Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/A8F749EAC74C11ED8307D145C4F9AE02.roa
File: A8F749EAC74C11ED8307D145C4F9AE02.roa (raw, json)
Hash identifier: PaFIQ7fDyGjx+tcBpO5oHpzSn6IBpXwD9ZP7+cVEnyU=
Subject key identifier: 6A:F4:F7:C1:D4:55:C2:9F:3D:43:98:99:A0:F0:8F:7E:51:DA:5B:6E
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 0E8D
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/A8F749EAC74C11ED8307D145C4F9AE02.roa
Signing time: Tue 25 Jun 2024 21:01:13 +0000
ROA not before: Tue 25 Jun 2024 21:01:13 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 3360
IP address blocks: 103.30.186.0/23 maxlen: 23
2401:df00:1::/48 maxlen: 48
2401:df00:2::/48 maxlen: 48
2401:df00:11::/48 maxlen: 48
2401:df00:12::/48 maxlen: 48
2401:df00:21::/48 maxlen: 48
2401:df00:22::/48 maxlen: 48
2401:df00:31::/48 maxlen: 48
2401:df00:32::/48 maxlen: 48
2401:df00:41::/48 maxlen: 48
2401:df00:42::/48 maxlen: 48
2401:df00:51::/48 maxlen: 48
2401:df00:52::/48 maxlen: 48
2401:df00:61::/48 maxlen: 48
2401:df00:62::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3725 (0xe8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7
Validity
Not Before: Jun 25 21:01:13 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=667b3019-0d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:ef:bb:40:2b:7c:db:4a:4e:3f:2e:a8:56:
60:40:9f:ce:60:7f:07:dd:0c:11:07:5a:67:ec:9e:
6b:b7:a3:ef:e9:5b:a1:04:12:d0:c1:8f:6f:b5:cc:
52:3b:19:fd:ea:be:16:8c:63:0a:62:aa:40:f3:8d:
75:74:d2:30:e8:6b:85:26:e2:a4:c5:c9:07:d4:c7:
e9:33:3d:76:d1:0c:2c:68:bc:7a:0c:49:3b:da:b9:
0d:18:84:86:1a:73:35:f3:17:0a:4f:92:7c:f4:c0:
d8:e8:4c:b4:08:c8:98:9a:68:2f:d9:18:84:75:93:
91:22:79:98:4d:af:96:27:f9:b8:56:ea:48:4d:ef:
c7:ab:95:df:9c:c5:64:23:db:6d:52:a2:13:d9:61:
ce:ae:a3:0b:dc:f1:14:75:dd:6d:70:5a:02:3e:90:
a4:e8:a5:4a:06:0a:2c:2f:83:dd:9d:67:69:cd:e5:
ee:fc:68:dd:0c:d1:60:7a:44:6b:c7:13:fc:2c:5b:
b7:af:20:74:62:43:2c:20:33:cc:ab:30:28:e0:51:
56:e2:c7:92:e6:c4:74:fc:dc:46:44:31:78:e1:e4:
95:a2:9a:87:d5:a1:0d:b4:50:02:27:f3:c6:2a:5e:
d0:62:ac:7f:fa:a3:78:86:54:ad:46:8e:26:38:a5:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F4:F7:C1:D4:55:C2:9F:3D:43:98:99:A0:F0:8F:7E:51:DA:5B:6E
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/A8F749EAC74C11ED8307D145C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.186.0/23
IPv6:
2401:df00:1::-2401:df00:2:ffff:ffff:ffff:ffff:ffff
2401:df00:11::-2401:df00:12:ffff:ffff:ffff:ffff:ffff
2401:df00:21::-2401:df00:22:ffff:ffff:ffff:ffff:ffff
2401:df00:31::-2401:df00:32:ffff:ffff:ffff:ffff:ffff
2401:df00:41::-2401:df00:42:ffff:ffff:ffff:ffff:ffff
2401:df00:51::-2401:df00:52:ffff:ffff:ffff:ffff:ffff
2401:df00:61::-2401:df00:62:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
be:1a:89:21:22:e0:1b:11:84:75:70:94:0f:72:47:4e:82:d0:
fe:e3:05:cd:9b:b8:4f:06:1a:35:70:2e:9b:ba:f2:a6:6e:2e:
5b:ba:1c:d7:dd:34:c0:d7:05:f9:5f:ea:e0:ef:fd:9e:85:36:
12:34:36:8b:da:81:3a:a7:c6:25:3d:db:8d:07:65:ab:ec:d5:
09:ab:b5:f9:ff:f4:fb:b9:c5:cf:ef:5e:6b:ff:c7:83:99:a5:
0a:0f:b9:92:0c:00:ef:3f:07:4f:cd:c9:50:6a:20:60:68:13:
14:91:06:2f:9a:65:ec:39:5a:ed:ba:bc:96:16:93:40:aa:2c:
4e:23:0b:75:eb:42:a3:18:a6:4b:82:e0:70:45:b2:bf:40:d4:
27:66:cf:fc:35:2a:f7:2e:bc:e3:24:45:95:5e:d8:17:5b:8a:
ea:5c:10:6a:67:7b:72:a1:ec:62:67:94:72:ee:5f:70:05:06:
03:fe:ae:7c:5d:8e:b1:7f:8c:59:18:59:3e:f8:13:e0:54:60:
48:50:f0:47:93:13:5a:56:8c:24:51:f0:18:51:27:9d:4a:7e:
41:5f:6c:91:de:b6:56:70:3a:52:fc:5e:2c:b4:c6:60:12:d9:
6d:a4:9f:dc:91:c2:05:70:a3:5d:da:41:97:7b:76:09:39:ee:
34:c7:c8:2f
-----BEGIN CERTIFICATE-----
MIIGCjCCBPKgAwIBAgICDo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw
MUYxOEZGNDkwHhcNMjQwNjI1MjEwMTEzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdiMzAxOS0wZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1hbvu0ArfNtKTj8uqFZgQJ/OYH8H3QwRB1pn7J5rt6Pv6VuhBBLQwY9vtcxS
Oxn96r4WjGMKYqpA8411dNIw6GuFJuKkxckH1MfpMz120QwsaLx6DEk72rkNGISG
GnM18xcKT5J89MDY6Ey0CMiYmmgv2RiEdZORInmYTa+WJ/m4VupITe/Hq5XfnMVk
I9ttUqIT2WHOrqML3PEUdd1tcFoCPpCk6KVKBgosL4PdnWdpzeXu/GjdDNFgekRr
xxP8LFu3ryB0YkMsIDPMqzAo4FFW4seS5sR0/NxGRDF44eSVopqH1aENtFACJ/PG
Kl7QYqx/+qN4hlStRo4mOKWyQQIDAQABo4IDLjCCAyowHQYDVR0OBBYEFGr098HU
VcKfPUOYmaDwj35R2ltuMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC
MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJDQzcvNzkxQzZBMzQ3QjM4MTFFOUJDMEQzQjMyQzRGOUFFMDIvQThGNzQ5RUFD
NzRDMTFFRDgzMDdEMTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgbcGCCsGAQUFBwEHAQH/
BIGnMIGkMAwEAgABMAYDBAFnHrowgZMEAgACMIGMMBIDBwAkAd8AAAEDBwAkAd8A
AAIwEgMHACQB3wAAEQMHACQB3wAAEjASAwcAJAHfAAAhAwcAJAHfAAAiMBIDBwAk
Ad8AADEDBwAkAd8AADIwEgMHACQB3wAAQQMHACQB3wAAQjASAwcAJAHfAABRAwcA
JAHfAABSMBIDBwAkAd8AAGEDBwAkAd8AAGIwDQYJKoZIhvcNAQELBQADggEBAL4a
iSEi4BsRhHVwlA9yR06C0P7jBc2buE8GGjVwLpu68qZuLlu6HNfdNMDXBflf6uDv
/Z6FNhI0NovagTqnxiU9240HZavs1Qmrtfn/9Pu5xc/vXmv/x4OZpQoPuZIMAO8/
B0/NyVBqIGBoExSRBi+aZew5Wu26vJYWk0CqLE4jC3XrQqMYpkuC4HBFsr9A1Cdm
z/w1KvcuvOMkRZVe2BdbiupcEGpne3Kh7GJnlHLuX3AFBgP+rnxdjrF/jFkYWT74
E+BUYEhQ8EeTE1pWjCRR8BhRJ51KfkFfbJHetlZwOlL8Xiy0xmAS2W2kn9yRwgVw
o13aQZd7dgk57jTHyC8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:44 2025 by rpki-client