Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/890887C0E04511EF8BD5FA0EC4F9AE02.roa
File: 890887C0E04511EF8BD5FA0EC4F9AE02.roa (raw, json)
Hash identifier: 6fd5P+z25rW7O9COLKc79Ksv6pfq4UhJoscC1zkcjLU=
Subject key identifier: 53:C4:D0:B7:F1:A3:D3:A7:7C:34:A4:9C:35:31:6E:82:D6:A1:46:25
Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial: 01CE
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/890887C0E04511EF8BD5FA0EC4F9AE02.roa
Signing time: Mon 03 Feb 2025 02:26:16 +0000
ROA not before: Mon 03 Feb 2025 02:26:16 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 58655
IP address blocks: 103.41.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4D1F
Validity
Not Before: Feb 3 02:26:16 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=67a02947-f320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:12:f9:68:9a:1b:60:ec:b5:8b:16:fc:1e:
fc:95:49:a1:d5:c1:6a:ab:91:3b:d4:de:0b:ee:04:
5d:36:c6:68:de:62:4c:58:72:ad:e3:b4:5e:70:8f:
ee:a0:98:4b:67:01:75:e8:be:fc:3a:65:22:ed:8b:
8f:f4:c0:5b:2f:44:37:1b:ce:ff:7f:60:c2:53:1c:
90:26:c8:b8:ac:31:9f:89:a0:45:4c:20:a4:84:de:
95:0e:df:2b:96:80:2c:50:d0:5a:10:ff:b4:1b:5f:
cc:39:b2:94:1a:bb:ed:cd:73:a4:00:3c:36:09:e0:
91:66:ec:38:e5:e9:58:58:a2:a4:89:cd:a5:90:59:
00:df:d4:04:25:48:b8:ac:51:4a:62:1d:03:aa:4b:
d8:2d:25:41:61:47:b7:48:49:4e:fb:ed:14:c1:f9:
4e:8e:56:af:79:7a:e8:eb:da:10:56:a6:c0:32:2b:
24:32:fa:00:f0:3f:c7:ef:c5:21:ba:b9:32:3c:9e:
b0:c6:86:c5:49:c6:43:3a:40:7a:5d:df:88:40:dc:
af:2e:a4:7f:65:a1:d4:fc:7d:0e:02:51:c1:26:53:
64:f0:39:55:47:a6:98:1f:af:82:30:7a:dc:e3:b8:
9a:57:ea:0e:19:8c:f4:38:1a:49:78:14:78:4c:a9:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C4:D0:B7:F1:A3:D3:A7:7C:34:A4:9C:35:31:6E:82:D6:A1:46:25
X509v3 Authority Key Identifier:
keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/890887C0E04511EF8BD5FA0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:eb:7c:ae:78:48:8e:d4:90:5b:c7:71:fe:2f:87:d5:db:a8:
46:2f:b0:0d:ef:df:e2:5d:e2:6c:f1:75:cd:98:87:1c:e3:a7:
5b:90:f7:bb:30:46:ec:02:e2:8d:54:5c:47:27:52:94:34:da:
54:32:f6:a8:83:a4:65:33:6e:68:3e:c9:fd:52:bc:b7:b0:1f:
a2:c3:18:d4:94:29:bb:3a:99:89:42:40:ab:e2:99:a1:a7:cf:
4a:76:d4:b2:42:55:2d:dc:3e:a6:a5:88:c2:6c:1c:ac:dc:ba:
60:c6:b3:44:3a:b9:5c:e6:04:33:2a:5c:32:5b:3f:2d:db:5f:
55:c2:be:83:98:b4:fb:bd:a8:94:15:89:6a:25:ab:52:68:88:
26:e8:f1:19:9a:08:48:a4:ba:fe:f7:d1:5c:34:ab:8f:92:ce:
6b:95:30:30:bf:74:b2:aa:97:4e:af:a5:fb:de:8a:b8:e3:4c:
24:75:f4:e1:1b:36:a0:86:f4:f1:00:49:82:6f:cd:68:b1:db:
5f:f4:3c:fa:aa:ea:d1:75:bb:72:c0:cf:9f:d3:99:50:1a:9b:
35:9b:9c:1c:26:f6:ed:3c:ec:90:45:f3:b2:37:47:bd:1f:5b:
3f:50:52:3a:2d:98:14:91:12:42:23:e7:9e:84:69:53:69:30:
f4:62:d6:e6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx
NDdCODhBMjIwHhcNMjUwMjAzMDIyNjE2WhcNMjUwNjAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2EwMjk0Ny1mMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAztIS+WiaG2DstYsW/B78lUmh1cFqq5E71N4L7gRdNsZo3mJMWHKt47RecI/u
oJhLZwF16L78OmUi7YuP9MBbL0Q3G87/f2DCUxyQJsi4rDGfiaBFTCCkhN6VDt8r
loAsUNBaEP+0G1/MObKUGrvtzXOkADw2CeCRZuw45elYWKKkic2lkFkA39QEJUi4
rFFKYh0DqkvYLSVBYUe3SElO++0UwflOjlaveXro69oQVqbAMiskMvoA8D/H78Uh
urkyPJ6wxobFScZDOkB6Xd+IQNyvLqR/ZaHU/H0OAlHBJlNk8DlVR6aYH6+CMHrc
47iaV+oOGYz0OBpJeBR4TKl/RQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFPE0Lfx
o9OnfDSknDUxboLWoUYlMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4
MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTREMUYvNDkxNTJBNDQ2ODA0MTFFREEyRDJCRDNDQzRGOUFFMDIvODkwODg3QzBF
MDQ1MTFFRjhCRDVGQTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnKV8wDQYJKoZIhvcNAQELBQADggEBAF/rfK54SI7UkFvH
cf4vh9XbqEYvsA3v3+Jd4mzxdc2Yhxzjp1uQ97swRuwC4o1UXEcnUpQ02lQy9qiD
pGUzbmg+yf1SvLewH6LDGNSUKbs6mYlCQKvimaGnz0p21LJCVS3cPqaliMJsHKzc
umDGs0Q6uVzmBDMqXDJbPy3bX1XCvoOYtPu9qJQViWolq1JoiCbo8RmaCEikuv73
0Vw0q4+SzmuVMDC/dLKql06vpfveirjjTCR19OEbNqCG9PEASYJvzWix21/0PPqq
6tF1u3LAz5/TmVAamzWbnBwm9u087JBF87I3R70fWz9QUjotmBSREkIj556EaVNp
MPRi1uY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:31 2025 by rpki-client