Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/A163C5C869A111ECA4837D28C4F9AE02.roa
File: A163C5C869A111ECA4837D28C4F9AE02.roa (raw, json)
Hash identifier: 0FTXingfRpsDYE8pdr5oSJqnzaTNs/nKqdTBW/g0vX8=
Subject key identifier: 68:B8:E4:26:14:AF:54:B0:30:FC:B8:B9:39:08:7B:DD:2B:55:03:AA
Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Certificate serial: 2290
Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/A163C5C869A111ECA4837D28C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:54:33 +0000
ROA not before: Tue 31 Dec 2024 15:54:33 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 30456
IP address blocks: 103.241.212.0/22 maxlen: 24
202.165.124.0/22 maxlen: 22
202.165.126.0/24 maxlen: 24
202.165.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8848 (0x2290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2663
Validity
Not Before: Dec 31 15:54:33 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677413b8-599e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:38:d5:e1:25:b5:2a:4a:6b:e4:79:d5:3a:
69:d4:33:35:b3:57:24:31:d0:ac:1f:c5:eb:72:0a:
f8:70:2e:fb:02:20:30:6f:01:58:bc:fa:0c:cf:46:
95:18:2f:bf:42:99:f0:7e:2e:a9:88:d8:54:8d:a8:
30:10:58:d7:12:cc:3a:ed:13:2b:c9:a6:4f:25:73:
de:4c:78:53:79:c5:e2:78:f0:b3:7b:fc:f6:94:e4:
c9:0a:f2:0c:46:fd:cf:bf:42:6a:3a:05:46:8d:84:
06:aa:b5:ed:58:13:26:be:ff:8b:7d:a2:64:c6:d4:
59:d2:87:bd:df:af:1f:0e:14:02:1f:cf:f2:6a:ca:
09:86:48:3c:9e:75:f9:48:96:39:67:93:fd:18:13:
51:40:c0:bf:da:25:ae:e6:39:d0:3e:56:c7:1e:d0:
27:3d:9a:7a:ff:7e:12:c4:a9:0b:b0:98:d6:6a:ab:
7b:7d:b1:41:40:9f:93:dc:82:63:f0:6a:12:89:cd:
4f:be:6e:b4:0b:74:4f:83:13:a5:64:bb:ff:4b:c4:
7b:84:df:d5:31:ae:2b:02:50:76:6d:f0:3b:e1:2c:
26:b8:83:0a:83:d1:4c:e4:be:55:6e:c3:17:21:92:
8e:2f:ef:92:dd:95:70:52:5f:d8:51:44:2f:3a:4d:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:E4:26:14:AF:54:B0:30:FC:B8:B9:39:08:7B:DD:2B:55:03:AA
X509v3 Authority Key Identifier:
keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/A163C5C869A111ECA4837D28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.241.212.0/22
202.165.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:5c:f2:b0:ef:eb:26:75:f3:73:9a:97:a2:86:81:c1:fb:a2:
db:92:46:0c:0d:19:ae:14:d9:df:f1:90:10:46:f9:63:d3:d6:
9e:ce:2f:d1:13:87:72:66:80:11:7a:2c:fd:70:58:41:5f:1d:
06:68:63:84:37:2d:bf:46:d0:8b:b9:80:ac:45:38:46:cb:b9:
69:3b:dc:a3:22:16:94:5f:96:86:61:6a:b6:ed:d1:25:33:7d:
2d:4b:30:3a:99:d7:dd:e7:44:3c:db:64:fa:2d:b9:c8:9a:85:
ae:f5:16:ab:e4:78:04:0e:56:97:0b:5a:83:15:2f:d3:35:da:
40:bb:d9:03:8a:6c:2f:31:35:3f:da:c2:8e:50:35:5f:25:34:
b3:fa:4e:3f:4f:3b:6f:0e:7c:cd:5a:ba:d1:0a:fe:99:04:40:
74:a0:f5:33:83:3f:eb:a5:e7:22:5a:e5:25:00:66:41:b2:28:
4a:70:0f:1c:77:20:0c:c2:77:d2:8a:40:48:ac:e9:4d:d8:a8:
4c:bd:9c:f3:49:66:6b:39:aa:ab:88:06:14:c4:90:db:c1:a7:
e1:a9:3b:6f:fc:c0:e9:09:65:1c:20:3f:0b:d6:c4:4c:8b:68:
f0:17:f9:ae:eb:3a:f1:65:a9:e9:ad:cc:33:db:8c:d0:60:09:
da:40:ec:45
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICIpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2
MkJFNTc4ODgwHhcNMjQxMjMxMTU1NDMzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc0MTNiOC01OTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzps41eEltSpKa+R51Tpp1DM1s1ckMdCsH8Xrcgr4cC77AiAwbwFYvPoMz0aV
GC+/Qpnwfi6piNhUjagwEFjXEsw67RMryaZPJXPeTHhTecXiePCze/z2lOTJCvIM
Rv3Pv0JqOgVGjYQGqrXtWBMmvv+LfaJkxtRZ0oe9368fDhQCH8/yasoJhkg8nnX5
SJY5Z5P9GBNRQMC/2iWu5jnQPlbHHtAnPZp6/34SxKkLsJjWaqt7fbFBQJ+T3IJj
8GoSic1Pvm60C3RPgxOlZLv/S8R7hN/VMa4rAlB2bfA74SwmuIMKg9FM5L5VbsMX
IZKOL++S3ZVwUl/YUUQvOk0gWwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGi45CYU
r1SwMPy4uTkIe90rVQOqMB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5
NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzI2NjMvQjhBRUYxMzhBOTRDMTFFNTgyOTFDQTY3QzRGOUFFMDIvQTE2M0M1Qzg2
OUExMTFFQ0E0ODM3RDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJn8dQDBALKpXwwDQYJKoZIhvcNAQELBQADggEBAK1c8rDv
6yZ183Oal6KGgcH7otuSRgwNGa4U2d/xkBBG+WPT1p7OL9ETh3JmgBF6LP1wWEFf
HQZoY4Q3Lb9G0Iu5gKxFOEbLuWk73KMiFpRfloZharbt0SUzfS1LMDqZ193nRDzb
ZPotuciaha71FqvkeAQOVpcLWoMVL9M12kC72QOKbC8xNT/awo5QNV8lNLP6Tj9P
O28OfM1autEK/pkEQHSg9TODP+ul5yJa5SUAZkGyKEpwDxx3IAzCd9KKQEis6U3Y
qEy9nPNJZms5qquIBhTEkNvBp+GpO2/8wOkJZRwgPwvWxEyLaPAX+a7rOvFlqemt
zDPbjNBgCdpA7EU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:56:29 2025 by rpki-client