Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/B033793C686D11EE8607594CC4F9AE02.roa
File: B033793C686D11EE8607594CC4F9AE02.roa (raw, json)
Hash identifier: JOi7OHLhFtdHcYqhgYyNkkEIbuwvBfapNIuWdidQbmc=
Subject key identifier: B6:1A:04:A9:B8:3A:0F:7B:8D:1D:53:E1:99:96:64:F0:7C:20:C1:6C
Certificate issuer: /CN=A91A679F/serialNumber=372E3AF088DB375A8FF919858B2DCC5C7FC4A5E8
Certificate serial: 06F3
Authority key identifier: 37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/B033793C686D11EE8607594CC4F9AE02.roa
Signing time: Thu 28 Nov 2024 21:41:43 +0000
ROA not before: Thu 28 Nov 2024 21:41:43 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 138538
IP address blocks: 103.157.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1779 (0x6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A679F
Validity
Not Before: Nov 28 21:41:43 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6748e397-5b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:03:ea:ad:f7:46:eb:24:42:5b:7e:67:75:
34:95:eb:34:e6:89:d4:e2:f9:40:ee:44:35:fd:8b:
8b:ab:11:a1:94:0c:cd:f3:d0:8f:5b:1c:19:24:4e:
b5:fa:8e:b4:dc:62:f3:c0:23:9d:da:02:9b:30:aa:
ad:06:65:9c:35:0c:42:af:d4:9a:20:eb:38:6d:ee:
0e:55:15:35:7d:09:df:38:69:16:c3:e7:3d:5d:dd:
16:41:86:59:2f:dc:2d:9e:fe:6b:d3:f7:46:e6:9a:
71:84:d4:34:63:4e:56:15:bf:76:b3:76:bc:8d:d2:
8b:ce:e4:48:58:bd:1b:84:c9:2c:b0:ef:bd:cc:8c:
f5:b3:76:25:87:f3:ff:34:cf:47:d8:c3:f3:b3:07:
58:17:ce:78:54:2f:bd:5b:96:f5:87:9b:98:7e:d4:
08:6e:1c:80:5b:1c:d4:02:eb:ee:5f:2b:19:8f:62:
d8:62:7b:73:59:2e:61:8a:1b:de:93:10:52:9a:cb:
f7:f9:6c:a7:67:03:38:47:b7:7b:d4:2c:7a:47:8e:
a6:c4:7b:5a:91:52:75:d4:fa:89:5d:3a:57:21:1f:
bf:ce:2f:c2:1d:98:da:7f:cc:99:db:f6:37:2d:b2:
c2:54:94:b4:73:1d:67:24:22:15:a5:4d:b6:ff:82:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1A:04:A9:B8:3A:0F:7B:8D:1D:53:E1:99:96:64:F0:7C:20:C1:6C
X509v3 Authority Key Identifier:
keyid:37:2E:3A:F0:88:DB:37:5A:8F:F9:19:85:8B:2D:CC:5C:7F:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/Ny468IjbN1qP-RmFiy3MXH_Epeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny468IjbN1qP-RmFiy3MXH_Epeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A679F/A1525F6C2F9211EBB3EBAF29C4F9AE02/B033793C686D11EE8607594CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.138.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:fc:a6:e5:f9:32:7b:50:3a:82:50:01:cd:55:64:b2:ea:19:
40:f3:a8:f9:82:d8:2e:ee:0d:48:c0:90:30:33:bf:e5:b5:2e:
15:55:3a:15:24:e7:9b:69:b7:c9:f0:11:11:31:61:a8:c1:e8:
42:c4:da:48:3e:31:ef:81:b0:d2:d0:60:f4:bc:43:c5:e9:6a:
be:2d:a1:9b:80:ac:97:24:e4:da:43:70:03:8f:d5:ea:94:97:
62:87:a3:0d:5f:63:c8:7a:d4:85:55:f6:58:6b:a4:4a:2c:db:
98:f5:ac:6a:05:df:fd:4a:cc:ec:78:9b:ff:f4:34:be:97:9f:
dd:62:90:f6:0f:5b:ee:43:54:c1:8f:ce:70:3e:c7:fb:df:f3:
b6:f8:77:e3:7e:d1:41:e9:1b:7a:b2:b3:81:8d:92:cb:70:fa:
f0:64:8d:7b:9d:a2:d0:93:a8:cc:67:5b:6f:83:48:2c:02:7b:
3b:8b:b0:ad:b4:ac:4f:f0:88:23:f1:83:d9:51:ca:51:4d:a1:
e6:91:53:ea:c9:4d:17:de:17:03:f1:64:e2:cb:95:ef:13:34:
b9:8a:1f:2f:7d:df:d9:f5:d1:f7:fe:53:80:46:f1:45:d9:07:
0e:02:4b:cf:e0:c5:d7:2c:1a:68:cc:44:16:29:d5:f0:06:eb:
73:7e:e6:3f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTY3OUYxMTAvBgNVBAUTKDM3MkUzQUYwODhEQjM3NUE4RkY5MTk4NThCMkRDQzVD
N0ZDNEE1RTgwHhcNMjQxMTI4MjE0MTQzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQ4ZTM5Ny01YjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0W0D6q33RuskQlt+Z3U0les05onU4vlA7kQ1/YuLqxGhlAzN89CPWxwZJE61
+o603GLzwCOd2gKbMKqtBmWcNQxCr9SaIOs4be4OVRU1fQnfOGkWw+c9Xd0WQYZZ
L9wtnv5r0/dG5ppxhNQ0Y05WFb92s3a8jdKLzuRIWL0bhMkssO+9zIz1s3Ylh/P/
NM9H2MPzswdYF854VC+9W5b1h5uYftQIbhyAWxzUAuvuXysZj2LYYntzWS5hihve
kxBSmsv3+WynZwM4R7d71Cx6R46mxHtakVJ11PqJXTpXIR+/zi/CHZjaf8yZ2/Y3
LbLCVJS0cx1nJCIVpU22/4LzNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLYaBKm4
Og97jR1T4ZmWZPB8IMFsMB8GA1UdIwQYMBaAFDcuOvCI2zdaj/kZhYstzFx/xKXo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjc5Ri9BMTUyNUY2QzJG
OTIxMUVCQjNFQkFGMjlDNEY5QUUwMi9OeTQ2OElqYk4xcVAtUm1GaXkzTVhIX0Vw
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL055NDY4SWpiTjFxUC1SbUZpeTNNWEhfRXBlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTY3OUYvQTE1MjVGNkMyRjkyMTFFQkIzRUJBRjI5QzRGOUFFMDIvQjAzMzc5M0M2
ODZEMTFFRTg2MDc1OTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnnYowDQYJKoZIhvcNAQELBQADggEBAMv8puX5MntQOoJQ
Ac1VZLLqGUDzqPmC2C7uDUjAkDAzv+W1LhVVOhUk55tpt8nwERExYajB6ELE2kg+
Me+BsNLQYPS8Q8Xpar4toZuArJck5NpDcAOP1eqUl2KHow1fY8h61IVV9lhrpEos
25j1rGoF3/1KzOx4m//0NL6Xn91ikPYPW+5DVMGPznA+x/vf87b4d+N+0UHpG3qy
s4GNkstw+vBkjXudotCTqMxnW2+DSCwCezuLsK20rE/wiCPxg9lRylFNoeaRU+rJ
TRfeFwPxZOLLle8TNLmKHy9939n10ff+U4BG8UXZBw4CS8/gxdcsGmjMRBYp1fAG
63N+5j8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:10:25 2025 by rpki-client