Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa
File: 9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa (raw, json)
Hash identifier: UJ+GisILQw/S8rlEJTPG6OVBIQbsw/0SmVYKVT382Kk=
Subject key identifier: 3F:8E:15:9C:EC:53:52:C2:6D:51:DB:23:63:57:2E:17:8B:6E:43:02
Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2
Certificate serial: 06B7
Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa
Signing time: Thu 20 Feb 2025 23:31:41 +0000
ROA not before: Thu 20 Feb 2025 23:31:41 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 133605
IP address blocks: 103.161.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A85
Validity
Not Before: Feb 20 23:31:41 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67b7bb5d-9b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:ba:78:98:ef:2c:64:e9:4e:69:f5:0b:d1:
a1:bb:c3:18:99:cc:04:6f:e1:ba:cc:e0:61:20:29:
30:4f:cb:de:73:aa:21:b1:78:c8:c9:56:3e:2c:c3:
58:61:57:bc:ab:14:ac:15:70:06:a8:ce:91:73:9b:
3e:b4:13:2a:a3:22:c9:d3:78:55:95:4c:13:c4:d0:
99:fe:0f:d7:c6:8c:b5:7b:26:a8:ba:39:dd:5b:0b:
b0:f1:7b:14:db:d5:ce:a4:b6:20:32:3b:1f:7f:0a:
95:06:42:8a:93:a3:ed:8e:74:54:91:b7:6c:da:d7:
e7:cc:1f:e6:21:19:59:a6:39:00:cf:0a:e9:82:3c:
97:a5:64:fb:28:01:b9:2d:87:47:e1:5e:92:b9:42:
fc:c6:36:27:d0:5e:95:70:87:d1:0f:89:9d:be:f6:
c6:74:a4:1e:81:2d:7f:68:32:d9:cd:f6:f0:9f:59:
83:21:20:48:6c:6d:07:ba:93:4d:af:85:85:c9:37:
54:fc:ec:48:83:82:40:fe:29:a5:22:32:09:c4:d3:
89:36:df:73:c1:cc:8d:b5:89:9f:8d:e2:13:af:8e:
fb:29:ea:8f:12:36:4b:50:66:ae:19:a5:59:3d:83:
34:2b:c2:6c:1b:34:c4:ce:80:ab:9a:1c:12:7e:37:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8E:15:9C:EC:53:52:C2:6D:51:DB:23:63:57:2E:17:8B:6E:43:02
X509v3 Authority Key Identifier:
keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3c:30:a7:5f:34:36:d5:4b:2f:11:75:e5:90:91:d5:e6:51:
e9:d6:e4:b3:5e:d1:ac:c9:de:77:17:e4:67:17:ef:00:24:9b:
ae:b2:1e:7e:16:7c:af:d2:43:14:b0:8c:b8:d5:2c:dc:57:7f:
4c:1d:04:78:09:44:e2:74:41:56:79:d7:3a:44:0d:52:cd:5d:
f0:b3:0a:c1:3e:aa:b5:f8:65:cc:c3:53:d3:ed:e7:01:9e:73:
73:f3:ff:bd:a2:fb:64:2e:6c:76:74:ea:38:57:be:01:28:14:
78:d6:b0:96:61:a7:22:d2:63:e4:a6:f6:14:8a:23:73:82:ce:
2d:d8:f4:48:f5:65:0d:bb:7f:41:e6:0c:2f:18:3f:a7:e5:78:
a9:8a:5b:99:0b:8a:9e:97:4e:cb:42:e2:e9:8b:3e:32:f6:8d:
dc:09:1c:a0:20:8c:63:b1:85:eb:ec:9e:dc:1a:8b:de:ff:3e:
b3:3a:d2:42:11:d5:95:ca:5d:fc:61:0a:ac:90:41:05:c5:49:
0f:2f:0e:98:29:eb:51:a1:ad:25:61:57:b4:da:5b:04:59:0c:
9e:bd:92:ed:97:6d:0d:54:28:a4:9d:cd:11:ac:41:06:48:e5:
25:83:81:15:3a:1a:2a:93:87:db:35:78:09:2c:c3:33:92:c4:
ac:c6:74:8a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThBODUxMTAvBgNVBAUTKDJFQUY2MDA5NTMzNEU3RjBCQUEwNjVBOTJGNjUzRjVD
NzQ0ODk1QzIwHhcNMjUwMjIwMjMzMTQxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2I3YmI1ZC05YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAya26eJjvLGTpTmn1C9Ghu8MYmcwEb+G6zOBhICkwT8vec6ohsXjIyVY+LMNY
YVe8qxSsFXAGqM6Rc5s+tBMqoyLJ03hVlUwTxNCZ/g/Xxoy1eyaoujndWwuw8XsU
29XOpLYgMjsffwqVBkKKk6PtjnRUkbds2tfnzB/mIRlZpjkAzwrpgjyXpWT7KAG5
LYdH4V6SuUL8xjYn0F6VcIfRD4mdvvbGdKQegS1/aDLZzfbwn1mDISBIbG0HupNN
r4WFyTdU/OxIg4JA/imlIjIJxNOJNt9zwcyNtYmfjeITr477KeqPEjZLUGauGaVZ
PYM0K8JsGzTEzoCrmhwSfjd0jQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD+OFZzs
U1LCbVHbI2NXLheLbkMCMB8GA1UdIwQYMBaAFC6vYAlTNOfwuqBlqS9lP1x0SJXC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE4NS81NzM3OTJDQTU2
MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVfQzZvR1dwTDJVX1hIUkls
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xxOWdDVk0wNV9DNm9HV3BMMlVfWEhSSWxjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QThBODUvNTczNzkyQ0E1NjJCMTFFQkJEMENFMjFDQzRGOUFFMDIvOUY5OUNGQjZD
M0I4MTFFRkI4QUY4QTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnoZYwDQYJKoZIhvcNAQELBQADggEBAF48MKdfNDbVSy8R
deWQkdXmUenW5LNe0azJ3ncX5GcX7wAkm66yHn4WfK/SQxSwjLjVLNxXf0wdBHgJ
ROJ0QVZ51zpEDVLNXfCzCsE+qrX4ZczDU9Pt5wGec3Pz/72i+2QubHZ06jhXvgEo
FHjWsJZhpyLSY+Sm9hSKI3OCzi3Y9Ej1ZQ27f0HmDC8YP6fleKmKW5kLip6XTstC
4umLPjL2jdwJHKAgjGOxhevsntwai97/PrM60kIR1ZXKXfxhCqyQQQXFSQ8vDpgp
61GhrSVhV7TaWwRZDJ69ku2XbQ1UKKSdzRGsQQZI5SWDgRU6GiqTh9s1eAkswzOS
xKzGdIo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:40 2025 by rpki-client