Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/AB8858D8772D11EF81C09464C4F9AE02.roa
File: AB8858D8772D11EF81C09464C4F9AE02.roa (raw, json)
Hash identifier: 6bihvvTuuH06Qtnv/WN867fRsCnf3ceF8njRfN4WAjY=
Subject key identifier: CB:3C:00:08:EA:FD:80:39:CA:47:93:54:60:62:8C:78:26:39:20:DA
Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2
Certificate serial: 062A
Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/AB8858D8772D11EF81C09464C4F9AE02.roa
Signing time: Fri 20 Sep 2024 08:53:48 +0000
ROA not before: Fri 20 Sep 2024 08:53:48 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 135637
IP address blocks: 103.77.100.0/23 maxlen: 24
103.77.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1578 (0x62a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E
Validity
Not Before: Sep 20 08:53:48 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=66ed381c-7ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:9a:c0:17:c8:9c:5c:93:40:48:db:92:2d:
c6:cf:05:70:4c:59:34:12:7c:1b:7b:97:e1:89:91:
61:b3:b9:4c:99:db:11:14:92:ad:15:f8:82:29:22:
65:08:57:3f:a5:e5:6f:da:00:f7:8f:6c:88:fb:30:
59:3e:69:46:de:bc:de:4f:03:6c:12:0f:84:89:f8:
7d:2b:b4:69:92:1f:84:19:a4:2e:1f:68:90:b9:66:
b5:33:ee:9b:03:60:c5:75:83:3e:63:8d:cc:be:b9:
2a:eb:cc:d5:f1:5c:7f:f0:4f:97:74:d5:a3:30:87:
04:48:a3:f6:ca:9d:e3:e8:76:84:3c:d8:63:fc:c5:
8a:7a:ad:50:db:1d:7e:b3:8c:fc:08:98:4b:90:98:
0e:46:0b:fb:50:20:ca:53:64:1b:ed:0a:28:d4:b3:
bc:01:c8:99:7d:08:dc:9d:38:44:ac:27:e8:6b:20:
93:cd:b6:54:98:45:0b:0f:96:e1:a0:cd:8b:86:cf:
27:d5:3f:01:42:01:9f:36:e5:cf:55:83:a8:d1:82:
a3:7a:62:38:ba:ce:65:15:ab:0a:2e:71:e4:bf:1a:
cd:8b:b0:15:68:04:48:ea:a5:22:d3:81:74:1f:8c:
6b:3f:fd:78:30:81:75:1b:13:aa:87:61:66:9a:4e:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3C:00:08:EA:FD:80:39:CA:47:93:54:60:62:8C:78:26:39:20:DA
X509v3 Authority Key Identifier:
keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/AB8858D8772D11EF81C09464C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.100.0/22
Signature Algorithm: sha256WithRSAEncryption
25:af:44:5f:11:8b:15:ef:5a:52:cb:0f:fe:95:7f:48:fe:29:
4d:41:34:73:84:db:dc:8a:ec:77:68:ab:7c:da:2e:ae:3f:52:
39:2d:35:f1:ab:e0:70:f3:d7:3d:8c:9a:47:b9:35:8c:3f:96:
c0:6f:84:c4:8d:85:ec:ff:32:11:ef:ff:30:34:ab:0b:ff:11:
33:f3:1b:28:44:c6:f5:88:47:d2:34:bf:c6:f3:12:28:2c:ba:
27:4c:09:a3:66:22:a6:fc:56:b2:4f:6d:cc:f9:ab:fc:6e:cf:
fc:c9:21:f2:1f:85:01:0b:e4:0c:d1:f9:35:34:d9:5a:86:ec:
62:1c:e2:80:73:cc:c8:c5:51:08:52:15:17:da:91:fe:a0:11:
c8:18:fe:dc:84:1e:bd:dc:b6:54:73:57:b7:e8:be:88:7a:ad:
5b:9f:c7:53:42:66:a6:97:84:2c:d1:b7:bb:29:d8:78:26:71:
f0:93:51:9a:2e:57:4e:1b:b6:0b:ce:00:18:bb:d7:fa:20:38:
77:57:cb:60:b2:00:1a:a2:5e:9c:42:d7:c3:9f:31:3a:84:87:
92:74:1c:7b:ee:fa:96:8e:51:71:be:4b:26:c5:8f:ed:f5:8f:
1f:e0:43:42:f6:d8:2d:01:3b:d4:b8:62:74:ff:e2:ed:1c:b8:
24:2a:f8:81
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy
NDREQURDRjIwHhcNMjQwOTIwMDg1MzQ4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmVkMzgxYy03ZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMGawBfInFyTQEjbki3GzwVwTFk0Enwbe5fhiZFhs7lMmdsRFJKtFfiCKSJl
CFc/peVv2gD3j2yI+zBZPmlG3rzeTwNsEg+Eifh9K7Rpkh+EGaQuH2iQuWa1M+6b
A2DFdYM+Y43Mvrkq68zV8Vx/8E+XdNWjMIcESKP2yp3j6HaEPNhj/MWKeq1Q2x1+
s4z8CJhLkJgORgv7UCDKU2Qb7Qoo1LO8AciZfQjcnThErCfoayCTzbZUmEULD5bh
oM2Lhs8n1T8BQgGfNuXPVYOo0YKjemI4us5lFasKLnHkvxrNi7AVaARI6qUi04F0
H4xrP/14MIF1GxOqh2Fmmk7L3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMs8AAjq
/YA5ykeTVGBijHgmOSDaMB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC
NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzYxMkUvNjVCQzE3RDIwQjYxMTFFQUFGMDQyRjY4QzRGOUFFMDIvQUI4ODU4RDg3
NzJEMTFFRjgxQzA5NDY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnTWQwDQYJKoZIhvcNAQELBQADggEBACWvRF8RixXvWlLL
D/6Vf0j+KU1BNHOE29yK7Hdoq3zaLq4/UjktNfGr4HDz1z2Mmke5NYw/lsBvhMSN
hez/MhHv/zA0qwv/ETPzGyhExvWIR9I0v8bzEigsuidMCaNmIqb8VrJPbcz5q/xu
z/zJIfIfhQEL5AzR+TU02VqG7GIc4oBzzMjFUQhSFRfakf6gEcgY/tyEHr3ctlRz
V7fovoh6rVufx1NCZqaXhCzRt7sp2HgmcfCTUZouV04btgvOABi71/ogOHdXy2Cy
ABqiXpxC18OfMTqEh5J0HHvu+paOUXG+SybFj+31jx/gQ0L22C0BO9S4YnT/4u0c
uCQq+IE=
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:28:15 2025 by rpki-client