Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa
File: 3442C35A995711ECA076C26CC4F9AE02.roa (raw, json)
Hash identifier: ElYFGEi2U1ZpePpM0wUNASO/xJQqZGteXQcliiwZX+A=
Subject key identifier: 0C:2F:85:1E:39:B6:73:C1:65:9F:A0:E0:3C:BF:E2:F7:22:2F:18:35
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4529
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:31:37 +0000
ROA not before: Thu 05 Sep 2024 03:31:37 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131345
IP address blocks: 103.5.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17705 (0x4529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:31:37 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92619-6981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:bf:2c:02:a8:55:c1:68:5c:eb:fc:23:d6:
39:e1:75:9e:9b:53:f2:7f:fc:9d:c0:c7:0a:04:ac:
10:12:4a:f6:f0:31:a7:84:0e:45:d3:26:8c:42:47:
49:06:86:d3:90:67:f4:bd:bb:aa:10:2a:2a:fc:32:
a5:c5:dc:c6:e6:5d:ce:94:25:7e:5a:1d:56:3f:87:
b2:e8:e1:1b:48:d4:5d:6e:45:8b:64:2a:a4:39:64:
77:cf:4a:8d:65:f5:b9:4b:dc:1d:19:bb:fa:9d:fc:
7c:2b:4a:4e:d9:80:e7:ed:ea:bc:d0:62:ad:3a:04:
9e:2e:c3:c6:1e:37:0a:3f:b9:f8:cf:82:28:df:18:
55:a1:62:81:15:e8:b0:f5:b4:65:2a:26:a7:4b:75:
bd:1a:42:f1:3d:a5:d0:cd:1e:8a:6e:cf:b3:23:19:
24:84:34:c1:a4:d6:98:af:8d:8a:8f:d2:47:ae:3b:
0c:02:28:92:a1:3d:29:b2:6b:b3:2c:c4:95:0c:f2:
55:14:59:f9:27:b0:22:23:e1:78:63:3b:01:3b:5c:
38:49:a5:97:d5:5f:aa:b4:67:4b:fa:db:84:d9:81:
c3:29:14:a6:85:d8:87:8c:78:78:70:22:b2:4b:95:
b4:6b:eb:96:ee:f6:0a:44:65:70:c1:0f:95:9f:75:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2F:85:1E:39:B6:73:C1:65:9F:A0:E0:3C:BF:E2:F7:22:2F:18:35
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3442C35A995711ECA076C26CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.30.0/23
Signature Algorithm: sha256WithRSAEncryption
72:89:ba:54:27:80:dd:18:50:3e:a8:90:a8:9d:c3:1f:45:78:
b2:db:f0:01:38:aa:42:b3:94:d6:3a:56:ab:8f:ae:cd:a0:b3:
84:6b:b9:2e:30:fe:69:7f:57:e8:26:a4:24:2a:64:96:f8:00:
77:4c:24:b4:33:00:13:54:3f:ea:e1:7a:7b:a6:e2:21:9c:4a:
cc:06:f7:b1:24:5b:67:cb:7e:85:e8:9b:0f:8e:f3:9b:c2:ba:
46:81:14:d3:63:5d:de:94:19:f8:6f:36:a1:28:ff:d5:33:c7:
66:3a:75:b6:b1:ec:de:14:c1:cb:2f:3a:ae:76:bc:10:09:a7:
b7:d8:55:6b:fe:ce:2d:9c:18:db:78:69:36:ca:e5:1b:34:81:
a3:07:c8:29:26:da:91:2e:b2:6c:2b:98:c6:67:fc:3a:d8:da:
d7:54:a0:e3:f4:d0:c4:a1:dd:06:d0:ca:11:c0:e2:d7:4c:4b:
16:52:4d:d8:8a:a9:5c:d0:1b:0e:35:fd:0b:f8:6e:f0:e8:d3:
f2:ae:bf:4f:b4:84:71:1c:ea:bd:4a:cd:75:80:bd:bb:b5:34:
dd:f5:50:92:9f:77:ea:3d:74:1f:8b:4a:1f:17:cb:88:30:5c:
1b:60:a0:c6:9e:76:8d:f7:0e:05:6d:91:57:56:69:b8:b6:11:
a7:d5:2d:45
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICRSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMTM3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjYxOS02OTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAygu/LAKoVcFoXOv8I9Y54XWem1Pyf/ydwMcKBKwQEkr28DGnhA5F0yaMQkdJ
BobTkGf0vbuqECoq/DKlxdzG5l3OlCV+Wh1WP4ey6OEbSNRdbkWLZCqkOWR3z0qN
ZfW5S9wdGbv6nfx8K0pO2YDn7eq80GKtOgSeLsPGHjcKP7n4z4Io3xhVoWKBFeiw
9bRlKianS3W9GkLxPaXQzR6Kbs+zIxkkhDTBpNaYr42Kj9JHrjsMAiiSoT0psmuz
LMSVDPJVFFn5J7AiI+F4YzsBO1w4SaWX1V+qtGdL+tuE2YHDKRSmhdiHjHh4cCKy
S5W0a+uW7vYKRGVwwQ+Vn3VYxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAwvhR45
tnPBZZ+g4Dy/4vciLxg1MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzQ0MkMzNUE5
OTU3MTFFQ0EwNzZDMjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnBR4wDQYJKoZIhvcNAQELBQADggEBAHKJulQngN0YUD6o
kKidwx9FeLLb8AE4qkKzlNY6VquPrs2gs4RruS4w/ml/V+gmpCQqZJb4AHdMJLQz
ABNUP+rhenum4iGcSswG97EkW2fLfoXomw+O85vCukaBFNNjXd6UGfhvNqEo/9Uz
x2Y6dbax7N4UwcsvOq52vBAJp7fYVWv+zi2cGNt4aTbK5Rs0gaMHyCkm2pEusmwr
mMZn/DrY2tdUoOP00MSh3QbQyhHA4tdMSxZSTdiKqVzQGw41/Qv4bvDo0/Kuv0+0
hHEc6r1KzXWAvbu1NN31UJKfd+o9dB+LSh8Xy4gwXBtgoMaedo33DgVtkVdWabi2
EafVLUU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:43:39 2025 by rpki-client