Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa
File: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (raw, json)
Hash identifier: xYipp+ZcmQFz/ogxlth1vHSd96eYxW/drt1nbOwk66E=
Subject key identifier: 6A:49:30:62:41:61:DE:E6:41:D6:37:6C:60:88:FB:76:F7:4F:6F:B6
Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial: 0164
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa
Signing time: Thu 09 Jan 2025 10:58:30 +0000
ROA not before: Thu 09 Jan 2025 10:58:30 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 149023
IP address blocks: 103.176.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B2E
Validity
Not Before: Jan 9 10:58:30 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677fabd6-36c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a3:ec:95:b8:ed:83:d8:04:3f:a5:64:08:c2:
e6:fb:16:1e:18:29:07:5a:87:f2:b4:18:3f:43:5b:
36:61:e3:d3:57:0d:ad:cb:d0:b3:93:e5:52:23:ef:
45:1f:60:45:e1:da:db:70:98:b9:64:2d:7f:29:45:
d2:18:c4:e6:15:fe:bf:43:76:e9:e5:4a:8b:a6:19:
ff:2f:c2:5c:ed:d8:d4:a6:1d:99:b5:70:44:04:b5:
9b:7e:3a:56:d3:66:ad:a3:0e:07:0f:d7:ad:03:aa:
d6:dd:32:87:a1:93:68:e7:ff:3b:5f:87:e3:be:54:
b3:7b:b7:25:2d:8b:23:b8:ba:51:b2:95:46:09:4e:
a8:84:67:77:b7:a8:68:b7:1a:e6:78:7a:dd:69:72:
e0:79:0b:2f:41:fb:0c:5d:9c:92:bf:39:86:00:32:
39:f7:0f:ee:e6:95:22:50:8a:15:52:d1:01:fe:77:
3a:0b:82:31:08:ca:0e:8f:d0:d4:6f:be:a4:49:17:
27:29:ce:b0:19:71:55:e5:fb:19:81:c5:92:a1:81:
cc:c6:c5:1e:69:0f:b3:55:4d:92:cc:2e:c2:5f:cb:
50:04:be:94:32:42:08:ce:41:a7:f3:11:08:11:57:
99:6f:39:f4:8c:bf:38:56:7c:70:ef:fc:34:80:87:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:49:30:62:41:61:DE:E6:41:D6:37:6C:60:88:FB:76:F7:4F:6F:B6
X509v3 Authority Key Identifier:
keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/A91AF6A8CE7811EF89FA3944C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.246.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:6c:01:8a:20:5a:2a:cc:b3:44:32:52:1a:bc:6e:92:32:95:
b8:51:9d:90:d6:26:b1:cc:8f:8c:02:8a:de:61:31:9c:bd:c8:
af:c6:28:17:23:1e:a2:98:2f:41:95:c8:1a:9c:89:a8:02:c1:
93:68:0c:de:32:01:48:47:b3:ca:cd:f6:38:65:61:b5:30:39:
41:f0:4e:da:f1:61:e1:c3:98:a8:dc:91:bd:74:62:a3:ba:a8:
dc:da:e8:3f:21:ff:2b:8c:0c:51:0c:11:14:2d:53:83:3c:35:
3f:7e:ad:b8:28:d3:3e:97:46:b0:4a:5f:c5:84:26:4e:28:71:
f2:24:e6:f5:43:02:a5:c2:e5:21:ca:dc:fa:de:2d:89:0c:2e:
90:4f:16:15:02:c3:ff:43:18:ff:94:92:f1:ba:ee:fc:5b:e2:
be:ea:41:83:b5:ac:78:09:cd:9d:b7:6b:0c:78:db:ee:cd:49:
68:fc:2b:4d:4d:8b:1d:03:d2:87:69:0e:45:b2:b6:6d:5a:fa:
25:eb:42:98:45:18:28:0f:cf:0d:99:2f:10:be:86:d1:b7:68:
a8:82:34:d0:9c:6f:df:4f:58:79:ac:2e:a6:6e:15:3c:0c:cc:
7d:1b:fe:47:13:e5:eb:5a:ec:98:f2:c2:a1:2f:fd:ed:02:14:
1d:3f:9d:00
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG
MjE0MDdDODEwHhcNMjUwMTA5MTA1ODMwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdmYWJkNi0zNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4KPslbjtg9gEP6VkCMLm+xYeGCkHWofytBg/Q1s2YePTVw2ty9Czk+VSI+9F
H2BF4drbcJi5ZC1/KUXSGMTmFf6/Q3bp5UqLphn/L8Jc7djUph2ZtXBEBLWbfjpW
02atow4HD9etA6rW3TKHoZNo5/87X4fjvlSze7clLYsjuLpRspVGCU6ohGd3t6ho
txrmeHrdaXLgeQsvQfsMXZySvzmGADI59w/u5pUiUIoVUtEB/nc6C4IxCMoOj9DU
b76kSRcnKc6wGXFV5fsZgcWSoYHMxsUeaQ+zVU2SzC7CX8tQBL6UMkIIzkGn8xEI
EVeZbzn0jL84Vnxw7/w0gIe+mwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGpJMGJB
Yd7mQdY3bGCI+3b3T2+2MB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2
N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjNCMkUvMEY1NUM2OTZENjdEMTFFRDg2RDMzNzUwQzRGOUFFMDIvQTkxQUY2QThD
RTc4MTFFRjg5RkEzOTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnsPYwDQYJKoZIhvcNAQELBQADggEBALhsAYogWirMs0Qy
Uhq8bpIylbhRnZDWJrHMj4wCit5hMZy9yK/GKBcjHqKYL0GVyBqciagCwZNoDN4y
AUhHs8rN9jhlYbUwOUHwTtrxYeHDmKjckb10YqO6qNza6D8h/yuMDFEMERQtU4M8
NT9+rbgo0z6XRrBKX8WEJk4ocfIk5vVDAqXC5SHK3PreLYkMLpBPFhUCw/9DGP+U
kvG67vxb4r7qQYO1rHgJzZ23awx42+7NSWj8K01Nix0D0odpDkWytm1a+iXrQphF
GCgPzw2ZLxC+htG3aKiCNNCcb99PWHmsLqZuFTwMzH0b/kcT5eta7JjywqEv/e0C
FB0/nQA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:27:48 2025 by rpki-client