Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
File: A1F46062A64611EAA24E1461C4F9AE02.roa (raw, json)
Hash identifier: WPQQ6V7efa7fb8nJuM/CRZGnnAAa2WyVzIIakNwqKYA=
Subject key identifier: D2:1D:22:57:5D:9B:34:16:5B:A0:BA:FF:88:1A:3B:50:7D:84:53:6B
Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
Certificate serial: 08DE
Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
Signing time: Wed 12 Feb 2025 21:19:05 +0000
ROA not before: Wed 12 Feb 2025 21:19:05 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 134074
IP address blocks: 103.51.60.0/24 maxlen: 24
103.142.243.0/24 maxlen: 24
2001:df3:9840::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD090
Validity
Not Before: Feb 12 21:19:05 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ad1048-470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:fa:90:56:ad:8b:24:4a:f7:25:3f:c7:ce:
b4:dd:b4:67:47:5d:ae:56:86:d8:44:38:97:6b:47:
58:c6:9c:2e:82:d0:42:7e:55:57:7e:d7:77:32:b4:
58:5f:be:a1:e3:ec:b2:40:70:c0:b0:c4:e5:4f:ad:
22:f8:26:04:b3:f9:a2:05:e9:ba:9b:3d:10:cc:8c:
a9:8f:a2:62:36:8e:31:08:94:3c:34:59:9f:f0:c7:
34:19:14:59:bc:ce:29:02:5a:b3:d0:85:f9:60:2a:
e0:5c:4c:07:5a:e1:18:dc:a3:ec:f0:9b:81:a9:49:
7e:46:de:fc:da:1f:d8:6c:97:e8:1d:ab:ab:83:4d:
37:51:87:07:05:8c:e8:02:f8:0a:04:e7:47:01:76:
0c:10:d3:46:94:f5:58:89:2c:93:1d:64:75:29:75:
88:58:42:e4:78:7a:ad:31:9f:08:d0:5e:96:d3:d0:
a9:b3:0b:1a:34:35:ca:78:eb:c0:53:3a:48:7a:6d:
04:75:b6:52:0c:eb:d6:da:6f:03:0c:d7:78:63:55:
a6:37:a7:ba:e6:12:95:db:06:38:ec:f1:dd:67:32:
0e:06:d7:90:72:f4:73:ad:3a:59:b1:93:29:ee:6b:
9f:ea:bb:e0:f0:f2:0e:bb:72:91:4b:1e:f7:d8:dc:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1D:22:57:5D:9B:34:16:5B:A0:BA:FF:88:1A:3B:50:7D:84:53:6B
X509v3 Authority Key Identifier:
keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.60.0/24
103.142.243.0/24
IPv6:
2001:df3:9840::/48
Signature Algorithm: sha256WithRSAEncryption
67:0f:1e:2d:d4:ce:64:6d:fa:a6:7e:66:a4:e7:30:b6:51:60:
9b:0e:d1:4a:1c:f3:5c:fc:74:b3:7a:84:d3:ee:95:b7:37:ea:
ad:c1:91:85:bf:63:94:e7:f1:a9:14:ce:e5:14:b7:c3:02:26:
f1:f2:b8:23:f8:37:10:30:7c:7c:7f:f5:ca:0e:11:6a:7d:f8:
a4:8b:d9:22:aa:0c:40:9d:7d:01:c9:4f:98:75:58:1c:9a:a4:
85:e2:70:34:f2:d4:f0:c1:a1:05:ff:32:a9:f8:6a:77:66:88:
01:71:2a:9d:c5:0e:ba:4a:19:b1:0a:40:ea:1b:b5:ba:13:54:
6d:64:96:e2:57:5a:2b:3e:aa:eb:28:13:55:9a:16:80:f2:ed:
50:5f:72:2d:d0:b5:1d:b4:7e:7b:71:b1:d4:85:57:80:f4:b8:
39:76:29:e8:36:67:ae:75:fa:7e:e7:86:cf:08:38:f1:ab:a2:
56:5d:20:f5:36:4d:30:d2:ed:0e:16:d1:39:10:f0:a9:ce:62:
e5:18:8c:7c:16:cd:9b:d0:c2:fe:cf:fd:55:65:0a:05:b7:3b:
38:65:df:70:31:ae:ed:2b:9d:c0:97:8c:21:c2:20:71:04:54:
2e:12:e6:3b:c0:d8:f2:9f:0c:02:c3:25:e4:75:b7:4a:77:11:
da:b5:76:a7
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE
QUIxMkMxRjQwHhcNMjUwMjEyMjExOTA1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2FkMTA0OC00NzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupj6kFatiyRK9yU/x8603bRnR12uVobYRDiXa0dYxpwugtBCflVXftd3MrRY
X76h4+yyQHDAsMTlT60i+CYEs/miBem6mz0QzIypj6JiNo4xCJQ8NFmf8Mc0GRRZ
vM4pAlqz0IX5YCrgXEwHWuEY3KPs8JuBqUl+Rt782h/YbJfoHaurg003UYcHBYzo
AvgKBOdHAXYMENNGlPVYiSyTHWR1KXWIWELkeHqtMZ8I0F6W09CpswsaNDXKeOvA
UzpIem0EdbZSDOvW2m8DDNd4Y1WmN6e65hKV2wY47PHdZzIOBteQcvRzrTpZsZMp
7muf6rvg8PIOu3KRSx732NyFQwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFNIdIldd
mzQWW6C6/4gaO1B9hFNrMB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2
NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkQwOTAvMkRDRTA0OENBNjQ1MTFFQTg2MUFEMzVFQzRGOUFFMDIvQTFGNDYwNjJB
NjQ2MTFFQUEyNEUxNDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBABnMzwDBABnjvMwDwQCAAIwCQMHACABDfOYQDANBgkqhkiG
9w0BAQsFAAOCAQEAZw8eLdTOZG36pn5mpOcwtlFgmw7RShzzXPx0s3qE0+6Vtzfq
rcGRhb9jlOfxqRTO5RS3wwIm8fK4I/g3EDB8fH/1yg4Ran34pIvZIqoMQJ19AclP
mHVYHJqkheJwNPLU8MGhBf8yqfhqd2aIAXEqncUOukoZsQpA6hu1uhNUbWSW4lda
Kz6q6ygTVZoWgPLtUF9yLdC1HbR+e3Gx1IVXgPS4OXYp6DZnrnX6fueGzwg48aui
Vl0g9TZNMNLtDhbRORDwqc5i5RiMfBbNm9DC/s/9VWUKBbc7OGXfcDGu7SudwJeM
IcIgcQRULhLmO8DY8p8MAsMl5HW3SncR2rV2pw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 17:50:58 2025 by rpki-client