Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa
File: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (raw, json)
Hash identifier: B1y/XJhc58ZxuiEanrd53aB6RU6j2Af7j8lspYzP41Y=
Subject key identifier: 1A:BB:17:0E:18:49:47:BA:5E:82:5A:79:14:62:C0:11:70:7F:6A:96
Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B
Certificate serial: 0AD0
Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa
Signing time: Mon 20 Jan 2025 19:18:44 +0000
ROA not before: Mon 20 Jan 2025 19:18:44 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 133938
IP address blocks: 103.48.119.0/24 maxlen: 24
103.108.140.0/24 maxlen: 24
103.132.96.0/24 maxlen: 24
2404:2f40::/32 maxlen: 32
2404:2f40::/36 maxlen: 36
2404:2f40:1000::/36 maxlen: 36
2404:2f40:2000::/36 maxlen: 36
2404:2f40:3000::/36 maxlen: 36
2404:2f40:4000::/36 maxlen: 36
2404:2f40:5000::/36 maxlen: 36
2404:2f40:6000::/36 maxlen: 36
2404:2f40:7000::/36 maxlen: 36
2404:2f40:8000::/36 maxlen: 36
2404:2f40:9000::/36 maxlen: 36
2404:2f40:a000::/36 maxlen: 36
2404:2f40:b000::/36 maxlen: 36
2404:2f40:c000::/36 maxlen: 36
2404:2f40:d000::/36 maxlen: 36
2404:2f40:e000::/36 maxlen: 36
2404:2f40:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2768 (0xad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB384
Validity
Not Before: Jan 20 19:18:44 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=678ea194-f62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:54:f7:9e:11:5a:4c:88:df:ad:a4:e0:f1:
98:3c:ab:43:bf:c9:7f:5c:d7:19:f9:a4:42:75:12:
f3:4b:44:98:78:59:63:05:2f:5b:a6:36:28:a3:a6:
d2:4b:14:bd:a2:ad:7c:4b:4b:ea:13:18:75:a0:c8:
fd:d5:48:03:41:92:38:1f:02:41:91:cb:b3:bd:e4:
66:48:60:65:30:42:28:67:0e:62:2e:84:94:44:7c:
a0:bd:df:80:4e:34:a6:58:7c:d3:dc:fd:6d:f9:bd:
fa:80:3c:ba:bb:ec:3c:5a:94:5f:9d:be:fc:f2:29:
aa:dd:f7:a3:90:13:7d:18:26:12:2d:7c:47:f3:f3:
f0:13:bc:68:52:2f:bb:a3:34:d3:81:11:56:ea:5d:
62:f6:a2:70:78:28:03:64:90:81:3e:b4:99:94:c0:
61:3e:2e:63:4c:72:3e:c5:9f:12:43:a2:99:27:dc:
3d:4d:2d:93:1a:87:f7:8c:11:b2:84:69:0f:3b:d4:
52:0f:d4:47:08:66:de:5e:5f:71:3d:49:c8:a0:15:
2c:3d:28:8a:d1:f6:7c:71:72:2b:9b:fc:12:9b:07:
f4:c6:c6:7f:d2:c9:87:3c:b8:43:c0:1c:62:15:3e:
f2:56:4b:07:1e:02:f6:22:39:69:bb:f1:00:ec:ae:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BB:17:0E:18:49:47:BA:5E:82:5A:79:14:62:C0:11:70:7F:6A:96
X509v3 Authority Key Identifier:
keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.119.0/24
103.108.140.0/24
103.132.96.0/24
IPv6:
2404:2f40::/32
Signature Algorithm: sha256WithRSAEncryption
94:2e:fc:1f:6c:99:b5:ef:ad:02:12:06:7f:6e:15:cd:64:d1:
87:e5:1b:15:19:83:11:c6:5d:dc:82:4f:57:c5:4b:28:2b:6a:
a6:f2:f0:6c:4b:81:09:76:c8:61:11:7f:6d:39:21:40:6c:53:
e0:a9:9e:9d:3b:b1:20:13:39:db:05:ce:e0:29:40:cf:4f:2c:
cb:46:ac:50:2f:c8:e4:45:0b:22:47:4a:fb:c0:06:88:03:95:
11:ca:5a:a2:62:a7:19:82:eb:a0:8e:14:2e:f1:5a:15:e8:ae:
3e:af:60:0c:78:8d:c9:7b:59:48:45:4a:72:63:1e:7e:eb:67:
80:79:f2:c1:8d:3a:dc:7b:67:d5:05:3b:93:f6:64:cc:d5:51:
bb:55:c2:2e:13:41:2a:1a:25:54:61:48:f7:df:a2:cc:4e:9a:
22:cf:64:d2:27:96:8e:7a:eb:8a:98:70:1f:3d:c3:af:b8:91:
3e:9a:e8:b6:27:c0:e9:0a:c5:c6:1a:cd:78:dc:66:e4:c8:64:
51:27:8a:f7:6c:25:05:0c:53:43:11:d1:c7:9c:c5:53:55:be:
91:d1:ac:e3:db:58:4e:96:62:70:32:fd:1d:b3:53:5e:eb:e9:
a3:d1:aa:98:14:13:0e:b5:cf:6e:3e:9f:c9:bd:94:a8:84:fb:
9f:c4:4a:2e
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF
RTAwNjI1NEIwHhcNMjUwMTIwMTkxODQ0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzhlYTE5NC1mNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudtU954RWkyI362k4PGYPKtDv8l/XNcZ+aRCdRLzS0SYeFljBS9bpjYoo6bS
SxS9oq18S0vqExh1oMj91UgDQZI4HwJBkcuzveRmSGBlMEIoZw5iLoSURHygvd+A
TjSmWHzT3P1t+b36gDy6u+w8WpRfnb788imq3fejkBN9GCYSLXxH8/PwE7xoUi+7
ozTTgRFW6l1i9qJweCgDZJCBPrSZlMBhPi5jTHI+xZ8SQ6KZJ9w9TS2TGof3jBGy
hGkPO9RSD9RHCGbeXl9xPUnIoBUsPSiK0fZ8cXIrm/wSmwf0xsZ/0smHPLhDwBxi
FT7yVksHHgL2Ijlpu/EA7K7jxQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBq7Fw4Y
SUe6XoJaeRRiwBFwf2qWMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0
ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUIzODQvQkY0QkQ0NTg0NDgzMTFFQThFQkM2RDI1QzRGOUFFMDIvQzY2RDJEOEM0
NjdCMTFFQTk3MTdERjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBABnMHcDBABnbIwDBABnhGAwDQQCAAIwBwMFACQEL0AwDQYJ
KoZIhvcNAQELBQADggEBAJQu/B9smbXvrQISBn9uFc1k0YflGxUZgxHGXdyCT1fF
Sygraqby8GxLgQl2yGERf205IUBsU+Cpnp07sSATOdsFzuApQM9PLMtGrFAvyORF
CyJHSvvABogDlRHKWqJipxmC66COFC7xWhXorj6vYAx4jcl7WUhFSnJjHn7rZ4B5
8sGNOtx7Z9UFO5P2ZMzVUbtVwi4TQSoaJVRhSPffosxOmiLPZNInlo5664qYcB89
w6+4kT6a6LYnwOkKxcYazXjcZuTIZFEnivdsJQUMU0MR0cecxVNVvpHRrOPbWE6W
YnAy/R2zU17r6aPRqpgUEw61z24+n8m9lKiE+5/ESi4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:13:16 2025 by rpki-client