Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
File: 654307DC26CC11EDB395A078C4F9AE02.roa (raw, json)
Hash identifier: hGQixG8nIJXVA0JQORYC8z0pOj4UbTutn+kvPqmH25s=
Subject key identifier: 4C:9B:64:6A:EB:0D:7F:01:10:DE:72:8E:BE:6C:67:A8:63:80:88:F8
Certificate issuer: /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial: 01CE
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
Signing time: Fri 25 Oct 2024 02:46:39 +0000
ROA not before: Fri 25 Oct 2024 02:46:39 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 139651
IP address blocks: 103.142.212.0/23 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EACB9
Validity
Not Before: Oct 25 02:46:39 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671b068f-3f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:0a:cf:dc:9a:7f:55:f4:27:39:ca:a8:c8:
b9:6a:cf:46:09:82:fb:94:ce:25:cf:82:0e:1d:d6:
85:ed:0d:8a:29:ea:12:2a:62:9e:4d:37:1f:ed:9a:
da:44:71:ca:44:f2:c1:ae:3d:bb:11:34:f3:5f:65:
1e:31:26:61:6c:ee:02:68:d0:34:3d:a2:41:34:c3:
d7:90:2b:1a:20:b0:52:6f:2a:01:4e:05:41:cd:87:
f9:c2:fe:cb:06:91:85:99:9b:25:64:1d:19:90:fc:
e5:c5:c1:4c:b6:79:cb:61:d4:59:b6:b9:2f:7d:8e:
cd:ee:8f:d4:4f:c7:b2:99:f0:b9:48:1a:47:0a:7a:
a1:88:98:6f:e5:1e:10:b1:ee:88:4f:28:2e:46:60:
c3:a9:95:a9:0c:9e:a7:00:f1:f9:0d:11:74:39:6d:
91:5b:84:43:75:6b:a0:88:1c:0c:1b:6d:6d:ef:85:
fa:04:ee:3b:0c:0f:53:32:49:19:d7:89:15:23:10:
fc:c1:f3:bb:65:4c:fa:f5:a2:ee:28:5d:79:50:48:
b2:b2:82:2d:3a:d5:d3:1a:11:ef:73:24:ab:5c:7b:
5e:78:1c:82:e6:2e:77:1d:47:1a:50:8b:60:7d:33:
ce:7f:1d:71:73:89:cd:10:9c:44:63:b3:1b:56:15:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9B:64:6A:EB:0D:7F:01:10:DE:72:8E:BE:6C:67:A8:63:80:88:F8
X509v3 Authority Key Identifier:
keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/654307DC26CC11EDB395A078C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.212.0/23
Signature Algorithm: sha256WithRSAEncryption
09:01:58:1c:55:ee:9a:cd:ac:7b:44:5c:1f:72:d3:e5:1e:dd:
af:17:3b:28:33:22:48:d8:30:4a:12:4a:f7:41:0f:fb:62:fa:
ef:77:b0:72:1f:25:86:06:ff:7a:fb:d9:2c:5d:12:0c:c0:49:
31:e4:a6:20:27:3d:c8:dc:b0:38:01:bb:8f:e7:cf:3c:f0:41:
e0:28:fb:55:e1:e5:63:a0:a0:b8:bf:f5:28:50:fb:4e:e5:2a:
e6:9a:6d:38:64:77:e6:6c:37:ec:6c:e5:a1:bb:a8:48:ad:c6:
21:a6:d1:85:09:d9:30:58:6f:e0:38:68:3b:93:86:b0:e8:d6:
61:27:0e:44:cf:21:75:e4:b8:34:00:0c:8f:aa:0d:9a:bc:53:
09:06:20:db:96:33:03:60:de:4c:c7:6f:bd:92:cf:60:da:4c:
d3:dc:6b:25:c4:75:af:be:cb:fd:bc:45:3a:f9:24:05:35:74:
23:20:49:74:8f:5c:ee:99:ca:d6:b3:0d:64:9d:ac:e9:ec:d2:
ad:c5:db:ee:18:86:12:64:35:98:8f:06:e5:00:f6:53:69:08:
14:ab:02:ae:12:ef:97:a9:bc:93:e2:10:b5:88:a8:a0:ac:bc:
be:67:4e:29:b2:a9:f4:ec:d9:3c:3b:83:5c:1a:3b:98:d0:d7:
0e:53:42:06
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFDQjkxMTAvBgNVBAUTKDFFNjFFMDAwMkNFNDRCQkY1OTU1M0M4MDRBMEFDOTEy
RTZGRUJGM0IwHhcNMjQxMDI1MDI0NjM5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFiMDY4Zi0zZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy3kKz9yaf1X0JznKqMi5as9GCYL7lM4lz4IOHdaF7Q2KKeoSKmKeTTcf7Zra
RHHKRPLBrj27ETTzX2UeMSZhbO4CaNA0PaJBNMPXkCsaILBSbyoBTgVBzYf5wv7L
BpGFmZslZB0ZkPzlxcFMtnnLYdRZtrkvfY7N7o/UT8eymfC5SBpHCnqhiJhv5R4Q
se6ITyguRmDDqZWpDJ6nAPH5DRF0OW2RW4RDdWugiBwMG21t74X6BO47DA9TMkkZ
14kVIxD8wfO7ZUz69aLuKF15UEiysoItOtXTGhHvcySrXHteeByC5i53HUcaUItg
fTPOfx1xc4nNEJxEY7MbVhUS/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEybZGrr
DX8BEN5yjr5sZ6hjgIj4MB8GA1UdIwQYMBaAFB5h4AAs5Eu/WVU8gEoKyRLm/r87
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUNCOS8wQzAwMjBFMDI2
OUMxMUVEQkIxNDUyNzdDNEY5QUUwMi9IbUhnQUN6a1M3OVpWVHlBU2dySkV1Yi12
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0htSGdBQ3prUzc5WlZUeUFTZ3JKRXViLXZ6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFDQjkvMEMwMDIwRTAyNjlDMTFFREJCMTQ1Mjc3QzRGOUFFMDIvNjU0MzA3REMy
NkNDMTFFREIzOTVBMDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjtQwDQYJKoZIhvcNAQELBQADggEBAAkBWBxV7prNrHtE
XB9y0+Ue3a8XOygzIkjYMEoSSvdBD/ti+u93sHIfJYYG/3r72SxdEgzASTHkpiAn
PcjcsDgBu4/nzzzwQeAo+1Xh5WOgoLi/9ShQ+07lKuaabThkd+ZsN+xs5aG7qEit
xiGm0YUJ2TBYb+A4aDuThrDo1mEnDkTPIXXkuDQADI+qDZq8UwkGINuWMwNg3kzH
b72Sz2DaTNPcayXEda++y/28RTr5JAU1dCMgSXSPXO6ZytazDWSdrOns0q3F2+4Y
hhJkNZiPBuUA9lNpCBSrAq4S75epvJPiELWIqKCsvL5nTimyqfTs2Tw7g1waO5jQ
1w5TQgY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:07 2025 by rpki-client