Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa
File: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (raw, json)
Hash identifier: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic=
Subject key identifier: 99:75:CB:73:74:EC:1D:9F:66:28:BB:1B:8F:97:2B:E4:7D:26:CF:97
Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
Certificate serial: 0308
Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa
Signing time: Fri 15 Nov 2024 00:43:41 +0000
ROA not before: Fri 15 Nov 2024 00:43:41 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 137034
IP address blocks: 103.102.204.0/22 maxlen: 22
103.102.204.0/24 maxlen: 24
103.102.205.0/24 maxlen: 24
103.102.206.0/24 maxlen: 24
103.102.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 776 (0x308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6038
Validity
Not Before: Nov 15 00:43:41 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6736993d-4763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:04:9d:63:c4:62:b3:a4:95:bc:fd:dc:45:
70:b5:ed:4f:ee:8f:cc:5b:b8:67:0c:7a:75:77:af:
5d:31:16:6e:91:05:31:40:3a:63:7d:99:fd:ce:2a:
95:88:67:32:98:2e:85:c5:79:e0:36:a4:09:85:8c:
a1:aa:79:2a:9c:c6:c1:2b:38:97:e2:0a:3e:f2:46:
ff:c1:07:73:a7:29:61:34:ce:d5:3b:71:a7:18:bc:
58:8e:7b:4a:44:97:ec:8d:d2:b6:fa:0f:cd:47:1d:
5e:58:c2:80:a9:3c:ca:e1:b5:8d:3e:43:b4:4f:d9:
9c:97:80:f1:48:ab:5b:d5:d5:d8:21:bc:f6:ed:c5:
01:76:bb:6c:d1:0b:c7:86:aa:56:e1:ac:79:59:87:
08:dd:2a:c2:6d:92:31:08:20:f9:be:f4:e1:ee:9b:
4c:f5:18:81:87:a5:48:11:0a:1b:a9:d1:74:19:59:
e5:d6:13:99:cf:08:2f:5a:e3:79:ca:b5:ad:a8:3b:
b3:a8:a1:3f:82:da:8f:22:dc:d5:89:30:8b:35:7e:
75:b8:51:5f:53:df:ba:84:9d:5f:9d:eb:cc:90:2a:
35:99:e0:68:13:fd:68:99:03:6e:bc:d3:ef:5c:45:
0d:ec:24:27:9d:f5:18:f6:0b:f9:d2:4c:50:c0:80:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:75:CB:73:74:EC:1D:9F:66:28:BB:1B:8F:97:2B:E4:7D:26:CF:97
X509v3 Authority Key Identifier:
keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.204.0/22
Signature Algorithm: sha256WithRSAEncryption
43:bc:da:b8:ea:59:f3:89:71:c7:07:d1:fa:d5:48:cb:b9:0b:
60:a6:6f:5f:26:7d:f8:f7:8c:46:40:35:96:17:40:a9:87:81:
bf:4c:80:f1:bd:62:fc:a4:c5:b2:e0:66:45:ff:6c:e3:cc:76:
4c:92:55:b6:f1:26:ce:68:4d:d1:17:ef:55:50:c7:b0:0b:f8:
e9:65:81:ec:df:d4:02:f0:5e:b9:57:ec:c5:a6:6d:7f:1e:43:
10:68:f3:40:56:9b:63:6b:4b:ee:40:5e:1f:f7:d7:e0:36:24:
d4:e9:d7:36:39:fd:2e:0f:95:26:db:b3:d7:6a:ba:42:1f:22:
d6:49:23:e3:67:8c:72:28:b3:fc:cc:cd:4a:97:70:34:6e:32:
6a:f9:c0:69:ff:34:61:cd:2a:b5:11:08:6d:1e:ad:06:48:cb:
ee:d1:a9:29:50:4b:de:51:d9:d7:29:6c:c8:62:03:5e:26:19:
4a:a2:50:af:fa:9d:d2:b4:2d:dd:cc:a8:40:08:af:34:7d:74:
4f:f7:6f:17:4a:ef:5b:23:f9:51:0c:09:5e:b7:90:b8:ca:9c:
ef:8a:46:ba:73:d6:50:50:72:19:09:2b:e6:0b:e1:17:59:9e:
93:a1:05:e3:30:ae:4f:0b:52:84:f0:19:ff:05:f5:ea:d1:11:
a6:1d:a9:fa
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2
MkUyQ0QyRkUwHhcNMjQxMTE1MDA0MzQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzM2OTkzZC00NzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1IQEnWPEYrOklbz93EVwte1P7o/MW7hnDHp1d69dMRZukQUxQDpjfZn9ziqV
iGcymC6FxXngNqQJhYyhqnkqnMbBKziX4go+8kb/wQdzpylhNM7VO3GnGLxYjntK
RJfsjdK2+g/NRx1eWMKAqTzK4bWNPkO0T9mcl4DxSKtb1dXYIbz27cUBdrts0QvH
hqpW4ax5WYcI3SrCbZIxCCD5vvTh7ptM9RiBh6VIEQobqdF0GVnl1hOZzwgvWuN5
yrWtqDuzqKE/gtqPItzViTCLNX51uFFfU9+6hJ1fnevMkCo1meBoE/1omQNuvNPv
XEUN7CQnnfUY9gv50kxQwIDZjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJl1y3N0
7B2fZii7G4+XK+R9Js+XMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG
RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw
djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYwMzgvOTFFMEM4NTJBRkZDMTFFQ0IwQzM4ODVEQzRGOUFFMDIvN0FCQ0JCNzBB
RkZFMTFFQ0E1MkRCQTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnZswwDQYJKoZIhvcNAQELBQADggEBAEO82rjqWfOJcccH
0frVSMu5C2Cmb18mffj3jEZANZYXQKmHgb9MgPG9YvykxbLgZkX/bOPMdkySVbbx
Js5oTdEX71VQx7AL+Ollgezf1ALwXrlX7MWmbX8eQxBo80BWm2NrS+5AXh/31+A2
JNTp1zY5/S4PlSbbs9dqukIfItZJI+NnjHIos/zMzUqXcDRuMmr5wGn/NGHNKrUR
CG0erQZIy+7RqSlQS95R2dcpbMhiA14mGUqiUK/6ndK0Ld3MqEAIrzR9dE/3bxdK
71sj+VEMCV63kLjKnO+KRrpz1lBQchkJK+YL4RdZnpOhBeMwrk8LUoTwGf8F9erR
EaYdqfo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:23 2025 by rpki-client