Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/82A69048E5E611E9A31D0F15C4F9AE02.roa
File: 82A69048E5E611E9A31D0F15C4F9AE02.roa (raw, json)
Hash identifier: qEkECxoCgKBKTnw3bchzSUCu8r6TBFUP4UAPJP8qzMY=
Subject key identifier: E7:8A:15:66:D5:7F:F8:EE:B9:EA:DD:BF:64:BD:0E:42:47:F4:AC:FF
Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Certificate serial: 0CBA
Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/82A69048E5E611E9A31D0F15C4F9AE02.roa
Signing time: Sat 14 Dec 2024 18:07:11 +0000
ROA not before: Sat 14 Dec 2024 18:07:11 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 40927
IP address blocks: 103.124.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3258 (0xcba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59A6
Validity
Not Before: Dec 14 18:07:11 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675dc94f-4279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a6:16:53:3a:65:b9:cd:e4:cd:86:bd:08:20:
28:ce:fe:cd:37:42:4e:bc:c2:27:21:d4:28:de:4c:
64:88:42:3b:32:57:a3:98:40:39:44:f3:9b:7d:ca:
09:c1:8a:29:4b:64:a6:7f:24:68:ff:4e:20:a7:10:
5a:25:2c:5e:77:8e:6d:3c:60:a6:04:02:ea:f4:d7:
c7:a0:40:07:8e:65:99:cb:39:c7:7d:f9:97:f5:ff:
84:37:55:40:89:e0:66:cb:47:b2:9d:40:ab:1b:de:
19:27:64:61:c7:50:73:6e:a8:68:8f:70:5a:34:5b:
61:9b:9d:9b:72:3c:33:4e:f0:07:dd:4c:12:bf:c7:
52:19:06:a1:49:c9:7f:d2:2c:e5:6d:d4:2b:d1:51:
94:e8:2d:14:cc:a4:e6:7b:95:d2:98:3d:cb:3d:1e:
c5:d4:a3:79:ec:d6:09:11:5e:e0:ec:3f:34:f4:0c:
f0:3d:cd:75:c1:28:33:df:b0:ca:b7:05:81:27:14:
b1:01:e0:66:f1:4a:b3:b6:dc:be:b3:3c:0d:87:5b:
3a:29:77:e0:8b:a0:05:3c:f6:27:50:0e:75:47:ad:
e6:be:2a:9b:d2:97:14:f8:0e:b3:f7:0a:18:90:1b:
64:57:e0:bf:68:01:07:7e:77:43:c6:ca:d5:75:9b:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8A:15:66:D5:7F:F8:EE:B9:EA:DD:BF:64:BD:0E:42:47:F4:AC:FF
X509v3 Authority Key Identifier:
keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/82A69048E5E611E9A31D0F15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.124.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:05:ae:27:36:e3:da:b1:3f:79:a6:46:28:3c:88:a6:8a:ce:
68:80:d4:f5:86:10:56:5a:2d:a8:3d:4c:38:20:25:ff:d3:79:
9e:1c:a4:e6:b9:97:29:de:ee:a2:83:d0:d5:7c:87:e6:29:9c:
ed:bf:a7:c9:3f:0c:8f:03:23:5f:36:ff:e4:c4:05:7f:bb:6e:
82:ba:dc:d2:b7:76:32:18:69:70:a9:79:8b:f1:1e:e9:d6:17:
41:f6:72:fc:42:90:58:53:88:43:c9:b5:5f:82:ac:d6:64:70:
42:01:8e:15:9f:4d:bd:19:9b:d5:36:9b:1f:0a:43:eb:bb:92:
7d:1e:c1:e2:40:80:f8:e0:c6:0e:05:08:0a:ba:01:db:00:f6:
27:b6:38:e4:35:fa:24:e9:81:34:19:fd:45:e0:3a:08:16:3d:
cb:82:08:1c:65:31:d9:e6:e7:b1:b1:d8:23:48:7b:c4:e5:d2:
29:7e:81:f1:6a:ff:57:d9:53:c0:52:d6:d0:e4:6b:0b:f4:37:
92:da:9e:05:dd:26:b3:29:58:1b:da:39:80:20:7c:15:1a:85:
6f:01:5b:8e:6d:e9:5b:52:37:60:4f:7f:06:68:b0:64:c4:65:
d4:79:cb:06:78:29:04:5b:1e:e6:61:e7:0d:c3:70:c8:50:98:
04:f6:fd:25
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF
MjA2MUM1QzEwHhcNMjQxMjE0MTgwNzExWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzVkYzk0Zi00Mjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3KYWUzpluc3kzYa9CCAozv7NN0JOvMInIdQo3kxkiEI7MlejmEA5RPObfcoJ
wYopS2SmfyRo/04gpxBaJSxed45tPGCmBALq9NfHoEAHjmWZyznHffmX9f+EN1VA
ieBmy0eynUCrG94ZJ2Rhx1Bzbqhoj3BaNFthm52bcjwzTvAH3UwSv8dSGQahScl/
0izlbdQr0VGU6C0UzKTme5XSmD3LPR7F1KN57NYJEV7g7D809AzwPc11wSgz37DK
twWBJxSxAeBm8Uqztty+szwNh1s6KXfgi6AFPPYnUA51R63mviqb0pcU+A6z9woY
kBtkV+C/aAEHfndDxsrVdZtfjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOeKFWbV
f/juuerdv2S9DkJH9Kz/MB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1
RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU5QTYvNDA4NDhDM0VFNUU1MTFFOTlGMUY3QzEzQzRGOUFFMDIvODJBNjkwNDhF
NUU2MTFFOUEzMUQwRjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnfHwwDQYJKoZIhvcNAQELBQADggEBAB0Fric249qxP3mm
Rig8iKaKzmiA1PWGEFZaLag9TDggJf/TeZ4cpOa5lyne7qKD0NV8h+YpnO2/p8k/
DI8DI182/+TEBX+7boK63NK3djIYaXCpeYvxHunWF0H2cvxCkFhTiEPJtV+CrNZk
cEIBjhWfTb0Zm9U2mx8KQ+u7kn0eweJAgPjgxg4FCAq6AdsA9ie2OOQ1+iTpgTQZ
/UXgOggWPcuCCBxlMdnm57Gx2CNIe8Tl0il+gfFq/1fZU8BS1tDkawv0N5LangXd
JrMpWBvaOYAgfBUahW8BW45t6VtSN2BPfwZosGTEZdR5ywZ4KQRbHuZh5w3DcMhQ
mAT2/SU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:53 2025 by rpki-client