Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/F3C5DF2CF03511EF83ECDC30C4F9AE02.roa
File: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (raw, json)
Hash identifier: bX2GvM4twLrpOhpUXaE3dMjzmYpyVWJx7L0sV9znlKE=
Subject key identifier: 81:96:30:E7:97:A8:20:FB:47:28:71:A5:5A:8E:A6:9E:10:8B:85:2D
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 0282
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/F3C5DF2CF03511EF83ECDC30C4F9AE02.roa
Signing time: Fri 21 Feb 2025 09:26:39 +0000
ROA not before: Fri 21 Feb 2025 09:26:39 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 150716
IP address blocks: 103.67.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C
Validity
Not Before: Feb 21 09:26:39 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67b846ce-2ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ac:2a:2a:4f:2e:c8:a1:98:47:86:1e:7a:be:
69:2e:7e:d4:9d:de:9e:ca:4c:d9:93:3e:a4:6b:72:
d6:43:f4:ba:1d:6f:6b:53:34:69:35:a1:a6:ca:c0:
9a:0b:fb:38:b2:ff:cc:1c:78:25:d8:01:d3:99:8a:
41:d9:dc:19:a7:f9:44:1d:27:d8:3e:a1:8b:c5:89:
14:87:2a:d9:97:0a:b5:40:7f:63:76:59:de:c7:75:
64:f9:bc:5d:86:74:a3:04:e6:61:07:42:16:fc:09:
5a:a8:bd:89:f9:e5:7c:8b:8b:ea:ae:b0:3e:38:18:
f1:db:51:e7:7f:1a:fb:ed:b2:a1:4b:a9:f4:97:e3:
1a:5d:27:98:65:94:f8:4f:29:d0:98:d1:60:20:60:
89:c5:67:19:ba:de:4a:81:d0:d6:54:ca:f6:76:cd:
eb:04:a9:93:73:94:f1:e9:4e:61:f0:fd:4c:d2:8b:
1b:b8:54:01:6a:e1:ca:c0:2e:8b:e0:1f:8e:65:21:
37:c9:33:0c:ae:68:5b:27:51:a6:cd:c6:a8:3d:e9:
b2:2a:de:19:9d:c2:dc:9f:ca:a5:e6:e9:6a:df:88:
fb:6c:4c:58:cd:d2:b8:87:7b:4f:b1:69:84:2e:e9:
20:b6:08:04:b1:97:5e:fe:53:17:bf:3b:85:c1:c9:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:96:30:E7:97:A8:20:FB:47:28:71:A5:5A:8E:A6:9E:10:8B:85:2D
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/F3C5DF2CF03511EF83ECDC30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:cd:f5:9f:90:ab:c3:0d:b7:95:1d:26:33:18:6b:fb:56:81:
fd:d5:ac:8d:9d:b4:20:52:1f:22:60:73:2d:6f:ec:86:3a:db:
c0:7a:b7:28:4d:58:f5:e0:60:a8:c5:b1:97:7f:37:be:f2:92:
89:d9:5c:ba:16:8e:40:0f:23:ad:c1:fc:e0:53:1d:90:31:d6:
41:61:6a:9b:c9:c2:df:84:56:ac:b1:d8:93:ee:f2:79:35:2a:
ba:02:22:fa:59:ed:55:f2:f8:86:1e:76:85:cc:0a:e5:80:d6:
ad:cd:24:d4:f7:ad:28:4e:e5:2f:c1:ce:87:e6:21:45:4f:a1:
b2:a2:32:a2:16:77:d7:bf:2a:33:00:da:e8:f8:e9:75:fa:bb:
c5:91:a2:0c:29:b9:e7:9f:40:00:47:9b:24:6f:0f:ac:88:5c:
ee:0a:d3:3a:b6:ee:54:18:8e:de:16:f7:aa:d7:d1:b5:39:ff:
d5:ea:fc:a8:ac:c8:ee:9e:65:d2:3a:49:0c:f6:09:65:d4:20:
4b:84:8a:66:12:d1:d1:b7:ca:57:f8:97:64:96:ef:49:a9:c7:
4f:89:5c:1e:89:28:64:14:f8:2c:f4:13:de:fc:f8:09:23:4d:
bb:dd:56:83:e8:fd:cd:44:b2:f4:10:4a:35:3e:9c:a7:67:2b:
90:1a:ed:1d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey
RkJGRDI2ODYwHhcNMjUwMjIxMDkyNjM5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2I4NDZjZS0yZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk6wqKk8uyKGYR4Yeer5pLn7Und6eykzZkz6ka3LWQ/S6HW9rUzRpNaGmysCa
C/s4sv/MHHgl2AHTmYpB2dwZp/lEHSfYPqGLxYkUhyrZlwq1QH9jdlnex3Vk+bxd
hnSjBOZhB0IW/AlaqL2J+eV8i4vqrrA+OBjx21Hnfxr77bKhS6n0l+MaXSeYZZT4
TynQmNFgIGCJxWcZut5KgdDWVMr2ds3rBKmTc5Tx6U5h8P1M0osbuFQBauHKwC6L
4B+OZSE3yTMMrmhbJ1GmzcaoPemyKt4ZncLcn8ql5ulq34j7bExYzdK4h3tPsWmE
LukgtggEsZde/lMXvzuFwcle7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIGWMOeX
qCD7RyhxpVqOpp4Qi4UtMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx
RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE0N0MvN0UwRjU4NzIwMUU5MTFFREFGOEJERTMwQzRGOUFFMDIvRjNDNURGMkNG
MDM1MTFFRjgzRUNEQzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnQ/cwDQYJKoZIhvcNAQELBQADggEBAF3N9Z+Qq8MNt5Ud
JjMYa/tWgf3VrI2dtCBSHyJgcy1v7IY628B6tyhNWPXgYKjFsZd/N77ykonZXLoW
jkAPI63B/OBTHZAx1kFhapvJwt+EVqyx2JPu8nk1KroCIvpZ7VXy+IYedoXMCuWA
1q3NJNT3rShO5S/BzofmIUVPobKiMqIWd9e/KjMA2uj46XX6u8WRogwpueefQABH
myRvD6yIXO4K0zq27lQYjt4W96rX0bU5/9Xq/KisyO6eZdI6SQz2CWXUIEuEimYS
0dG3ylf4l2SW70mpx0+JXB6JKGQU+Cz0E978+AkjTbvdVoPo/c1EsvQQSjU+nKdn
K5Aa7R0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:52:26 2025 by rpki-client