Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/6FE75CFCC90811EF962E0932C4F9AE02.roa
File: 6FE75CFCC90811EF962E0932C4F9AE02.roa (raw, json)
Hash identifier: ZSsDVqOUYZIhV9g5WnIT1h5T37v9qcB6Apd9J0h7TF0=
Subject key identifier: FD:35:BF:73:52:59:B1:FC:2F:D2:1F:61:21:D1:4A:CF:E7:B0:50:57
Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial: 015C
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/6FE75CFCC90811EF962E0932C4F9AE02.roa
Signing time: Fri 03 Jan 2025 02:46:45 +0000
ROA not before: Fri 03 Jan 2025 02:46:45 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 149023
IP address blocks: 103.176.246.0/24 maxlen: 24
103.176.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B2E
Validity
Not Before: Jan 3 02:46:45 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67774f94-0ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:0b:2a:a1:f9:38:04:77:a1:47:d9:de:44:
f1:19:f0:a4:ca:de:e1:e3:25:25:4b:a1:51:1f:2c:
b8:9d:42:bf:df:81:be:12:e8:82:f0:6b:2b:22:4e:
55:e0:61:20:d5:87:6f:7f:f6:2e:3f:c5:f4:f2:2b:
e3:fa:74:33:93:c1:fd:6e:70:61:b6:c1:fa:fc:fd:
5d:89:4d:19:79:b4:3c:f4:cb:c1:88:f5:01:fd:8e:
0f:b6:4b:b9:25:be:ca:7f:1f:2a:a3:12:8a:bf:15:
2a:e8:fa:2a:13:07:25:5e:f0:37:06:aa:d8:30:2e:
15:2d:23:13:de:e6:f8:62:68:b7:b9:49:1c:32:8b:
05:a5:7a:7a:b7:76:43:77:73:51:65:2a:9a:51:c2:
a0:5d:34:05:48:f7:f7:09:9a:4a:a6:fd:af:dc:9e:
c4:6c:1b:8d:ea:9e:5d:74:89:1c:84:54:0a:bf:9c:
f5:e1:79:15:d1:f2:dd:c0:b2:ce:c9:38:7a:7c:40:
a3:3b:6f:e1:46:b3:3e:27:fd:b6:22:16:5d:36:8f:
bc:96:b1:ff:04:d5:f7:85:40:f3:0b:aa:5a:63:3c:
02:3c:25:48:15:da:60:db:ac:05:79:8d:c3:9e:cb:
49:3c:73:83:37:a0:05:50:b8:92:73:74:05:a6:bb:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:35:BF:73:52:59:B1:FC:2F:D2:1F:61:21:D1:4A:CF:E7:B0:50:57
X509v3 Authority Key Identifier:
keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/6FE75CFCC90811EF962E0932C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.246.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:25:3b:52:2a:b3:76:00:fc:5c:b9:2b:ef:61:e7:1d:4d:ae:
ae:c6:35:95:a3:c7:ca:b8:53:97:b7:08:3f:02:46:1b:33:f0:
b0:6d:c6:43:7e:4f:db:ca:f9:22:0b:a4:75:9f:a0:fc:49:4e:
69:51:1f:f4:d5:d2:f0:bd:17:86:62:b4:ba:1c:b6:a3:c7:9e:
b9:5c:58:81:50:4a:1c:4a:05:fd:e2:27:f1:e5:f0:4b:ca:16:
9c:7b:e6:08:ca:8f:61:d3:a5:e6:58:d0:d2:e7:ea:0d:50:43:
60:01:c4:53:ff:ff:9a:8d:e7:e0:ab:c5:b8:b7:3e:b5:e6:7d:
c7:54:7d:b9:d7:4d:6d:0b:d2:1d:9e:52:75:d7:52:18:ed:46:
b4:40:1c:c9:5b:0b:4e:ff:28:55:f9:2f:59:c5:c5:a3:b1:85:
b1:74:89:2f:00:a5:5c:09:b3:9e:c1:df:9f:fc:bb:e8:22:3b:
99:50:bd:f1:bb:9f:87:ee:ca:a2:5c:fd:af:6a:ba:4d:3f:bf:
d7:36:4d:01:94:f5:da:d7:94:03:cb:5a:e4:90:0f:77:da:72:
e0:3d:42:c4:bb:59:a2:69:50:38:2c:11:40:65:30:25:4d:b0:
5a:47:aa:30:78:bd:c3:49:52:2d:56:5f:3c:d1:ee:c3:ef:cc:
2c:0b:58:a5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG
MjE0MDdDODEwHhcNMjUwMTAzMDI0NjQ1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc3NGY5NC0wY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyksLKqH5OAR3oUfZ3kTxGfCkyt7h4yUlS6FRHyy4nUK/34G+EuiC8GsrIk5V
4GEg1Ydvf/YuP8X08ivj+nQzk8H9bnBhtsH6/P1diU0ZebQ89MvBiPUB/Y4Ptku5
Jb7Kfx8qoxKKvxUq6PoqEwclXvA3BqrYMC4VLSMT3ub4Ymi3uUkcMosFpXp6t3ZD
d3NRZSqaUcKgXTQFSPf3CZpKpv2v3J7EbBuN6p5ddIkchFQKv5z14XkV0fLdwLLO
yTh6fECjO2/hRrM+J/22IhZdNo+8lrH/BNX3hUDzC6paYzwCPCVIFdpg26wFeY3D
nstJPHODN6AFULiSc3QFprvb4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFP01v3NS
WbH8L9IfYSHRSs/nsFBXMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2
N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjNCMkUvMEY1NUM2OTZENjdEMTFFRDg2RDMzNzUwQzRGOUFFMDIvNkZFNzVDRkND
OTA4MTFFRjk2MkUwOTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnsPYwDQYJKoZIhvcNAQELBQADggEBAEolO1Iqs3YA/Fy5
K+9h5x1Nrq7GNZWjx8q4U5e3CD8CRhsz8LBtxkN+T9vK+SILpHWfoPxJTmlRH/TV
0vC9F4ZitLoctqPHnrlcWIFQShxKBf3iJ/Hl8EvKFpx75gjKj2HTpeZY0NLn6g1Q
Q2ABxFP//5qN5+Crxbi3PrXmfcdUfbnXTW0L0h2eUnXXUhjtRrRAHMlbC07/KFX5
L1nFxaOxhbF0iS8ApVwJs57B35/8u+giO5lQvfG7n4fuyqJc/a9quk0/v9c2TQGU
9drXlAPLWuSQD3facuA9QsS7WaJpUDgsEUBlMCVNsFpHqjB4vcNJUi1WXzzR7sPv
zCwLWKU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:44:50 2025 by rpki-client