Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/9056CDF6A6D211EDA1D2862BC4F9AE02.roa
File: 9056CDF6A6D211EDA1D2862BC4F9AE02.roa (raw, json)
Hash identifier: l25nuyCLbxX8YszYNp7Lh0hCVKg/XaMvp8JSklUBmx4=
Subject key identifier: 23:E6:87:5E:BB:87:2C:EA:E1:52:AE:80:C5:B1:FE:65:CF:05:E2:9A
Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial: 05E9
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/9056CDF6A6D211EDA1D2862BC4F9AE02.roa
Signing time: Sun 15 Sep 2024 01:12:32 +0000
ROA not before: Sun 15 Sep 2024 01:12:32 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 139471
IP address blocks: 103.99.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1513 (0x5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B29F8
Validity
Not Before: Sep 15 01:12:32 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e63480-e7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:eb:33:80:e7:9b:04:3e:af:a8:d2:da:bd:
df:1f:64:c2:8d:5c:f1:59:e8:b7:3a:66:ab:9f:49:
44:ae:66:05:5f:78:82:02:e1:7e:11:98:a4:4d:1f:
18:ac:9b:60:6f:e6:3f:c3:42:b7:e3:6d:42:d6:d5:
a2:16:be:26:da:ce:42:23:41:d9:66:43:77:04:89:
39:cd:33:82:76:81:5a:09:8d:30:65:5e:c1:0f:18:
06:5d:c6:02:99:d4:bb:60:d8:f2:2c:5b:ec:f7:73:
90:6d:02:63:b0:cd:d7:28:6c:31:a4:bd:14:a2:0a:
9b:e4:d1:7d:9e:f9:61:7f:19:fd:79:52:ec:c0:c8:
d4:e2:a8:2d:44:9d:12:3a:9d:cc:0e:4c:22:89:87:
fa:1a:bb:40:93:55:4f:fc:e2:01:29:bf:68:19:96:
b5:8b:d5:fd:80:e5:65:a9:4d:e7:f9:ac:59:bf:ae:
54:95:c2:20:f3:1f:48:75:84:a5:96:1e:05:eb:52:
44:20:d8:11:48:ca:c7:01:22:65:c9:26:42:5c:67:
6c:56:aa:a3:0d:b7:d1:00:8d:2d:a8:cf:69:d2:8e:
b3:90:bb:91:b8:2a:04:80:66:d9:85:3d:e9:29:03:
76:86:ab:b2:34:a6:98:d0:4d:b4:ef:ec:1c:f9:81:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:87:5E:BB:87:2C:EA:E1:52:AE:80:C5:B1:FE:65:CF:05:E2:9A
X509v3 Authority Key Identifier:
keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/9056CDF6A6D211EDA1D2862BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.62.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:70:a3:d1:4c:fd:66:15:83:46:ad:b5:ff:3d:e8:f0:3b:c7:
b7:94:3a:1c:c8:2f:f1:ff:43:63:d7:f1:a1:02:64:8c:a9:42:
3b:d0:a6:2a:c5:2a:77:c3:0a:b8:a2:b4:01:a7:55:a7:80:b0:
3c:78:1c:da:94:2b:8b:de:cd:e7:9f:cc:e1:0b:6c:a6:33:1b:
7e:f5:2a:f3:a6:15:cf:07:80:65:c3:e5:69:07:56:57:60:a9:
de:65:c8:07:81:6b:50:5f:c4:ff:d8:23:1a:1a:61:3b:1e:dc:
93:3c:a3:c7:4a:fe:3b:1c:ee:3f:32:7c:d6:fe:d9:c9:6c:d9:
79:cf:af:f9:3d:19:80:7d:65:e9:c6:d6:4b:12:3a:ac:f0:6e:
c1:0a:6f:d9:1c:70:4f:ea:94:fc:29:e4:12:8e:7d:05:d9:00:
05:39:56:e6:7c:4d:eb:e2:4d:ca:27:da:6c:97:72:59:90:ab:
18:11:b2:ea:00:26:89:8b:d2:3c:e6:c0:a7:db:bf:e8:fa:6d:
2c:ab:55:3b:00:57:af:fa:ef:a9:0c:d3:d1:ae:40:97:c9:52:
f4:69:23:97:60:28:4f:65:3c:2f:ea:bc:2d:20:e8:8d:0d:aa:
fa:69:3a:81:8a:91:3a:4d:98:8e:98:59:bd:b0:ec:87:23:57:
36:df:9a:5f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB
RjA5Rjg0MTEwHhcNMjQwOTE1MDExMjMyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmU2MzQ4MC1lN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzSXrM4DnmwQ+r6jS2r3fH2TCjVzxWei3Omarn0lErmYFX3iCAuF+EZikTR8Y
rJtgb+Y/w0K3421C1tWiFr4m2s5CI0HZZkN3BIk5zTOCdoFaCY0wZV7BDxgGXcYC
mdS7YNjyLFvs93OQbQJjsM3XKGwxpL0Uogqb5NF9nvlhfxn9eVLswMjU4qgtRJ0S
Op3MDkwiiYf6GrtAk1VP/OIBKb9oGZa1i9X9gOVlqU3n+axZv65UlcIg8x9IdYSl
lh4F61JEINgRSMrHASJlySZCXGdsVqqjDbfRAI0tqM9p0o6zkLuRuCoEgGbZhT3p
KQN2hquyNKaY0E207+wc+YGTbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCPmh167
hyzq4VKugMWx/mXPBeKaMB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw
NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjI5RjgvOTJEMEJFMDI5MDY4MTFFQjlFM0ZDNjZDQzRGOUFFMDIvOTA1NkNERjZB
NkQyMTFFREExRDI4NjJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnYz4wDQYJKoZIhvcNAQELBQADggEBAMNwo9FM/WYVg0at
tf896PA7x7eUOhzIL/H/Q2PX8aECZIypQjvQpirFKnfDCriitAGnVaeAsDx4HNqU
K4vezeefzOELbKYzG371KvOmFc8HgGXD5WkHVldgqd5lyAeBa1BfxP/YIxoaYTse
3JM8o8dK/jsc7j8yfNb+2cls2XnPr/k9GYB9ZenG1ksSOqzwbsEKb9kccE/qlPwp
5BKOfQXZAAU5VuZ8TeviTcon2myXclmQqxgRsuoAJomL0jzmwKfbv+j6bSyrVTsA
V6/676kM09GuQJfJUvRpI5dgKE9lPC/qvC0g6I0NqvppOoGKkTpNmI6YWb2w7Icj
Vzbfml8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:58 2025 by rpki-client