Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/E9237B16683211EDA8B5DD35C4F9AE02.roa
File: E9237B16683211EDA8B5DD35C4F9AE02.roa (raw, json)
Hash identifier: m/W09ZD2DgnbOhKrF8d5SNMRuuUCLsB529DhjnozbkQ=
Subject key identifier: 3E:DB:C6:30:59:EF:FC:BB:27:47:05:3E:B4:61:DE:AF:5C:F1:CA:87
Certificate issuer: /CN=A91C751F/serialNumber=497A69983409AD70C217564071CCF5BE34C51BC7
Certificate serial: 0426
Authority key identifier: 49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/E9237B16683211EDA8B5DD35C4F9AE02.roa
Signing time: Tue 31 Dec 2024 00:02:40 +0000
ROA not before: Tue 31 Dec 2024 00:02:40 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 149042
IP address blocks: 103.177.80.0/23 maxlen: 23
2400:38e0::/48 maxlen: 48
2400:38e0:1::/48 maxlen: 48
2400:38e0:100::/40 maxlen: 40
2400:38e0:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1062 (0x426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C751F
Validity
Not Before: Dec 31 00:02:40 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677334a0-617b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5e:11:c1:66:c3:b6:1a:dd:24:ce:a9:82:9e:
47:0c:55:84:92:5f:83:b1:a0:44:8c:8e:3b:17:e2:
94:7f:e4:b8:7b:65:15:69:98:76:0d:73:42:32:6f:
7b:ea:60:6f:d4:de:f6:74:49:42:69:51:47:1c:c5:
a7:6c:cf:ea:22:38:4d:98:ec:f5:19:a0:75:d4:f2:
7f:43:58:b6:78:17:83:d8:bc:0a:9c:d9:97:51:95:
eb:c0:5b:62:82:06:cc:d2:1e:53:44:5b:21:0b:fe:
88:bc:f7:6d:28:bb:9f:d7:24:60:29:91:d0:51:c4:
52:94:f6:46:a5:9c:c2:82:b2:6b:23:5a:b6:b9:34:
b6:e3:e4:cf:f4:da:bd:20:29:c0:8d:ef:0f:90:b5:
e3:b9:3b:70:a0:c7:8d:37:03:7c:6b:43:89:6d:fc:
03:ad:f6:58:87:fc:19:05:62:fa:e9:73:69:6e:1b:
d3:60:35:5a:3a:e2:8a:1b:38:6e:61:8a:4f:f1:d9:
4c:c9:2a:7c:7c:5c:2b:b9:9e:43:3a:5a:ac:1e:dd:
bd:2d:c9:93:92:4d:60:66:ca:79:29:e0:4a:2f:4f:
c5:1d:e3:ea:97:df:b9:fa:8d:0d:c6:20:eb:f3:c0:
5f:af:07:ed:0a:6d:2b:98:6b:a8:cc:86:d2:02:47:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DB:C6:30:59:EF:FC:BB:27:47:05:3E:B4:61:DE:AF:5C:F1:CA:87
X509v3 Authority Key Identifier:
keyid:49:7A:69:98:34:09:AD:70:C2:17:56:40:71:CC:F5:BE:34:C5:1B:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/SXppmDQJrXDCF1ZAccz1vjTFG8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXppmDQJrXDCF1ZAccz1vjTFG8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C751F/183981D2518411EC96120640C4F9AE02/E9237B16683211EDA8B5DD35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.80.0/23
IPv6:
2400:38e0::/47
2400:38e0:100::-2400:38e0:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b9:26:b3:25:44:76:62:9e:96:6b:b4:66:31:86:d0:5a:18:7d:
d6:4e:d9:5c:aa:41:63:d5:9b:d1:99:23:a5:f9:d4:94:9d:6d:
8a:26:1c:93:43:22:c5:ab:0d:9f:49:24:ce:d6:65:43:65:01:
80:86:1c:c7:91:8a:05:c9:25:90:ed:11:9b:6a:06:10:0f:40:
3b:21:e2:ca:4a:1e:3d:aa:e3:8d:72:15:46:a4:1e:81:48:be:
37:44:e7:2c:69:67:13:49:d3:6e:a5:0e:c4:f3:37:1a:a1:f5:
f9:91:b4:d8:86:04:ac:72:4b:ed:b2:f9:c4:1e:2d:d8:b1:9b:
06:55:d7:54:3e:d1:53:f9:4a:a9:f1:33:3f:40:10:2b:37:cb:
a6:85:e4:e8:f3:c4:e0:d6:17:e6:29:90:f8:f4:ca:81:49:e4:
21:df:eb:b7:ae:47:84:53:1c:bd:5f:f0:a0:35:21:f8:0c:63:
1a:56:a6:cf:cf:55:24:28:ef:35:f5:d5:cc:69:6f:4f:6a:e2:
63:c8:8f:12:78:de:bb:e1:66:c1:a1:f9:0d:5d:7a:84:6c:17:
fd:cb:f3:e1:6f:c4:70:3d:7f:92:4e:a9:79:37:28:bb:5c:44:
6e:4b:3c:de:48:77:b3:e1:f8:12:a4:c1:c1:89:3e:c4:b8:a5:
f3:c5:2d:2e
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc1MUYxMTAvBgNVBAUTKDQ5N0E2OTk4MzQwOUFENzBDMjE3NTY0MDcxQ0NGNUJF
MzRDNTFCQzcwHhcNMjQxMjMxMDAwMjQwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzczMzRhMC02MTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmV4RwWbDthrdJM6pgp5HDFWEkl+DsaBEjI47F+KUf+S4e2UVaZh2DXNCMm97
6mBv1N72dElCaVFHHMWnbM/qIjhNmOz1GaB11PJ/Q1i2eBeD2LwKnNmXUZXrwFti
ggbM0h5TRFshC/6IvPdtKLuf1yRgKZHQUcRSlPZGpZzCgrJrI1q2uTS24+TP9Nq9
ICnAje8PkLXjuTtwoMeNNwN8a0OJbfwDrfZYh/wZBWL66XNpbhvTYDVaOuKKGzhu
YYpP8dlMySp8fFwruZ5DOlqsHt29LcmTkk1gZsp5KeBKL0/FHePql9+5+o0NxiDr
88BfrwftCm0rmGuozIbSAkc1jQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFD7bxjBZ
7/y7J0cFPrRh3q9c8cqHMB8GA1UdIwQYMBaAFEl6aZg0Ca1wwhdWQHHM9b40xRvH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzUxRi8xODM5ODFEMjUx
ODQxMUVDOTYxMjA2NDBDNEY5QUUwMi9TWHBwbURRSnJYRENGMVpBY2N6MXZqVEZH
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NYcHBtRFFKclhEQ0YxWkFjY3oxdmpURkc4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzc1MUYvMTgzOTgxRDI1MTg0MTFFQzk2MTIwNjQwQzRGOUFFMDIvRTkyMzdCMTY2
ODMyMTFFREE4QjVERDM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E
MzAxMAwEAgABMAYDBAFnsVAwIQQCAAIwGwMHASQAOOAAADAQAwYAJAA44AEDBgAk
ADjgAjANBgkqhkiG9w0BAQsFAAOCAQEAuSazJUR2Yp6Wa7RmMYbQWhh91k7ZXKpB
Y9Wb0ZkjpfnUlJ1tiiYck0MixasNn0kkztZlQ2UBgIYcx5GKBcklkO0Rm2oGEA9A
OyHiykoeParjjXIVRqQegUi+N0TnLGlnE0nTbqUOxPM3GqH1+ZG02IYErHJL7bL5
xB4t2LGbBlXXVD7RU/lKqfEzP0AQKzfLpoXk6PPE4NYX5imQ+PTKgUnkId/rt65H
hFMcvV/woDUh+AxjGlamz89VJCjvNfXVzGlvT2riY8iPEnjeu+FmwaH5DV16hGwX
/cvz4W/EcD1/kk6peTcou1xEbks83kh3s+H4EqTBwYk+xLil88UtLg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:07 2025 by rpki-client