Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa
File: 651384A6766811EF96E4115EC4F9AE02.roa (raw, json)
Hash identifier: p8tYT8YIzrMYfS8FEgPfOhyzQ3A1i1G+CgkjUdJPswc=
Subject key identifier: 08:2F:D2:68:D9:27:00:DE:FB:F8:8D:8E:40:EF:6B:A1:06:02:A1:2B
Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial: 092E
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa
Signing time: Thu 19 Sep 2024 09:23:27 +0000
ROA not before: Thu 19 Sep 2024 09:23:27 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 140612
IP address blocks: 103.151.0.0/23 maxlen: 24
2400:8860::/32 maxlen: 32
2400:8860::/33 maxlen: 33
2400:8860:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2350 (0x92e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFADF
Validity
Not Before: Sep 19 09:23:27 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66ebed8f-800d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:d7:d6:a3:5b:85:4b:5b:36:7b:ad:b1:07:
f9:22:d5:72:13:c5:5e:47:73:ef:50:0f:cf:15:c1:
c6:44:21:12:1a:26:67:fc:60:4e:6b:20:d3:c1:1d:
18:9a:30:b2:5e:62:b7:9e:80:fc:90:65:a7:29:29:
a2:37:d7:b0:81:ad:41:d0:d4:7b:e2:ee:a5:05:a8:
17:33:82:f4:15:8d:24:64:fb:9f:48:f1:df:36:5f:
e8:07:db:cc:6a:24:82:1e:f2:6d:79:1c:10:77:f3:
8e:25:20:2e:ff:e9:30:7e:28:88:87:2b:38:8d:29:
39:0c:99:94:21:07:c5:26:99:82:ce:30:db:42:15:
9a:51:53:27:f6:b8:24:0d:a4:88:e5:b2:11:9d:2b:
17:44:a5:ae:b9:05:bb:0e:d8:10:89:6e:ee:3d:55:
54:f7:d0:b5:5f:76:ea:1d:77:4c:cf:be:ea:2b:31:
1c:e8:be:ac:58:b8:1e:f5:d5:11:de:6b:af:04:ac:
8a:22:6c:f6:6b:4a:cf:33:b4:05:c9:1c:40:b8:91:
bd:23:ba:86:8f:39:62:d4:e5:98:96:9c:19:86:91:
4b:19:b2:1e:f2:05:82:55:c3:1c:05:dd:ea:33:c6:
7f:68:a1:34:76:a3:47:49:fd:0c:fc:ae:4f:e8:fb:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:D2:68:D9:27:00:DE:FB:F8:8D:8E:40:EF:6B:A1:06:02:A1:2B
X509v3 Authority Key Identifier:
keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.0.0/23
IPv6:
2400:8860::/32
Signature Algorithm: sha256WithRSAEncryption
7b:35:5c:db:87:5b:4a:43:5c:d6:b3:26:24:99:b0:8f:1b:bc:
21:b9:0c:72:f3:00:d9:9e:fa:35:75:89:46:4b:42:58:b1:3d:
6d:93:2c:ef:dc:3d:78:9f:d1:26:81:0b:e9:76:5c:f1:c8:a4:
ae:f6:0f:6c:1d:62:a0:26:ca:60:3c:aa:c7:94:70:2d:1c:04:
65:8b:25:cd:02:4e:d1:fb:3b:85:6b:b9:db:db:12:40:07:59:
6f:26:37:8b:a9:81:38:d0:b5:c9:73:a7:ff:61:43:a2:5d:be:
6d:da:36:ef:7a:b4:e4:35:e6:f4:6f:d5:4c:1e:24:c2:80:31:
21:46:26:30:3d:ad:f2:d4:14:11:5b:aa:43:4c:1c:36:05:ee:
12:d5:ef:ef:03:56:95:de:41:c6:5b:e3:40:49:0b:c4:c3:d8:
8e:92:20:02:77:df:35:59:43:0d:07:24:46:b9:2b:01:40:ce:
f6:5d:bd:de:51:00:26:7c:1b:8c:fd:9b:ea:5e:94:44:71:b5:
0b:c4:db:4b:e7:6a:05:54:86:f8:3e:7f:fe:1a:04:49:fd:2b:
40:fc:43:d1:73:3a:f8:a9:8e:6e:cc:68:08:3b:61:74:d6:3c:
b6:02:d8:09:44:5c:c8:04:c9:c8:7f:6c:56:52:fc:df:3b:3d:
12:f5:15:6f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx
OTg5MTkzQTUwHhcNMjQwOTE5MDkyMzI3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NmViZWQ4Zi04MDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxcDX1qNbhUtbNnutsQf5ItVyE8VeR3PvUA/PFcHGRCESGiZn/GBOayDTwR0Y
mjCyXmK3noD8kGWnKSmiN9ewga1B0NR74u6lBagXM4L0FY0kZPufSPHfNl/oB9vM
aiSCHvJteRwQd/OOJSAu/+kwfiiIhys4jSk5DJmUIQfFJpmCzjDbQhWaUVMn9rgk
DaSI5bIRnSsXRKWuuQW7DtgQiW7uPVVU99C1X3bqHXdMz77qKzEc6L6sWLge9dUR
3muvBKyKImz2a0rPM7QFyRxAuJG9I7qGjzli1OWYlpwZhpFLGbIe8gWCVcMcBd3q
M8Z/aKE0dqNHSf0M/K5P6Puz0wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAgv0mjZ
JwDe+/iNjkDva6EGAqErMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC
RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr
NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REZBREYvNTg1MzIwREU4QkQ4MTFFQTk1QUFFQjgzQzRGOUFFMDIvNjUxMzg0QTY3
NjY4MTFFRjk2RTQxMTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnlwAwDQQCAAIwBwMFACQAiGAwDQYJKoZIhvcNAQELBQAD
ggEBAHs1XNuHW0pDXNazJiSZsI8bvCG5DHLzANme+jV1iUZLQlixPW2TLO/cPXif
0SaBC+l2XPHIpK72D2wdYqAmymA8qseUcC0cBGWLJc0CTtH7O4VrudvbEkAHWW8m
N4upgTjQtclzp/9hQ6Jdvm3aNu96tOQ15vRv1UweJMKAMSFGJjA9rfLUFBFbqkNM
HDYF7hLV7+8DVpXeQcZb40BJC8TD2I6SIAJ33zVZQw0HJEa5KwFAzvZdvd5RACZ8
G4z9m+pelERxtQvE20vnagVUhvg+f/4aBEn9K0D8Q9FzOvipjm7MaAg7YXTWPLYC
2AlEXMgEych/bFZS/N87PRL1FW8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:13:54 2025 by rpki-client