Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/8461199E68A711ECAEB7B05EC4F9AE02.roa
File: 8461199E68A711ECAEB7B05EC4F9AE02.roa (raw, json)
Hash identifier: TX40dBt0Lx2kVnmGJ0AWxzaI/n/9a6+hvYTIVbqAOYM=
Subject key identifier: 89:49:4A:6D:A9:7E:A7:E0:6A:60:9F:D6:52:40:73:73:3B:DD:47:F4
Certificate issuer: /CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Certificate serial: 0384
Authority key identifier: 5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/8461199E68A711ECAEB7B05EC4F9AE02.roa
Signing time: Thu 14 Jul 2022 02:11:01 +0000
ROA not before: Thu 14 Jul 2022 02:11:01 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 51649
IP address blocks: 103.166.246.0/24 maxlen: 24
103.166.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900 (0x384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C83F1
Validity
Not Before: Jul 14 02:11:01 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62cf7b34-bfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:d0:6c:74:82:c6:09:91:e3:89:fd:c2:4d:
d2:5c:c4:7c:96:e7:74:b8:54:97:e7:39:55:7f:c3:
c3:6b:2c:7f:23:7c:db:a7:5f:cd:94:d7:2b:9f:30:
f4:b8:17:a1:89:e5:ab:aa:12:d5:5e:8b:4d:5d:66:
af:c4:da:1b:97:bb:f0:a9:c6:cd:5f:76:45:94:4a:
54:ae:d7:80:b7:b7:7a:74:4f:4a:29:50:ad:21:b3:
b4:91:1e:c7:4a:8b:ab:36:f3:56:50:f4:6f:22:84:
5f:1c:47:67:d5:3c:05:ed:62:ff:ff:39:9e:ce:f2:
1e:60:95:64:9c:ae:cc:c7:75:53:fa:be:cd:93:13:
ba:0b:4c:e7:0b:d4:b1:42:fc:33:da:41:0c:b1:7b:
c1:52:4f:4a:b0:db:09:21:32:aa:86:75:60:71:ad:
02:ab:25:9b:13:5d:45:8c:39:cf:d2:7d:7d:91:c5:
d3:52:65:0f:87:e4:69:ad:29:4f:41:f2:0b:ba:d7:
ee:bf:d3:b7:a2:c3:fa:4a:c2:08:14:9b:57:0f:84:
77:ec:5c:a3:93:9c:c3:ae:f3:6b:26:e1:ba:33:7a:
ba:08:b7:aa:1d:02:70:b5:bb:f2:87:12:f8:21:63:
14:f7:36:d3:a9:7f:1d:18:fd:50:5b:64:2e:bf:db:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:4A:6D:A9:7E:A7:E0:6A:60:9F:D6:52:40:73:73:3B:DD:47:F4
X509v3 Authority Key Identifier:
keyid:5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/WlozCZSmbPoShPMmBuOeGVx8qWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/8461199E68A711ECAEB7B05EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.246.0/23
Signature Algorithm: sha256WithRSAEncryption
87:8d:3b:d9:00:f7:9f:3b:de:e6:a3:13:0e:c5:26:98:10:9a:
11:da:05:46:f6:e9:a4:e5:9f:e1:8b:8a:57:3f:a6:b9:17:61:
fb:0b:b5:fe:80:39:1b:13:d6:98:20:5e:17:12:09:8f:7d:fa:
49:ef:a6:f0:c6:a2:c0:12:a4:69:4e:bc:b9:31:97:5c:d2:6d:
e1:ff:f0:d9:b9:3e:7f:36:3f:6c:7b:d7:86:b1:54:81:66:d6:
ae:f3:4d:b3:b5:fd:03:ce:66:a3:23:8c:82:ba:72:3d:00:41:
47:0d:9c:71:03:cc:0a:5c:d4:5b:20:2d:91:67:c1:42:df:42:
46:fe:76:92:20:0d:c5:7a:d3:eb:89:22:0d:08:8e:3a:12:02:
e9:6b:bf:44:6e:11:45:96:03:be:72:d6:bc:07:30:14:22:88:
bb:16:07:1a:8b:7c:e7:86:77:cb:79:aa:01:f1:0d:d9:48:5f:
4b:43:b0:3d:01:f5:63:23:a0:2f:10:f3:c2:1a:09:23:ea:e7:
f5:f8:bc:5b:8c:40:8f:c7:c5:4b:83:bc:8e:81:39:ad:c8:49:
0a:98:69:dc:8b:98:71:2c:2f:75:f5:a7:fc:c8:67:1f:17:97:
1a:9f:97:07:8c:5b:92:73:a9:1d:ed:07:d4:96:8d:3e:88:8b:
fa:3b:cc:64
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgzRjExMTAvBgNVBAUTKDVBNUEzMzA5OTRBNjZDRkExMjg0RjMyNjA2RTM5RTE5
NUM3Q0E5NjcwHhcNMjIwNzE0MDIxMTAxWhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmNmN2IzNC1iZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzdDQbHSCxgmR44n9wk3SXMR8lud0uFSX5zlVf8PDayx/I3zbp1/NlNcrnzD0
uBehieWrqhLVXotNXWavxNobl7vwqcbNX3ZFlEpUrteAt7d6dE9KKVCtIbO0kR7H
SourNvNWUPRvIoRfHEdn1TwF7WL//zmezvIeYJVknK7Mx3VT+r7NkxO6C0znC9Sx
Qvwz2kEMsXvBUk9KsNsJITKqhnVgca0CqyWbE11FjDnP0n19kcXTUmUPh+RprSlP
QfILutfuv9O3osP6SsIIFJtXD4R37Fyjk5zDrvNrJuG6M3q6CLeqHQJwtbvyhxL4
IWMU9zbTqX8dGP1QW2Quv9t1DwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIlJSm2p
fqfgamCf1lJAc3M73Uf0MB8GA1UdIwQYMBaAFFpaMwmUpmz6EoTzJgbjnhlcfKln
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNGMS8wRDQzQjFGMEFG
QTcxMUVCOEFGMzQ0MzVDNEY5QUUwMi9XbG96Q1pTbWJQb1NoUE1tQnVPZUdWeDhx
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dsb3pDWlNtYlBvU2hQTW1CdU9lR1Z4OHFXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzgzRjEvMEQ0M0IxRjBBRkE3MTFFQjhBRjM0NDM1QzRGOUFFMDIvODQ2MTE5OUU2
OEE3MTFFQ0FFQjdCMDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnpvYwDQYJKoZIhvcNAQELBQADggEBAIeNO9kA95873uaj
Ew7FJpgQmhHaBUb26aTln+GLilc/prkXYfsLtf6AORsT1pggXhcSCY99+knvpvDG
osASpGlOvLkxl1zSbeH/8Nm5Pn82P2x714axVIFm1q7zTbO1/QPOZqMjjIK6cj0A
QUcNnHEDzApc1FsgLZFnwULfQkb+dpIgDcV60+uJIg0IjjoSAulrv0RuEUWWA75y
1rwHMBQiiLsWBxqLfOeGd8t5qgHxDdlIX0tDsD0B9WMjoC8Q88IaCSPq5/X4vFuM
QI/HxUuDvI6BOa3ISQqYadyLmHEsL3X1p/zIZx8XlxqflweMW5JzqR3tB9SWjT6I
i/o7zGQ=
-----END CERTIFICATE-----
Generated at Thu Apr 10 10:06:33 2025 by rpki-client