Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/1AE323249F2D11EC897FD30CC4F9AE02.roa
File: 1AE323249F2D11EC897FD30CC4F9AE02.roa (raw, json)
Hash identifier: KeGUlxiblyObJWylXKCmQlAzDIkOWbFTSQRBaia1TDI=
Subject key identifier: 37:78:E6:CC:FD:E7:00:78:DA:98:0A:A7:E2:7F:E3:E4:0E:B7:20:D3
Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Certificate serial: 02F2
Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/1AE323249F2D11EC897FD30CC4F9AE02.roa
Signing time: Wed 17 Jul 2024 02:23:41 +0000
ROA not before: Wed 17 Jul 2024 02:23:41 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 140718
IP address blocks: 103.152.32.0/24 maxlen: 24
2001:df3:f380::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 754 (0x2f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEF45
Validity
Not Before: Jul 17 02:23:41 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66972b2d-f93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:70:89:fc:92:15:37:89:81:f8:61:65:58:
74:fe:a8:3a:e6:17:2f:67:35:6a:9f:50:b9:b9:be:
0a:d3:d4:84:28:3c:d3:63:44:a6:a5:67:5e:36:5a:
81:83:57:04:13:ff:79:3a:8c:a2:bd:ec:d7:64:51:
e2:84:cf:f6:67:a2:39:76:49:5f:90:0b:38:82:d1:
67:4d:78:3d:99:45:c7:23:2d:74:7a:cd:15:50:d4:
b9:d2:cf:90:e0:f7:9b:8e:68:5f:61:79:cc:65:2f:
c9:8d:81:d7:61:4c:aa:37:67:d5:c4:95:c8:55:22:
06:40:0c:3d:8d:29:12:5e:44:f8:61:99:61:85:54:
a7:02:52:a2:7f:38:e8:c9:3f:74:79:7d:fd:0b:1b:
f8:71:e7:70:a4:46:e2:03:0c:d3:60:c7:f9:d6:d6:
7a:18:fd:52:e8:17:1e:33:fc:2c:5d:ec:68:73:90:
2d:54:34:88:f2:95:c0:b9:92:99:da:fd:61:79:fe:
7f:50:45:bb:a7:1d:82:74:ad:8a:e4:5f:d5:24:79:
59:ee:72:23:31:ff:1b:ee:fe:c0:78:00:1a:37:f2:
01:e1:76:31:0e:3c:58:3f:0b:0a:3d:3f:b8:43:3f:
b8:f1:72:a5:4d:f5:ae:e6:14:15:62:1a:77:c5:70:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:78:E6:CC:FD:E7:00:78:DA:98:0A:A7:E2:7F:E3:E4:0E:B7:20:D3
X509v3 Authority Key Identifier:
keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/1AE323249F2D11EC897FD30CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.32.0/24
IPv6:
2001:df3:f380::/48
Signature Algorithm: sha256WithRSAEncryption
27:54:17:cd:f0:d2:29:d5:39:6a:8a:4f:d3:4a:d9:91:97:32:
8c:48:5d:b1:6d:a6:38:9f:1c:f9:a0:31:d0:36:51:10:9c:50:
f9:6a:4b:1a:7d:ea:83:b9:d4:6c:e9:95:0e:b8:ca:e8:4c:97:
8c:d7:93:9f:c3:b5:25:b0:27:73:9f:12:7c:9f:c8:ca:14:4d:
56:28:8b:04:7b:d6:24:d5:84:bc:75:0a:0c:e8:41:21:03:5a:
05:35:f0:b8:b1:b3:3b:01:e0:4f:ee:55:60:c7:ea:c7:5b:92:
a3:b2:1a:49:66:63:5c:c2:e8:bb:05:f1:59:3e:ec:36:6e:75:
30:1c:b6:e6:08:4e:4b:bb:94:47:30:70:50:a8:4a:b9:0a:18:
6d:64:0b:43:2a:43:c4:ef:b7:b6:12:1e:99:4a:46:c2:cc:f1:
d2:71:60:29:ec:64:33:d3:65:07:ac:8d:b4:58:31:5b:61:c4:
ec:43:ed:a0:b2:a6:9b:fb:74:51:ed:73:a3:0c:84:30:be:fc:
bd:a1:2a:f8:fc:ea:9a:05:3f:5d:a5:2a:c3:63:b2:dc:44:38:
10:71:68:d1:0d:95:d1:62:9d:dd:ec:07:7e:8b:53:a4:fb:40:
3d:00:4a:88:80:48:41:4e:c0:6c:c9:60:e2:51:e4:37:10:c5:
3d:26:64:fa
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVGNDUxMTAvBgNVBAUTKEFDQUE2RTI2QTVGMkRDQUExNENERkM5RUNDOEU5Q0Y2
ODI5QTQwMjEwHhcNMjQwNzE3MDIyMzQxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njk3MmIyZC1mOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjpwifySFTeJgfhhZVh0/qg65hcvZzVqn1C5ub4K09SEKDzTY0SmpWdeNlqB
g1cEE/95OoyivezXZFHihM/2Z6I5dklfkAs4gtFnTXg9mUXHIy10es0VUNS50s+Q
4PebjmhfYXnMZS/JjYHXYUyqN2fVxJXIVSIGQAw9jSkSXkT4YZlhhVSnAlKifzjo
yT90eX39Cxv4cedwpEbiAwzTYMf51tZ6GP1S6BceM/wsXexoc5AtVDSI8pXAuZKZ
2v1hef5/UEW7px2CdK2K5F/VJHlZ7nIjMf8b7v7AeAAaN/IB4XYxDjxYPwsKPT+4
Qz+48XKlTfWu5hQVYhp3xXAF7wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDd45sz9
5wB42pgKp+J/4+QOtyDTMB8GA1UdIwQYMBaAFKyqbial8tyqFM38nsyOnPaCmkAh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUY0NS81RDhCOUI4MjlG
MkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNLb1V6Znllekk2YzlvS2FR
Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JLcHVKcVh5M0tvVXpmeWV6STZjOW9LYVFDRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUVGNDUvNUQ4QjlCODI5RjJBMTFFQ0E3Q0ZBRDBBQzRGOUFFMDIvMUFFMzIzMjQ5
RjJEMTFFQzg5N0ZEMzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnmCAwDwQCAAIwCQMHACABDfPzgDANBgkqhkiG9w0BAQsF
AAOCAQEAJ1QXzfDSKdU5aopP00rZkZcyjEhdsW2mOJ8c+aAx0DZREJxQ+WpLGn3q
g7nUbOmVDrjK6EyXjNeTn8O1JbAnc58SfJ/IyhRNViiLBHvWJNWEvHUKDOhBIQNa
BTXwuLGzOwHgT+5VYMfqx1uSo7IaSWZjXMLouwXxWT7sNm51MBy25ghOS7uURzBw
UKhKuQoYbWQLQypDxO+3thIemUpGwszx0nFgKexkM9NlB6yNtFgxW2HE7EPtoLKm
m/t0Ue1zowyEML78vaEq+PzqmgU/XaUqw2Oy3EQ4EHFo0Q2V0WKd3ewHfotTpPtA
PQBKiIBIQU7AbMlg4lHkNxDFPSZk+g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:04:03 2025 by rpki-client