Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa
File: BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa (raw, json)
Hash identifier: u50eitfUCOaeRuTR/jYWQ0NMq+8RcCSDyaN9gUyzyFs=
Subject key identifier: F0:8D:3E:A2:DA:10:CC:B0:E2:E9:D0:38:0B:E5:E3:B6:E0:71:8C:40
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 45B7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:33:42 +0000
ROA not before: Thu 05 Sep 2024 03:33:42 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 149068
IP address blocks: 103.72.96.0/22 maxlen: 24
2001:df0:1b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17847 (0x45b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:33:42 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92696-67af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:b5:f0:34:c0:ec:a7:3a:e7:f9:a4:b3:1e:
e8:97:89:71:2b:5d:f9:18:38:0c:ca:e0:9d:8a:c2:
16:5c:aa:c0:ae:35:35:dd:1e:7b:ba:cd:79:37:f0:
21:be:04:b6:92:81:11:55:01:c6:48:6c:69:59:27:
f8:c4:50:13:01:ba:89:31:9e:5f:c3:14:e5:ac:c3:
cb:ec:50:7b:2d:5d:1b:3d:1c:c3:72:22:d9:61:00:
8e:19:23:99:d4:11:03:00:08:1d:69:e7:ec:79:c2:
7c:25:a4:93:3a:7c:a8:26:18:7e:29:2c:8d:bd:ca:
d5:34:4c:53:af:bb:e1:a7:67:b8:09:e3:1a:4b:a1:
17:b8:f9:d3:9c:c2:bb:31:7c:c7:47:ee:4e:bb:95:
c1:0a:da:f6:24:00:dd:71:17:a0:3f:ca:55:22:62:
32:20:08:20:5b:14:a2:f4:41:ce:21:a8:db:c3:fd:
bb:31:27:b9:5f:f2:54:a9:39:ca:1a:57:a8:22:32:
43:35:36:ad:51:c1:e8:54:21:7a:e9:99:8f:d7:a5:
6d:2b:a6:fc:8c:09:92:6e:42:d7:d8:75:98:29:41:
b9:98:7a:fa:62:48:b8:a5:49:2c:48:b1:32:49:12:
88:cb:76:ba:cf:51:1b:5f:d4:46:4f:ad:8a:59:ed:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8D:3E:A2:DA:10:CC:B0:E2:E9:D0:38:0B:E5:E3:B6:E0:71:8C:40
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBDD8CBC8F5711EEBEA97C2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.96.0/22
IPv6:
2001:df0:1b::/48
Signature Algorithm: sha256WithRSAEncryption
6e:1b:77:22:06:d4:12:04:ef:30:3f:18:f6:1e:b8:e8:ad:45:
f8:5a:48:79:25:43:24:9c:f1:88:72:73:b3:61:d4:a7:9c:a7:
ed:04:9f:e9:ff:ca:a2:20:23:2a:e5:7d:d3:58:c6:bf:5f:64:
5d:65:56:7b:bf:8a:88:64:ed:36:49:bf:22:f3:9b:18:87:22:
44:e4:3d:70:8b:f3:82:39:83:bf:bf:32:34:e6:e8:f4:d4:c8:
f4:92:6b:f9:c9:0e:c1:89:b7:3b:53:ea:32:03:23:83:d5:a3:
32:a5:67:1c:74:b0:ad:91:1c:82:c1:cf:51:6e:7e:87:55:4a:
de:d6:c3:ae:b8:fb:98:09:d7:4d:3a:6f:52:61:4e:fe:db:df:
73:1b:34:48:f3:d3:f3:0a:c7:e8:dc:43:c4:c9:60:6e:55:0c:
c7:aa:df:81:22:67:4b:a3:2c:b2:16:f1:88:a1:f9:51:83:1c:
32:25:ae:04:31:53:c7:d0:e5:18:db:50:d6:79:c6:a6:fb:45:
a3:59:11:e6:ac:92:4e:f5:e7:15:72:93:26:bf:ce:db:8b:df:
03:1d:44:f3:bd:5d:99:d7:07:81:dd:0a:0f:bc:d6:07:7a:63:
9d:0c:69:42:20:e8:d4:c5:19:0f:93:b9:74:75:8c:5f:88:50:
3c:da:ab:b3
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICRbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMzQyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjY5Ni02N2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdm18DTA7Kc65/mksx7ol4lxK135GDgMyuCdisIWXKrArjU13R57us15N/Ah
vgS2koERVQHGSGxpWSf4xFATAbqJMZ5fwxTlrMPL7FB7LV0bPRzDciLZYQCOGSOZ
1BEDAAgdaefsecJ8JaSTOnyoJhh+KSyNvcrVNExTr7vhp2e4CeMaS6EXuPnTnMK7
MXzHR+5Ou5XBCtr2JADdcRegP8pVImIyIAggWxSi9EHOIajbw/27MSe5X/JUqTnK
GleoIjJDNTatUcHoVCF66ZmP16VtK6b8jAmSbkLX2HWYKUG5mHr6Yki4pUksSLEy
SRKIy3a6z1EbX9RGT62KWe35ZwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPCNPqLa
EMyw4unQOAvl47bgcYxAMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkJERDhDQkM4
RjU3MTFFRUJFQTk3QzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAJnSGAwDwQCAAIwCQMHACABDfAAGzANBgkqhkiG9w0BAQsF
AAOCAQEAbht3IgbUEgTvMD8Y9h646K1F+FpIeSVDJJzxiHJzs2HUp5yn7QSf6f/K
oiAjKuV901jGv19kXWVWe7+KiGTtNkm/IvObGIciROQ9cIvzgjmDv78yNObo9NTI
9JJr+ckOwYm3O1PqMgMjg9WjMqVnHHSwrZEcgsHPUW5+h1VK3tbDrrj7mAnXTTpv
UmFO/tvfcxs0SPPT8wrH6NxDxMlgblUMx6rfgSJnS6MsshbxiKH5UYMcMiWuBDFT
x9DlGNtQ1nnGpvtFo1kR5qySTvXnFXKTJr/O24vfAx1E871dmdcHgd0KD7zWB3pj
nQxpQiDo1MUZD5O5dHWMX4hQPNqrsw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:25:07 2025 by rpki-client