:
8b:d3:96:8d:67:5a:b0:0c:55:35:d6:ce:14:7d:e8:
0b:11:28:e5:67:fa:18:9f:29:71:2b:0b:92:d8:60:
c2:e7:63:fe:d5:a7:8c:31:0b:95:bb:b1:bf:f8:ab:
14:20:af:5c:29:d6:22:3e:1c:19:f2:e5:b8:20:cc:
70:d0:1d:c6:5c:e2:7e:30:60:34:c5:ce:bb:0c:32:
2f:da:5d:d4:96:f4:d5:67:f5:a5:5b:51:99:14:66:
6e:31:f7:3f:ce:e0:ed:78:7f:6c:eb:10:8c:83:6d:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AD:CC:2D:50:86:04:58:CB:81:6A:90:11:B1:72:37:1F:B1:71:9A
X509v3 Authority Key Identifier:
keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/4EF79184489411ED86987260C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.146.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2d:2c:b9:4f:c2:d1:7c:f5:01:3a:9c:5f:04:b5:3f:b4:8b:
dd:b2:3b:7e:eb:f2:43:f1:b0:57:30:ef:d7:7a:30:37:f4:9b:
6b:1a:bf:dc:3f:81:be:4a:59:dd:7f:b5:a4:34:a2:6c:9c:b6:
b5:68:48:f3:49:01:db:e2:53:42:6e:4b:60:7c:2a:54:07:1d:
ee:88:ef:90:8d:8f:e0:2e:86:63:0b:99:b3:e5:9f:df:ec:96:
70:e2:0e:14:0a:7d:21:38:c0:fd:42:2e:1d:d3:dc:fc:11:a9:
15:f3:d7:4e:91:69:47:7d:41:01:b0:02:52:ef:a7:41:e2:6e:
75:b8:63:fe:ec:7c:6b:57:ed:86:5b:af:6f:7a:f1:6a:b5:e5:
d8:c5:7c:50:0f:04:ff:96:10:57:5b:15:b9:1a:3a:fe:b9:06:
1d:10:cf:5d:42:d5:82:eb:d6:cb:6b:b9:40:75:52:32:91:c0:
d9:e6:ab:ee:66:85:82:87:21:aa:2b:8d:1a:a5:54:45:d5:1e:
2e:fd:60:2a:cd:93:7d:1b:2a:96:ad:21:c7:0f:94:d4:07:4c:
da:fb:5f:66:7f:eb:81:fa:6c:1f:95:ce:23:d4:b5:76:a3:d5:
b2:b1:6b:6b:f8:e4:a2:f3:ad:be:e9:5b:37:b8:5c:1e:43:12:
2e:e8:22:d0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw
NTYwMTc0QTIwHhcNMjQxMjI0MjAzOTI5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzZiMWMwMS0xZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvNDx3DKLZFYSI6YWwvwwL+Z94LMYqR1xUJEhKD97eE2Qp4aPuUwo84PfdvCk
6GZXWgHD92uEXokZhnuSJTnVooEh2RCp4iUqa1YdvRKfal8YLGp+34ZCR2MFbmgV
pgsiPYm6evfKUHSnoEUHMK2o4Z1a7hw6ASH2xOYZl/8MN1BVcnjWeBhYUAQQ2232
cfXZIa9/Yv+L05aNZ1qwDFU11s4UfegLESjlZ/oYnylxKwuS2GDC52P+1aeMMQuV
u7G/+KsUIK9cKdYiPhwZ8uW4IMxw0B3GXOJ+MGA0xc67DDIv2l3UlvTVZ/WlW1GZ
FGZuMfc/zuDteH9s6xCMg21/BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLKtzC1Q
hgRYy4FqkBGxcjcfsXGaMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG
NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTk4QkUvMTUwRTU3QzZDRjQ5MTFFQTlDQzkzNTNFQzRGOUFFMDIvNEVGNzkxODQ0
ODk0MTFFRDg2OTg3MjYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnfZIwDQYJKoZIhvcNAQELBQADggEBAIctLLlPwtF89QE6
nF8EtT+0i92yO37r8kPxsFcw79d6MDf0m2sav9w/gb5KWd1/taQ0omyctrVoSPNJ
AdviU0JuS2B8KlQHHe6I75CNj+AuhmMLmbPln9/slnDiDhQKfSE4wP1CLh3T3PwR
qRXz106RaUd9QQGwAlLvp0HibnW4Y/7sfGtX7YZbr2968Wq15djFfFAPBP+WEFdb
FbkaOv65Bh0Qz11C1YLr1struUB1UjKRwNnmq+5mhYKHIaorjRqlVEXVHi79YCrN
k30bKpatIccPlNQHTNr7X2Z/64H6bB+VziPUtXaj1bKxa2v45KLzrb7pWze4XB5D
Ei7oItA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:32:45 2025 by rpki-client