Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/2E078068008111F0AB00F337C4F9AE02.roa
File: 2E078068008111F0AB00F337C4F9AE02.roa (raw, json)
Hash identifier: L0VcurEMZhnxDoHdsrQ7FdyysYS7P50ThbLhM71pDkI=
Subject key identifier: A0:E0:CA:80:7A:1B:F7:02:2F:86:60:54:E7:A8:58:48:E6:84:BE:55
Certificate issuer: /CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
Certificate serial: 265E
Authority key identifier: 93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/2E078068008111F0AB00F337C4F9AE02.roa
Signing time: Fri 14 Mar 2025 03:05:27 +0000
ROA not before: Fri 14 Mar 2025 03:05:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 135039
IP address blocks: 103.230.184.0/22 maxlen: 22
2400:f380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9822 (0x265e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4EE6
Validity
Not Before: Mar 14 03:05:27 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67d39cf7-835b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:23:a9:5b:89:14:1f:c0:1c:a7:b0:09:69:
4f:0a:9a:41:b5:84:a9:11:a1:dc:7e:c0:48:5a:60:
13:23:fc:82:ac:35:88:e9:6b:b4:bf:bf:0f:6c:d1:
1c:6c:0d:aa:ea:50:c5:a1:53:2b:b0:3e:98:e5:4b:
d1:5e:5d:42:71:82:bd:f6:35:4d:bf:0d:03:44:c8:
9e:21:2c:f6:09:44:0e:95:b6:6b:a6:7a:04:1e:5f:
c9:52:5b:60:ba:93:a4:1a:71:38:0d:e1:2a:01:3b:
ca:0a:ad:f2:48:e0:bd:b3:af:06:00:e7:d9:33:b8:
1e:f2:4f:9e:9c:cb:67:d5:85:98:03:04:75:3a:fc:
3e:1e:04:e4:b5:e0:a5:2e:91:43:d2:2c:cf:4c:d2:
1c:87:6e:e7:e1:f9:47:11:9d:7f:03:4c:37:90:d8:
98:ea:5a:ba:6a:b9:25:61:65:37:78:94:38:e3:8c:
e6:33:c2:bd:c6:9a:ef:d7:37:45:87:6b:91:bf:89:
5d:27:53:dd:fc:da:2e:23:d8:29:4d:16:f0:a9:df:
8e:e6:16:02:45:28:4a:dd:c7:f7:a4:f5:61:db:9a:
78:1a:40:ae:ab:37:6a:7d:f1:c3:f3:39:91:68:e6:
eb:1e:a2:a5:71:fb:7c:29:1c:c5:9a:4a:b9:d7:89:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E0:CA:80:7A:1B:F7:02:2F:86:60:54:E7:A8:58:48:E6:84:BE:55
X509v3 Authority Key Identifier:
keyid:93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/2E078068008111F0AB00F337C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.184.0/22
IPv6:
2400:f380::/32
Signature Algorithm: sha256WithRSAEncryption
c1:f2:e2:27:8c:9a:f3:9f:aa:31:48:e8:6a:18:f7:f0:a7:35:
b7:c6:9d:dc:1b:af:64:ef:66:12:86:93:76:5f:e6:60:18:37:
6e:d9:25:01:5d:e7:19:8f:ac:f6:71:d9:e4:00:e9:81:8b:69:
82:21:76:30:55:2b:35:52:d1:0d:f3:e8:ca:19:51:4a:47:2c:
a0:f5:e7:a0:3c:19:7a:72:89:7b:c2:ec:25:e9:fc:1b:5c:ae:
4c:7c:98:10:44:4d:1a:e1:4b:8e:96:f2:2c:58:65:9c:87:65:
dd:ca:8d:4c:2a:7d:62:49:32:4b:40:a4:81:05:df:34:c5:e8:
8d:1b:fc:1f:f9:b9:f5:e9:d8:35:df:a5:1a:8b:10:f2:c9:8d:
85:48:38:49:bf:f3:48:0a:e3:6d:9e:b6:4a:36:a7:36:0b:cf:
9f:bb:80:2c:59:51:20:77:10:66:79:56:27:6c:7e:17:92:6a:
5a:f3:ec:af:a2:f2:92:53:71:4b:3a:ce:b4:f4:74:5f:e2:3f:
9b:36:47:47:db:7f:bd:09:ca:e5:e6:aa:cc:6d:d7:96:4e:f7:
05:93:4c:2e:88:8d:e7:e7:50:2e:a3:1c:5f:d4:a5:11:a9:78:
b0:bf:88:2c:4a:fa:3f:a8:86:1c:18:e9:4e:d2:80:28:27:0d:
b8:30:f5:02
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICJl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRFRTYxMTAvBgNVBAUTKDkzNTc0NDQxQjQxNjlGNUNCRTMzMUMyRUVENTZFODgz
RENFRjQ1MjMwHhcNMjUwMzE0MDMwNTI3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2QzOWNmNy04MzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoacjqVuJFB/AHKewCWlPCppBtYSpEaHcfsBIWmATI/yCrDWI6Wu0v78PbNEc
bA2q6lDFoVMrsD6Y5UvRXl1CcYK99jVNvw0DRMieISz2CUQOlbZrpnoEHl/JUltg
upOkGnE4DeEqATvKCq3ySOC9s68GAOfZM7ge8k+enMtn1YWYAwR1Ovw+HgTkteCl
LpFD0izPTNIch27n4flHEZ1/A0w3kNiY6lq6arklYWU3eJQ444zmM8K9xprv1zdF
h2uRv4ldJ1Pd/NouI9gpTRbwqd+O5hYCRShK3cf3pPVh25p4GkCuqzdqffHD8zmR
aObrHqKlcft8KRzFmkq514kvuQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKDgyoB6
G/cCL4ZgVOeoWEjmhL5VMB8GA1UdIwQYMBaAFJNXREG0Fp9cvjMcLu1W6IPc70Uj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVFNi85NTcwQjJFNkRD
RDkxMUU0OEQ3ODlBNTRDNEY5QUUwMi9rMWRFUWJRV24xeS1NeHd1N1Zib2c5enZS
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2sxZEVRYlFXbjF5LU14d3U3VmJvZzl6dlJTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzRFRTYvOTU3MEIyRTZEQ0Q5MTFFNDhENzg5QTU0QzRGOUFFMDIvMkUwNzgwNjgw
MDgxMTFGMEFCMDBGMzM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJn5rgwDQQCAAIwBwMFACQA84AwDQYJKoZIhvcNAQELBQAD
ggEBAMHy4ieMmvOfqjFI6GoY9/CnNbfGndwbr2TvZhKGk3Zf5mAYN27ZJQFd5xmP
rPZx2eQA6YGLaYIhdjBVKzVS0Q3z6MoZUUpHLKD156A8GXpyiXvC7CXp/Btcrkx8
mBBETRrhS46W8ixYZZyHZd3KjUwqfWJJMktApIEF3zTF6I0b/B/5ufXp2DXfpRqL
EPLJjYVIOEm/80gK422etko2pzYLz5+7gCxZUSB3EGZ5VidsfheSalrz7K+i8pJT
cUs6zrT0dF/iP5s2R0fbf70JyuXmqsxt15ZO9wWTTC6IjefnUC6jHF/UpRGpeLC/
iCxK+j+ohhwY6U7SgCgnDbgw9QI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:43:01 2025 by rpki-client