Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/C4B561629AFA11EEB91A2174C4F9AE02.roa
File: C4B561629AFA11EEB91A2174C4F9AE02.roa (raw, json)
Hash identifier: TNDQ+YiDsxnnOaEn4z2knrgE2Cz1lnkPFqhMEwf2txg=
Subject key identifier: CD:00:E8:47:20:70:54:CE:D1:41:A3:1F:84:67:9B:6E:9C:9F:5E:D4
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: E2
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/C4B561629AFA11EEB91A2174C4F9AE02.roa
Signing time: Thu 23 Jan 2025 03:57:47 +0000
ROA not before: Thu 23 Jan 2025 03:57:47 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 135330
IP address blocks: 103.79.121.0/24 maxlen: 24
103.79.123.0/24 maxlen: 24
202.91.37.0/24 maxlen: 24
202.91.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E
Validity
Not Before: Jan 23 03:57:47 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6791be3b-17e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:37:03:34:bb:a5:ab:54:e2:aa:06:50:3f:
33:4c:a2:c7:cf:f1:8d:73:6e:1c:48:29:41:05:13:
49:d7:cb:35:f4:1d:23:3c:8a:48:ea:56:21:f4:a3:
c6:ea:eb:9a:58:eb:f0:22:f0:e1:f7:87:0d:eb:15:
1c:08:a0:72:59:7f:1f:ca:d5:14:41:eb:86:a4:fc:
04:74:44:08:94:1e:ec:68:0b:89:99:fc:bd:6e:7d:
e8:a3:ea:08:fa:7c:58:16:7d:1a:df:b4:9f:28:fe:
c8:65:e3:49:1c:83:d9:59:44:a6:b2:e4:ce:0f:92:
fc:6d:b9:b4:56:5c:68:8c:66:3c:e5:fc:19:04:58:
46:88:8e:82:81:4f:c7:d8:51:57:3f:78:ce:67:7b:
41:92:b1:02:7d:90:89:0b:7a:ce:99:a4:50:80:a7:
41:77:06:f6:1d:a2:0d:36:e2:f2:d4:f0:18:be:5a:
ac:90:b4:d7:8e:ee:22:40:39:84:fa:05:96:06:d8:
2c:9c:69:f9:17:67:22:95:9e:2d:dc:7f:24:fe:6c:
17:e3:99:1d:bb:0f:0b:3f:bb:a3:97:52:0b:f0:b5:
47:d5:9d:43:8b:0d:dd:8a:c0:3d:d1:86:69:18:c4:
99:b9:d5:5b:89:51:81:dd:26:87:9a:a6:6b:b8:b6:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:E8:47:20:70:54:CE:D1:41:A3:1F:84:67:9B:6E:9C:9F:5E:D4
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/C4B561629AFA11EEB91A2174C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.121.0/24
103.79.123.0/24
202.91.37.0/24
202.91.39.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4e:4e:0c:3b:09:9b:2d:71:47:1e:4c:6a:5b:33:43:e1:97:
4b:db:9c:51:b7:50:5f:6a:ff:0c:38:31:01:f3:41:6a:75:1e:
99:5b:51:60:06:f2:22:d1:d8:5c:ca:38:f5:a4:78:87:c0:03:
f3:83:1c:35:3f:73:6b:b0:53:64:eb:f3:b8:ea:ba:ce:7f:a8:
2e:85:7a:36:ec:7b:29:c0:77:19:05:4f:5e:77:ee:aa:c0:4f:
92:f8:d7:28:67:29:60:70:d1:96:ff:1c:03:bd:2e:0f:da:10:
5d:c1:6d:e9:e6:20:dd:f5:2c:dd:d9:e8:e2:a4:90:89:69:4a:
75:0d:53:a5:95:42:95:a7:9f:85:c6:ee:7a:35:ff:b2:7f:1b:
65:cb:e5:e3:65:42:89:ec:27:ee:4a:e0:5f:f7:e1:0e:4e:66:
60:a1:c6:59:db:fd:8b:8e:1f:d0:98:85:6a:14:6a:60:90:75:
b4:e9:08:36:dc:3d:94:13:c5:c7:26:9c:4a:e8:83:19:f0:25:
54:c3:0e:90:82:05:0c:9a:a4:05:bc:48:f6:28:8b:0d:db:53:
0a:77:72:a8:81:00:f3:8c:9b:c9:5a:67:c7:a1:b3:f0:2b:04:
15:34:e4:19:33:c8:ac:1c:a9:0c:46:7a:03:97:43:0e:58:79:
59:d4:87:31
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1
NTIwNUM4RjYwHhcNMjUwMTIzMDM1NzQ3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzkxYmUzYi0xN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUw3AzS7patU4qoGUD8zTKLHz/GNc24cSClBBRNJ18s19B0jPIpI6lYh9KPG
6uuaWOvwIvDh94cN6xUcCKByWX8fytUUQeuGpPwEdEQIlB7saAuJmfy9bn3oo+oI
+nxYFn0a37SfKP7IZeNJHIPZWUSmsuTOD5L8bbm0VlxojGY85fwZBFhGiI6CgU/H
2FFXP3jOZ3tBkrECfZCJC3rOmaRQgKdBdwb2HaINNuLy1PAYvlqskLTXju4iQDmE
+gWWBtgsnGn5F2cilZ4t3H8k/mwX45kduw8LP7ujl1IL8LVH1Z1Diw3disA90YZp
GMSZudVbiVGB3SaHmqZruLaBjQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFM0A6Ecg
cFTO0UGjH4Rnm26cn17UMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB
RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDlBNkUvRjUxRkY4ODY5QUY5MTFFRUExNkRCQzU1QzRGOUFFMDIvQzRCNTYxNjI5
QUZBMTFFRUI5MUEyMTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBABnT3kDBABnT3sDBADKWyUDBADKWycwDQYJKoZIhvcNAQEL
BQADggEBAJJOTgw7CZstcUceTGpbM0Phl0vbnFG3UF9q/ww4MQHzQWp1HplbUWAG
8iLR2FzKOPWkeIfAA/ODHDU/c2uwU2Tr87jqus5/qC6FejbseynAdxkFT1537qrA
T5L41yhnKWBw0Zb/HAO9Lg/aEF3BbenmIN31LN3Z6OKkkIlpSnUNU6WVQpWnn4XG
7no1/7J/G2XL5eNlQonsJ+5K4F/34Q5OZmChxlnb/YuOH9CYhWoUamCQdbTpCDbc
PZQTxccmnErogxnwJVTDDpCCBQyapAW8SPYoiw3bUwp3cqiBAPOMm8laZ8ehs/Ar
BBU05BkzyKwcqQxGegOXQw5YeVnUhzE=
-----END CERTIFICATE-----
Generated at Thu Apr 10 00:19:12 2025 by rpki-client