Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/244CF0D8329D11EF9B0F1058C4F9AE02.roa
File: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (raw, json)
Hash identifier: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=
Subject key identifier: 7A:EE:90:81:B6:EE:3F:B8:63:C6:75:FB:41:27:AF:58:D8:BE:AB:00
Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial: 0313
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/244CF0D8329D11EF9B0F1058C4F9AE02.roa
Signing time: Mon 27 Jan 2025 00:53:59 +0000
ROA not before: Mon 27 Jan 2025 00:53:59 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 400619
IP address blocks: 103.179.242.0/24 maxlen: 24
103.179.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 787 (0x313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF7F6
Validity
Not Before: Jan 27 00:53:59 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6796d927-0671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:d0:fb:68:bb:38:9f:4e:cd:b9:40:d3:e5:
af:f4:0a:5c:0c:fe:fa:cd:e2:2c:9c:a2:be:c6:66:
83:2f:01:43:7c:b4:ab:5a:e8:d8:ff:b6:ff:85:7f:
76:2e:2a:13:47:3d:54:86:a2:1c:ed:a1:d9:5a:1d:
0b:99:c4:36:74:a1:99:34:68:ab:06:70:7a:00:da:
45:be:59:13:27:2d:d9:6c:e8:57:4d:92:a7:5b:53:
4b:ca:62:4a:44:17:4a:ae:5b:9e:2f:85:95:45:41:
cc:aa:0f:a2:d2:c0:09:82:1a:5b:cb:6e:61:c2:04:
4d:35:c5:15:77:14:c6:d6:cd:9b:b9:ca:f9:c1:8e:
20:3a:61:85:88:16:8d:c7:07:55:bc:e1:14:c6:53:
28:65:86:09:d3:17:8c:43:a6:7c:30:bc:35:11:e3:
b7:b6:23:e9:13:ab:a0:b5:1a:e3:ae:82:d7:cc:48:
bc:69:9d:ea:32:8e:85:9d:dd:97:cd:53:3e:3d:70:
22:da:39:84:e6:db:92:5b:5b:07:b6:0a:cf:a8:70:
21:6f:53:8e:76:a1:0b:59:a5:ea:f4:02:72:40:ed:
26:39:32:6d:f1:a5:16:13:f1:99:d1:ca:a2:66:3d:
39:b9:a8:1d:8f:6e:d9:20:aa:9f:3f:ac:80:11:ee:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EE:90:81:B6:EE:3F:B8:63:C6:75:FB:41:27:AF:58:D8:BE:AB:00
X509v3 Authority Key Identifier:
keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/244CF0D8329D11EF9B0F1058C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.242.0/23
Signature Algorithm: sha256WithRSAEncryption
46:57:f2:5f:e4:55:26:32:f2:1e:73:42:01:98:c9:7f:9b:31:
8d:40:2b:b3:ab:55:05:8b:3f:56:01:66:dc:8a:83:f6:fb:e6:
5f:85:cc:32:f5:29:95:3e:0c:7c:bf:59:3d:6c:56:bf:e5:45:
d9:3c:3c:4c:1e:11:c6:ca:af:2c:e8:c9:56:c2:14:63:85:29:
00:c2:a4:1f:71:8d:ac:02:18:ee:a5:a6:82:f2:7f:60:44:ef:
37:b8:b9:86:cc:9e:4d:2d:8d:f7:f4:dd:37:b3:bf:b8:5d:2f:
32:82:5e:72:a8:60:8a:f9:6b:bf:84:71:4a:1a:77:1e:c7:8e:
1a:8d:fe:f0:ea:be:ad:b3:7e:92:c9:3e:2d:a7:01:bd:f4:2c:
7c:9c:82:f2:f4:0c:40:01:4a:58:a8:4f:af:34:bc:33:a0:a7:
60:51:c2:2d:c3:e1:b0:48:ab:77:58:42:0b:18:22:1a:cf:8f:
2b:04:be:0f:91:aa:3b:b1:ff:26:84:df:55:24:48:44:38:4a:
43:4a:7b:40:98:bd:b8:42:5c:f2:a1:f6:fe:79:3d:cb:d5:2a:
4c:b6:15:2d:23:25:03:a7:5e:46:79:22:df:9e:e8:f5:e8:cb:
f9:7e:5b:71:48:f1:9b:2e:75:ed:74:d4:fd:16:3b:50:2a:43:
5d:34:a5:39
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0
RTM3OEQwMDUwHhcNMjUwMTI3MDA1MzU5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk2ZDkyNy0wNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2pjQ+2i7OJ9OzblA0+Wv9ApcDP76zeIsnKK+xmaDLwFDfLSrWujY/7b/hX92
LioTRz1UhqIc7aHZWh0LmcQ2dKGZNGirBnB6ANpFvlkTJy3ZbOhXTZKnW1NLymJK
RBdKrlueL4WVRUHMqg+i0sAJghpby25hwgRNNcUVdxTG1s2bucr5wY4gOmGFiBaN
xwdVvOEUxlMoZYYJ0xeMQ6Z8MLw1EeO3tiPpE6ugtRrjroLXzEi8aZ3qMo6Fnd2X
zVM+PXAi2jmE5tuSW1sHtgrPqHAhb1OOdqELWaXq9AJyQO0mOTJt8aUWE/GZ0cqi
Zj05uagdj27ZIKqfP6yAEe4DIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHrukIG2
7j+4Y8Z1+0Enr1jYvqsAMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG
QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0Y3RjYvNzgyNEVCRDRCRkJEMTFFQ0I3ODgxMjVEQzRGOUFFMDIvMjQ0Q0YwRDgz
MjlEMTFFRjlCMEYxMDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFns/IwDQYJKoZIhvcNAQELBQADggEBAEZX8l/kVSYy8h5z
QgGYyX+bMY1AK7OrVQWLP1YBZtyKg/b75l+FzDL1KZU+DHy/WT1sVr/lRdk8PEwe
EcbKryzoyVbCFGOFKQDCpB9xjawCGO6lpoLyf2BE7ze4uYbMnk0tjff03Tezv7hd
LzKCXnKoYIr5a7+EcUoadx7HjhqN/vDqvq2zfpLJPi2nAb30LHycgvL0DEABSlio
T680vDOgp2BRwi3D4bBIq3dYQgsYIhrPjysEvg+Rqjux/yaE31UkSEQ4SkNKe0CY
vbhCXPKh9v55PcvVKky2FS0jJQOnXkZ5It+e6PXoy/l+W3FI8Zsude101P0WO1Aq
Q100pTk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:42 2025 by rpki-client