Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/7E16D3240B5011EE9A518C7BC4F9AE02.roa
File: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (raw, json)
Hash identifier: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=
Subject key identifier: 4C:D3:F9:9C:C6:06:E1:CF:FF:5D:70:4E:3A:C4:79:5B:E2:78:03:CA
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 039C
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/7E16D3240B5011EE9A518C7BC4F9AE02.roa
Signing time: Mon 17 Mar 2025 00:46:19 +0000
ROA not before: Mon 17 Mar 2025 00:46:19 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 59371
IP address blocks: 103.84.44.0/24 maxlen: 24
103.84.45.0/24 maxlen: 24
103.84.46.0/24 maxlen: 24
103.84.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924 (0x39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6
Validity
Not Before: Mar 17 00:46:19 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67d770db-d601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:f1:d8:16:8f:af:30:d2:76:ae:03:a0:4e:
8d:9d:39:85:d3:4b:cb:70:c7:eb:bd:7e:cf:65:fc:
a9:0c:92:35:14:78:81:ef:99:f5:9f:8b:32:2f:1c:
81:0d:01:3e:1c:3b:08:d0:da:26:47:e5:19:0c:03:
0b:fc:54:3a:c9:94:14:ce:a7:a8:b5:35:67:07:21:
e8:2a:be:5a:17:c8:70:64:a8:af:cd:84:58:ff:05:
94:ba:e3:bf:01:32:f0:bc:4f:0b:10:d6:ff:a7:ad:
7d:0c:55:48:85:d6:a8:50:4f:36:22:30:04:aa:f5:
a2:30:96:e6:9e:51:ff:e2:8c:0f:18:8f:48:36:b1:
97:99:7d:a9:dd:e4:40:0a:5c:21:f6:87:28:0b:43:
9b:91:d1:f4:28:2c:d8:b3:3b:29:eb:a7:b7:21:93:
b6:ef:f3:ff:fd:65:dc:c8:6b:71:58:17:88:4a:e8:
4f:3e:cb:22:f7:d8:8a:5e:dc:6d:95:74:c0:d6:92:
b7:7e:f9:40:cf:da:03:7d:12:02:84:54:93:0e:19:
34:28:24:14:51:e0:86:b0:ba:93:54:89:d1:d9:57:
f3:2d:e3:4d:e4:be:09:c6:3d:f6:cc:11:a2:32:64:
b4:c2:2e:71:4e:2c:b0:86:f2:5f:e8:17:80:04:94:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D3:F9:9C:C6:06:E1:CF:FF:5D:70:4E:3A:C4:79:5B:E2:78:03:CA
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/7E16D3240B5011EE9A518C7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.44.0/22
Signature Algorithm: sha256WithRSAEncryption
50:c8:3f:a4:f9:71:be:8b:a7:ea:bc:a6:cf:4f:30:6e:ae:76:
b0:f3:c0:35:24:5a:15:ea:16:90:16:85:e7:ad:19:a0:94:ba:
01:bb:04:8c:56:7b:5a:4d:c8:18:e0:81:f1:3b:a7:6f:7f:e1:
d9:e5:bd:4f:9a:41:a4:0c:20:dc:83:13:70:c0:3b:78:f0:dd:
67:56:b0:3a:63:30:56:e4:11:16:83:de:e2:86:f3:67:ef:c7:
0f:8a:cc:f7:76:a6:11:19:6b:31:13:79:aa:5f:ff:4c:71:5b:
5f:88:10:14:43:2e:9a:89:f2:ba:14:38:67:b7:cb:4d:7a:f3:
48:53:50:3e:3a:b3:9d:0e:2a:9d:a7:0c:d7:7f:f4:88:f2:0e:
0e:93:5f:db:16:e5:b4:c5:7c:51:8f:69:3f:0d:c3:5b:f9:68:
f0:8d:81:f7:2f:48:42:d6:fd:78:64:72:af:49:7f:e9:e4:b5:
ce:1b:d8:20:38:80:12:07:5e:d6:87:ac:53:11:c4:db:b6:e7:
c9:f8:74:ba:4e:8f:1e:f1:da:9a:bd:43:5e:6b:d0:fa:ea:ef:
38:21:b8:7c:b5:cd:ef:86:90:bf:e3:fb:eb:81:8e:21:d4:30:
79:4d:d7:b8:e8:ef:42:3c:88:47:0a:79:b6:18:8b:f8:37:aa:
3c:58:03:c7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0
NjQ4Q0RFMzcwHhcNMjUwMzE3MDA0NjE5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Q3NzBkYi1kNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIfx2BaPrzDSdq4DoE6NnTmF00vLcMfrvX7PZfypDJI1FHiB75n1n4syLxyB
DQE+HDsI0NomR+UZDAML/FQ6yZQUzqeotTVnByHoKr5aF8hwZKivzYRY/wWUuuO/
ATLwvE8LENb/p619DFVIhdaoUE82IjAEqvWiMJbmnlH/4owPGI9INrGXmX2p3eRA
Clwh9ocoC0ObkdH0KCzYszsp66e3IZO27/P//WXcyGtxWBeISuhPPssi99iKXtxt
lXTA1pK3fvlAz9oDfRIChFSTDhk0KCQUUeCGsLqTVInR2VfzLeNN5L4Jxj32zBGi
MmS0wi5xTiywhvJf6BeABJSRHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEzT+ZzG
BuHP/11wTjrEeVvieAPKMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB
OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzYzQTYvMEQzOUM0RTQ5QTlCMTFFQzgyQzcwQjIwQzRGOUFFMDIvN0UxNkQzMjQw
QjUwMTFFRTlBNTE4QzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnVCwwDQYJKoZIhvcNAQELBQADggEBAFDIP6T5cb6Lp+q8
ps9PMG6udrDzwDUkWhXqFpAWheetGaCUugG7BIxWe1pNyBjggfE7p29/4dnlvU+a
QaQMINyDE3DAO3jw3WdWsDpjMFbkERaD3uKG82fvxw+KzPd2phEZazETeapf/0xx
W1+IEBRDLpqJ8roUOGe3y01680hTUD46s50OKp2nDNd/9IjyDg6TX9sW5bTFfFGP
aT8Nw1v5aPCNgfcvSELW/Xhkcq9Jf+nktc4b2CA4gBIHXtaHrFMRxNu258n4dLpO
jx7x2pq9Q15r0Prq7zghuHy1ze+GkL/j++uBjiHUMHlN17jo70I8iEcKebYYi/g3
qjxYA8c=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:02:40 2025 by rpki-client