Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/A825CC96324011EC9E90243EC4F9AE02.roa
File: A825CC96324011EC9E90243EC4F9AE02.roa (raw, json)
Hash identifier: Csw4qj9xE9hGEDImUH/XPPY2KPdm1RGZvA3bAW3MNCY=
Subject key identifier: ED:4D:E5:EF:D3:59:43:62:F2:B3:61:38:5B:4F:75:95:D2:FA:AA:B7
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 0687
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/A825CC96324011EC9E90243EC4F9AE02.roa
Signing time: Mon 02 Dec 2024 22:31:54 +0000
ROA not before: Mon 02 Dec 2024 22:31:54 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134548
IP address blocks: 103.42.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04
Validity
Not Before: Dec 2 22:31:54 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=674e355a-eb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:47:23:7a:07:89:e3:2b:15:12:85:cf:9f:
eb:8f:48:8b:a9:95:88:c9:18:b2:16:f8:12:ee:1a:
e9:7e:82:a9:f3:ac:89:e6:41:3d:af:4e:05:a5:3b:
cc:7d:2f:e2:00:d1:91:19:1e:10:1a:38:5e:6e:59:
67:c3:90:06:64:bb:f9:80:68:35:c0:c6:4f:f6:46:
8d:37:e1:7e:4e:05:6e:e2:b4:03:50:67:7f:33:6a:
17:ce:7e:5f:a2:bb:8a:13:f1:6c:be:90:85:2c:9a:
a0:20:8f:46:2e:b0:f2:68:cc:00:2e:d1:42:84:f5:
65:c0:15:87:1d:66:d4:88:ad:ad:c6:1f:34:35:ad:
c1:9e:24:b3:2d:db:d8:11:ee:b5:7c:3b:39:6f:75:
09:0d:90:4e:bb:83:7e:4f:20:75:47:94:ab:5e:7f:
43:66:2a:86:ce:ab:26:30:4b:6f:15:07:ed:ba:56:
9e:93:54:38:9e:50:ce:1d:01:3a:48:b1:07:03:b5:
31:d2:1e:f0:3b:fe:b5:6a:8e:d7:b7:f3:fd:f9:ce:
fc:24:d9:c5:c6:b9:78:f2:b8:a8:9e:ce:2e:a6:ad:
27:95:fb:f2:e9:6a:5f:b7:11:4c:05:0b:1f:91:9b:
c7:40:2f:b9:79:00:8e:0b:d3:de:9b:f6:fa:1f:8a:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4D:E5:EF:D3:59:43:62:F2:B3:61:38:5B:4F:75:95:D2:FA:AA:B7
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/A825CC96324011EC9E90243EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:bd:35:c2:ef:cd:05:3b:55:17:8f:44:aa:b5:f9:e4:b5:4e:
00:07:e4:ef:c3:c7:ad:98:df:a3:b2:14:0d:98:7b:b8:8b:a8:
ed:1c:3d:8f:39:80:cd:67:01:e6:13:7c:44:66:da:aa:0f:22:
81:a2:d6:8c:06:d1:d2:a1:5f:20:e8:61:f5:6b:fa:16:b9:c6:
58:ba:07:31:59:07:e2:32:a5:2c:34:3a:95:a3:9a:cf:e7:76:
b2:7d:bb:01:30:c3:05:2a:82:56:90:a6:87:8b:3c:85:e2:6c:
e2:9f:57:ea:95:59:ab:71:11:fd:26:d8:86:25:98:24:e7:86:
7d:c2:20:3b:a7:ae:6e:14:d2:f3:a3:de:77:20:8a:be:20:34:
be:a4:af:b1:c7:3f:b0:07:b6:aa:71:38:97:87:fc:e8:46:3e:
b2:79:15:c6:c5:42:68:72:ac:af:2b:63:dc:80:ad:96:72:72:
a4:2c:6b:81:db:d5:5d:dd:e7:f2:57:69:2d:37:c4:2d:9b:71:
f3:86:03:38:c0:3b:af:f3:10:2b:39:ec:2c:a1:18:45:18:e6:
18:fd:25:fb:9b:a6:b6:ff:1f:b8:3d:35:3f:88:7a:09:f9:47:
b1:57:24:a6:e4:bb:12:54:48:7b:b7:c0:4b:ad:bb:49:0d:f2:
6d:a0:ee:b0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz
MzJEQTQzQ0IwHhcNMjQxMjAyMjIzMTU0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRlMzU1YS1lYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0K9HI3oHieMrFRKFz5/rj0iLqZWIyRiyFvgS7hrpfoKp86yJ5kE9r04FpTvM
fS/iANGRGR4QGjhebllnw5AGZLv5gGg1wMZP9kaNN+F+TgVu4rQDUGd/M2oXzn5f
oruKE/FsvpCFLJqgII9GLrDyaMwALtFChPVlwBWHHWbUiK2txh80Na3BniSzLdvY
Ee61fDs5b3UJDZBOu4N+TyB1R5SrXn9DZiqGzqsmMEtvFQftulaek1Q4nlDOHQE6
SLEHA7Ux0h7wO/61ao7Xt/P9+c78JNnFxrl48rions4upq0nlfvy6WpftxFMBQsf
kZvHQC+5eQCOC9Pem/b6H4qDPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO1N5e/T
WUNi8rNhOFtPdZXS+qq3MB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG
QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzdDMDQvQTBEQjM1NTI1RkI0MTFFQkFCN0M2QTIzQzRGOUFFMDIvQTgyNUNDOTYz
MjQwMTFFQzlFOTAyNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnKrYwDQYJKoZIhvcNAQELBQADggEBAA29NcLvzQU7VReP
RKq1+eS1TgAH5O/Dx62Y36OyFA2Ye7iLqO0cPY85gM1nAeYTfERm2qoPIoGi1owG
0dKhXyDoYfVr+ha5xli6BzFZB+IypSw0OpWjms/ndrJ9uwEwwwUqglaQpoeLPIXi
bOKfV+qVWatxEf0m2IYlmCTnhn3CIDunrm4U0vOj3ncgir4gNL6kr7HHP7AHtqpx
OJeH/OhGPrJ5FcbFQmhyrK8rY9yArZZycqQsa4Hb1V3d5/JXaS03xC2bcfOGAzjA
O6/zECs57CyhGEUY5hj9Jfubprb/H7g9NT+Iegn5R7FXJKbkuxJUSHu3wEutu0kN
8m2g7rA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:26:38 2025 by rpki-client