Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/66D00EB2449C11EE86105C41C4F9AE02.roa
File: 66D00EB2449C11EE86105C41C4F9AE02.roa (raw, json)
Hash identifier: sFUlSAs686BHpBPHFZ6jJXEM4AvroBrl/QL/VRc6YMo=
Subject key identifier: 4D:10:51:93:DF:95:9F:81:07:FF:81:36:C0:8F:7D:38:10:6C:F8:FD
Certificate issuer: /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Certificate serial: 0187
Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/66D00EB2449C11EE86105C41C4F9AE02.roa
Signing time: Mon 03 Feb 2025 02:56:11 +0000
ROA not before: Mon 03 Feb 2025 02:56:11 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 150114
IP address blocks: 103.66.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD64D
Validity
Not Before: Feb 3 02:56:11 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a0304a-5956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:e8:90:2d:d4:cd:1a:35:9f:74:18:70:aa:
1a:d2:d9:7f:ae:27:fa:b0:fb:cd:6f:7b:c0:2d:49:
fc:2b:1c:bb:49:ac:97:b1:6d:61:fc:87:de:61:80:
10:36:b4:04:b0:2d:cb:3b:dd:96:25:88:b2:b3:a5:
5a:ed:6e:5e:dc:18:bd:c2:b6:41:98:e1:d6:28:90:
1e:55:12:64:14:52:f1:66:2f:73:8b:54:36:cf:cb:
a5:b8:92:2a:fe:d5:ab:de:bb:2f:7b:ad:af:92:04:
0e:2d:5f:53:f9:fd:18:b7:98:c5:6f:20:0e:8b:38:
d7:a4:a8:a9:09:ec:ba:63:ed:93:62:a1:bd:17:97:
ce:ec:b2:91:c2:bd:43:e3:81:a1:3c:46:4c:1b:53:
63:41:80:a7:07:52:7b:fc:1a:0d:01:d8:17:b5:76:
a2:b8:96:4c:46:45:82:c4:c1:aa:eb:43:ab:09:d6:
33:50:22:c9:bc:a6:d1:a2:99:b8:35:f8:34:b2:59:
c4:15:06:c5:cc:35:8b:37:5d:d8:9f:ee:07:be:07:
cd:89:6e:60:c5:2a:de:88:2c:50:a5:88:23:b6:fc:
7e:52:1a:39:b6:87:51:27:98:9f:49:6f:ce:22:0c:
c3:78:3b:b9:f3:90:02:3a:78:4f:d8:12:54:17:3a:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:10:51:93:DF:95:9F:81:07:FF:81:36:C0:8F:7D:38:10:6C:F8:FD
X509v3 Authority Key Identifier:
keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/66D00EB2449C11EE86105C41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.228.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:88:7a:7c:d4:3b:be:a8:f2:fd:ca:96:96:34:f6:09:72:01:
22:e0:00:14:2b:51:05:4b:97:e6:c5:cb:48:da:90:57:f7:83:
56:55:83:5f:f8:fc:b2:07:9e:71:b6:50:4f:20:4f:3d:cd:eb:
e7:ac:9b:fd:6e:1e:f9:ab:67:bb:64:f2:d3:aa:4c:e9:b7:cc:
05:6e:b4:a2:ad:57:c7:1f:96:03:22:01:1f:66:26:50:c2:52:
4a:d7:51:ad:72:76:d0:06:dd:f5:31:2a:90:4b:a7:07:e7:d6:
6f:2c:a6:e3:63:3c:72:f2:be:19:43:7f:5d:48:85:21:07:0b:
bc:05:c3:83:75:b4:8a:a1:44:69:34:57:0a:22:2b:df:cb:6b:
90:21:de:50:b0:74:ba:e2:ec:eb:4b:64:29:6f:41:94:c2:91:
6d:79:44:70:de:7b:90:0b:8e:fe:68:b0:c7:f4:85:16:48:ea:
44:82:2e:9b:39:10:da:7d:28:10:e6:cd:3c:0a:ab:d8:ef:4b:
da:8e:1c:bd:be:12:de:7e:6b:a1:0e:52:e1:dd:48:1f:40:da:
43:96:ee:31:53:a4:3b:2a:cb:21:67:8d:aa:7b:4d:50:f7:ef:
d4:83:85:20:d5:6f:68:04:81:e5:fb:8d:2c:df:7a:77:e6:e9:
39:c7:1d:3e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ2NEQxMTAvBgNVBAUTKEI0QjE4QTI1M0ZCNjI5MzQzNzExNjYzNUREREQxOTk0
MjhCNjhENUIwHhcNMjUwMjAzMDI1NjExWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2EwMzA0YS01OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzEfokC3UzRo1n3QYcKoa0tl/rif6sPvNb3vALUn8Kxy7SayXsW1h/IfeYYAQ
NrQEsC3LO92WJYiys6Va7W5e3Bi9wrZBmOHWKJAeVRJkFFLxZi9zi1Q2z8uluJIq
/tWr3rsve62vkgQOLV9T+f0Yt5jFbyAOizjXpKipCey6Y+2TYqG9F5fO7LKRwr1D
44GhPEZMG1NjQYCnB1J7/BoNAdgXtXaiuJZMRkWCxMGq60OrCdYzUCLJvKbRopm4
Nfg0slnEFQbFzDWLN13Yn+4HvgfNiW5gxSreiCxQpYgjtvx+Uho5todRJ5ifSW/O
IgzDeDu585ACOnhP2BJUFzpxVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE0QUZPf
lZ+BB/+BNsCPfTgQbPj9MB8GA1UdIwQYMBaAFLSxiiU/tik0NxFmNd3dGZQoto1b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDY0RC8zNzA3ODZDODk5
OTQxMUVEODU2NzMxMUZDNEY5QUUwMi90TEdLSlQtMktUUTNFV1kxM2QwWmxDaTJq
VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RMR0tKVC0yS1RRM0VXWTEzZDBabENpMmpWcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkQ2NEQvMzcwNzg2Qzg5OTk0MTFFRDg1NjczMTFGQzRGOUFFMDIvNjZEMDBFQjI0
NDlDMTFFRTg2MTA1QzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnQuQwDQYJKoZIhvcNAQELBQADggEBAMKIenzUO76o8v3K
lpY09glyASLgABQrUQVLl+bFy0jakFf3g1ZVg1/4/LIHnnG2UE8gTz3N6+esm/1u
HvmrZ7tk8tOqTOm3zAVutKKtV8cflgMiAR9mJlDCUkrXUa1ydtAG3fUxKpBLpwfn
1m8spuNjPHLyvhlDf11IhSEHC7wFw4N1tIqhRGk0VwoiK9/La5Ah3lCwdLri7OtL
ZClvQZTCkW15RHDee5ALjv5osMf0hRZI6kSCLps5ENp9KBDmzTwKq9jvS9qOHL2+
Et5+a6EOUuHdSB9A2kOW7jFTpDsqyyFnjap7TVD379SDhSDVb2gEgeX7jSzfenfm
6TnHHT4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:28 2025 by rpki-client