Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa
File: 9BA13212344C11ED8F22CB70C4F9AE02.roa (raw, json)
Hash identifier: dSvt8WCJ5sX7UlCP0MxYFfwdeu8sA3Ot5FCk8B7masI=
Subject key identifier: 82:81:42:FB:85:13:E3:49:0B:40:FF:F1:1B:B4:DA:0D:DF:88:A2:BA
Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
Certificate serial: 01B0
Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa
Signing time: Thu 07 Nov 2024 01:54:55 +0000
ROA not before: Thu 07 Nov 2024 01:54:55 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 138357
IP address blocks: 103.131.80.0/23 maxlen: 23
103.131.80.0/24 maxlen: 24
103.131.81.0/24 maxlen: 24
2001:df1:47c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAD63
Validity
Not Before: Nov 7 01:54:55 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672c1def-a5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:0f:94:d2:94:14:13:80:13:b5:34:aa:1e:
9e:05:ca:65:8d:56:ae:35:10:ae:34:0d:e6:49:48:
a2:b5:72:02:ce:2e:19:4e:5d:15:31:51:ed:3d:e7:
64:25:d4:9f:d8:a5:8c:de:bf:f0:e5:9a:21:b4:40:
b3:a6:8a:96:d4:37:c0:34:01:a8:19:ff:10:2f:45:
50:50:f2:04:38:5d:89:3c:8d:d8:be:c9:b3:2c:34:
9a:ae:67:69:f0:57:48:fa:b5:7d:e3:ac:c6:65:20:
73:c5:21:fd:32:9e:28:b1:4c:5a:f1:e0:07:32:82:
82:8b:b2:a9:1a:bf:b8:29:c7:a4:a6:92:7d:cf:3d:
2d:3b:0c:a7:0d:88:cd:c6:ea:f9:90:5a:7f:7e:87:
5c:fb:b7:d2:c3:b1:1e:d3:96:ce:24:8e:32:c6:9a:
ac:19:f2:b1:4b:13:20:62:78:d0:50:bb:61:2c:76:
71:9f:3e:89:73:6d:78:50:55:e1:75:73:f2:10:f9:
6f:ca:49:15:e5:ee:27:c4:f5:78:fd:37:03:ae:4a:
7c:d8:36:2d:4e:73:cb:24:42:aa:46:87:36:a1:80:
89:de:cb:29:fe:9f:7a:e5:74:bc:43:9a:47:be:11:
46:f1:e3:0a:27:60:f0:be:69:1c:6c:48:3e:39:3f:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:81:42:FB:85:13:E3:49:0B:40:FF:F1:1B:B4:DA:0D:DF:88:A2:BA
X509v3 Authority Key Identifier:
keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/9BA13212344C11ED8F22CB70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.80.0/23
IPv6:
2001:df1:47c0::/48
Signature Algorithm: sha256WithRSAEncryption
7e:06:e4:eb:22:12:9a:3f:af:fe:2f:4f:7a:df:4f:91:9b:77:
5f:98:b3:7f:90:0d:eb:e3:e0:6a:34:82:4f:a2:3a:e4:6a:07:
09:b1:b6:79:74:40:62:e4:78:d6:64:19:44:5f:cd:b9:7b:90:
48:ed:b9:12:50:2b:3c:77:fe:13:d3:92:6a:bc:eb:0c:d1:be:
ab:a4:25:ae:91:24:73:f9:d9:e7:6c:e7:bd:63:e3:a6:a4:c4:
38:71:8f:a2:17:22:dc:f7:aa:59:3d:42:e6:2e:c3:2b:16:59:
1e:9b:35:f1:f2:39:e0:9a:28:88:9b:d7:8c:42:49:78:16:5d:
b8:eb:e0:9f:23:fc:40:08:63:a3:42:a4:7d:85:8c:ed:66:6d:
50:ec:06:27:86:fd:2a:d6:57:c8:3b:39:1c:98:e7:7d:0d:8a:
79:c3:2c:f1:d0:71:75:54:8f:3b:04:61:4e:16:55:70:41:11:
44:e0:df:35:c3:cb:ba:62:c1:07:9a:4a:9a:e1:32:34:d6:ae:
72:f6:37:da:51:d1:a0:ee:db:da:95:11:28:39:c5:40:9f:24:
fe:55:24:e0:4a:60:13:db:de:d7:46:91:2c:2a:ba:d1:51:2f:
82:0b:ac:0d:03:97:73:fc:21:a6:a6:08:55:9f:6e:eb:78:ef:
36:14:6b:a8
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFENjMxMTAvBgNVBAUTKDc3ODNCRERDRUMyREY5QjlGQ0ZCOEYxMDlCNzNENEY3
OTRBMTczODYwHhcNMjQxMTA3MDE1NDU1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzJjMWRlZi1hNWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzd0PlNKUFBOAE7U0qh6eBcpljVauNRCuNA3mSUiitXICzi4ZTl0VMVHtPedk
JdSf2KWM3r/w5ZohtECzpoqW1DfANAGoGf8QL0VQUPIEOF2JPI3YvsmzLDSarmdp
8FdI+rV946zGZSBzxSH9Mp4osUxa8eAHMoKCi7KpGr+4KcekppJ9zz0tOwynDYjN
xur5kFp/fodc+7fSw7Ee05bOJI4yxpqsGfKxSxMgYnjQULthLHZxnz6Jc214UFXh
dXPyEPlvykkV5e4nxPV4/TcDrkp82DYtTnPLJEKqRoc2oYCJ3ssp/p965XS8Q5pH
vhFG8eMKJ2DwvmkcbEg+OT/xKQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIKBQvuF
E+NJC0D/8Ru02g3fiKK6MB8GA1UdIwQYMBaAFHeDvdzsLfm5/PuPEJtz1PeUoXOG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ2My9ERDM2NDExODM0
NDcxMUVEQjEwREE0M0FDNEY5QUUwMi9kNE85M093dC1ibjgtNDhRbTNQVTk1U2hj
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q0TzkzT3d0LWJuOC00OFFtM1BVOTVTaGM0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFENjMvREQzNjQxMTgzNDQ3MTFFREIxMERBNDNBQzRGOUFFMDIvOUJBMTMyMTIz
NDRDMTFFRDhGMjJDQjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFng1AwDwQCAAIwCQMHACABDfFHwDANBgkqhkiG9w0BAQsF
AAOCAQEAfgbk6yISmj+v/i9Pet9PkZt3X5izf5AN6+PgajSCT6I65GoHCbG2eXRA
YuR41mQZRF/NuXuQSO25ElArPHf+E9OSarzrDNG+q6QlrpEkc/nZ52znvWPjpqTE
OHGPohci3PeqWT1C5i7DKxZZHps18fI54JooiJvXjEJJeBZduOvgnyP8QAhjo0Kk
fYWM7WZtUOwGJ4b9KtZXyDs5HJjnfQ2KecMs8dBxdVSPOwRhThZVcEERRODfNcPL
umLBB5pKmuEyNNaucvY32lHRoO7b2pURKDnFQJ8k/lUk4EpgE9ve10aRLCq60VEv
ggusDQOXc/whpqYIVZ9u63jvNhRrqA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:56:16 2025 by rpki-client