Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/B3C41A60DD1B11EAAC9A0915C4F9AE02.roa
File: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (raw, json)
Hash identifier: BSpXz+Luvr8+353VTfwHRvV86BxwUFFmKEnBxGibaBk=
Subject key identifier: 93:49:F3:59:E2:33:E9:0C:84:5D:27:2E:10:9C:00:36:4A:FC:F4:E3
Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0
Certificate serial: 075C
Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/B3C41A60DD1B11EAAC9A0915C4F9AE02.roa
Signing time: Tue 18 Jun 2024 23:00:01 +0000
ROA not before: Tue 18 Jun 2024 23:00:01 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 140924
IP address blocks: 103.152.78.0/24 maxlen: 24
2001:df3:ff80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1884 (0x75c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543
Validity
Not Before: Jun 18 23:00:01 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66721171-cbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:ac:ae:dd:54:a4:94:20:f0:de:6c:f4:72:
e7:60:57:b5:e0:28:1e:3e:42:2e:fb:84:4f:c7:7d:
89:8a:67:04:cc:9c:20:68:e6:13:c7:06:1b:15:9d:
0c:d2:2b:38:bb:12:3d:bb:c8:43:1e:32:3f:33:44:
d3:54:41:1e:12:f9:4d:dd:48:11:4d:ad:5a:5a:15:
ea:0d:11:8c:21:63:fd:69:d3:32:63:a2:b6:1e:6b:
a9:d5:94:0d:ba:ec:60:df:66:3d:0a:b5:97:8c:88:
df:52:f4:3e:3c:c7:65:85:c4:58:bd:dc:40:99:76:
b7:74:dc:9a:7a:da:db:ae:3b:a6:80:f8:8f:6c:28:
10:e4:a6:22:1a:4f:75:26:0b:c0:9e:3b:8c:c8:e5:
e1:01:41:cb:c0:b6:22:ca:94:a1:0c:01:8a:34:84:
a2:e1:a4:8d:48:b0:48:84:a4:0d:73:eb:a8:f3:d3:
9c:23:3b:59:5d:7d:0a:81:45:ec:57:bf:81:4b:6c:
ab:ce:ee:b5:3c:0a:9e:fd:a2:10:77:c3:77:6d:06:
73:ea:d4:e3:35:88:12:be:db:5b:b8:c1:ef:f0:3e:
18:f1:91:c5:79:3d:05:c9:a3:10:61:4a:1d:7a:bb:
2c:bb:52:a3:69:83:12:31:58:ac:07:ad:5e:c6:44:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:49:F3:59:E2:33:E9:0C:84:5D:27:2E:10:9C:00:36:4A:FC:F4:E3
X509v3 Authority Key Identifier:
keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/B3C41A60DD1B11EAAC9A0915C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.78.0/24
IPv6:
2001:df3:ff80::/48
Signature Algorithm: sha256WithRSAEncryption
b9:84:19:73:ac:05:12:eb:aa:b7:82:8f:78:a3:7b:77:e1:77:
6e:1c:14:84:11:03:64:a3:e2:61:1e:c8:c3:f8:41:0f:ff:3d:
69:5d:9a:92:da:9e:53:4a:e4:0e:26:d3:34:4e:f2:89:37:a7:
16:e6:3b:2e:83:8c:f4:62:02:4f:4b:77:b8:d5:e4:12:e2:0d:
5d:e9:a3:e0:5c:51:fa:67:74:ea:4c:ef:f8:d0:91:3a:14:c1:
2f:4b:7d:61:97:05:06:d1:31:94:4c:97:07:a2:f5:c5:e8:ef:
2d:cc:bb:34:ea:f1:ba:92:6f:a0:10:22:fd:d7:04:37:9b:9f:
26:7d:25:30:fd:b3:31:9a:d5:46:2b:a1:91:4f:b8:4e:c0:c6:
5e:a8:6b:79:e7:f6:34:b0:61:53:76:5a:31:a6:a0:1a:39:95:
bf:e7:f6:02:4d:35:68:59:40:fc:2a:14:aa:6e:ef:a9:01:45:
0f:a0:68:2f:83:1f:d6:cb:56:2a:bc:04:da:07:ec:4c:8a:20:
32:8f:51:af:83:fc:ab:c4:ee:ed:f4:3f:49:36:bb:5d:c4:23:
f2:c8:a1:6d:e1:60:34:9c:bb:7c:c5:7d:7c:5e:eb:a2:ad:57:
11:bf:9b:ee:30:57:b9:3c:c4:cc:e7:d8:40:0a:88:a3:b8:93:
42:68:90:35
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4
RjMxRTU5RTAwHhcNMjQwNjE4MjMwMDAxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjcyMTE3MS1jYmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCasrt1UpJQg8N5s9HLnYFe14CgePkIu+4RPx32JimcEzJwgaOYTxwYbFZ0M
0is4uxI9u8hDHjI/M0TTVEEeEvlN3UgRTa1aWhXqDRGMIWP9adMyY6K2Hmup1ZQN
uuxg32Y9CrWXjIjfUvQ+PMdlhcRYvdxAmXa3dNyaetrbrjumgPiPbCgQ5KYiGk91
JgvAnjuMyOXhAUHLwLYiypShDAGKNISi4aSNSLBIhKQNc+uo89OcIztZXX0KgUXs
V7+BS2yrzu61PAqe/aIQd8N3bQZz6tTjNYgSvttbuMHv8D4Y8ZHFeT0FyaMQYUod
erssu1KjaYMSMVisB61exkR+jwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJNJ81ni
M+kMhF0nLhCcADZK/PTjMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE
MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQ1NDMvNTdFRjlGNkNERDFBMTFFQThBNDM5RjEzQzRGOUFFMDIvQjNDNDFBNjBE
RDFCMTFFQUFDOUEwOTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnmE4wDwQCAAIwCQMHACABDfP/gDANBgkqhkiG9w0BAQsF
AAOCAQEAuYQZc6wFEuuqt4KPeKN7d+F3bhwUhBEDZKPiYR7Iw/hBD/89aV2aktqe
U0rkDibTNE7yiTenFuY7LoOM9GICT0t3uNXkEuINXemj4FxR+md06kzv+NCROhTB
L0t9YZcFBtExlEyXB6L1xejvLcy7NOrxupJvoBAi/dcEN5ufJn0lMP2zMZrVRiuh
kU+4TsDGXqhreef2NLBhU3ZaMaagGjmVv+f2Ak01aFlA/CoUqm7vqQFFD6BoL4Mf
1stWKrwE2gfsTIogMo9Rr4P8q8Tu7fQ/STa7XcQj8sihbeFgNJy7fMV9fF7roq1X
Eb+b7jBXuTzEzOfYQAqIo7iTQmiQNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:14:37 2025 by rpki-client