Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa
File: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (raw, json)
Hash identifier: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=
Subject key identifier: 3C:FD:61:81:6D:1D:2D:DD:80:B0:66:5C:0F:3A:03:43:09:33:61:FB
Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial: 0418
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa
Signing time: Thu 09 Jan 2025 00:14:32 +0000
ROA not before: Thu 09 Jan 2025 00:14:32 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 55501
IP address blocks: 103.178.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1048 (0x418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF428
Validity
Not Before: Jan 9 00:14:32 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677f14e8-cf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:7f:d9:18:80:bb:74:4e:1c:f9:09:f2:42:
2a:61:3d:ae:d2:69:e8:44:fb:fe:d6:33:53:5b:97:
da:ba:ab:78:02:5c:c1:69:7c:94:de:32:83:e5:52:
d2:d7:c9:87:4d:fe:8d:02:41:a3:84:dd:5e:36:7a:
73:29:72:2b:34:6c:a3:e9:46:f6:ee:eb:a0:8a:c8:
ef:e5:80:68:96:3a:2b:58:6b:6f:32:62:f3:8a:5f:
7d:66:ba:18:f9:0f:de:16:ca:5a:da:85:09:5e:31:
96:e6:b0:3a:16:a0:b8:81:c0:43:21:4a:f2:1c:c9:
eb:15:f0:5f:91:ae:87:7c:46:3e:3f:53:b3:f0:94:
87:de:c3:29:4e:a2:9a:78:12:d8:4b:f2:5c:2f:da:
a4:8f:d0:e5:a2:05:84:c2:87:0c:14:6b:53:b0:4a:
0c:5a:c0:cb:87:98:aa:8f:76:60:a5:07:7c:ba:6b:
68:75:6f:9d:3c:10:03:4e:75:1c:fc:49:5c:1a:15:
c1:16:f9:81:49:79:f1:f1:d4:79:36:d1:bf:9a:59:
8f:bc:c9:03:81:4d:13:6b:bd:19:2e:64:c8:05:04:
ff:c2:d5:47:60:26:1e:81:be:7b:69:6e:d4:79:34:
67:05:e0:36:5c:39:2a:db:6d:9f:58:82:e4:68:7f:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FD:61:81:6D:1D:2D:DD:80:B0:66:5C:0F:3A:03:43:09:33:61:FB
X509v3 Authority Key Identifier:
keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7d:cc:7f:c8:64:93:9e:ae:0f:c7:c6:4c:5d:f3:07:22:8e:
11:b5:ac:6d:08:e6:b9:d0:cb:bf:43:42:81:10:60:01:b2:02:
d5:d1:90:84:09:0c:c2:c5:29:71:5f:be:db:2d:9d:d7:de:25:
b6:e7:db:f8:73:fe:d3:b1:12:d0:7a:85:68:e8:cc:61:8a:ac:
b3:e7:f5:0d:c1:e0:3d:17:9d:93:15:c9:9a:0e:f2:4b:2e:8a:
71:39:0a:44:8a:5c:48:90:3b:1d:fe:9d:ab:e0:51:00:a6:25:
0d:ad:b0:18:34:02:7b:7c:77:92:5a:88:4e:86:16:c7:51:7b:
3f:47:5b:a6:81:ee:0e:05:4b:61:7f:f9:42:0d:b8:46:2c:f9:
9c:20:70:79:fe:da:05:16:b0:f7:c1:54:d2:43:40:a8:b6:f6:
6f:87:ca:2d:92:69:94:02:60:22:e7:19:f9:ee:f9:25:09:f1:
71:15:f7:fd:9e:fb:f6:ea:78:a7:36:23:c1:8c:28:36:cd:79:
20:b8:f5:d4:c0:e0:9f:56:ed:39:07:93:b0:07:7e:e4:55:62:
9d:bc:fb:25:87:7b:cc:b6:f6:af:37:32:fa:8e:f3:20:0a:be:
3e:12:f0:7e:56:b9:b1:8e:fc:e3:3d:dc:00:86:2e:0e:be:16:
87:f2:6f:47
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY0MjgxMTAvBgNVBAUTKEJFODUyQThCM0I3RUE1QzVBQzVBNTJBQUNCODUyQTAx
QTRDREQwODIwHhcNMjUwMTA5MDAxNDMyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdmMTRlOC1jZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz9J/2RiAu3ROHPkJ8kIqYT2u0mnoRPv+1jNTW5fauqt4AlzBaXyU3jKD5VLS
18mHTf6NAkGjhN1eNnpzKXIrNGyj6Ub27uugisjv5YBoljorWGtvMmLzil99ZroY
+Q/eFspa2oUJXjGW5rA6FqC4gcBDIUryHMnrFfBfka6HfEY+P1Oz8JSH3sMpTqKa
eBLYS/JcL9qkj9DlogWEwocMFGtTsEoMWsDLh5iqj3ZgpQd8umtodW+dPBADTnUc
/ElcGhXBFvmBSXnx8dR5NtG/mlmPvMkDgU0Ta70ZLmTIBQT/wtVHYCYegb57aW7U
eTRnBeA2XDkq222fWILkaH9CFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDz9YYFt
HS3dgLBmXA86A0MJM2H7MB8GA1UdIwQYMBaAFL6FKos7fqXFrFpSqsuFKgGkzdCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjQyOC8zNUVCMTM0ODVE
RDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBjV3NXbEtxeTRVcUFhVE4w
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZvVXFpenQtcGNXc1dsS3F5NFVxQWFUTjBJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkY0MjgvMzVFQjEzNDg1REQ4MTFFQ0I5QjRENjMwQzRGOUFFMDIvMTRGNTVERUFC
N0U2MTFFRjlCOUQ5RjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnshowDQYJKoZIhvcNAQELBQADggEBAD59zH/IZJOerg/H
xkxd8wcijhG1rG0I5rnQy79DQoEQYAGyAtXRkIQJDMLFKXFfvtstndfeJbbn2/hz
/tOxEtB6hWjozGGKrLPn9Q3B4D0XnZMVyZoO8ksuinE5CkSKXEiQOx3+navgUQCm
JQ2tsBg0Ant8d5JaiE6GFsdRez9HW6aB7g4FS2F/+UINuEYs+ZwgcHn+2gUWsPfB
VNJDQKi29m+Hyi2SaZQCYCLnGfnu+SUJ8XEV9/2e+/bqeKc2I8GMKDbNeSC49dTA
4J9W7TkHk7AHfuRVYp28+yWHe8y29q83MvqO8yAKvj4S8H5WubGO/OM93ACGLg6+
Fofyb0c=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:22 2025 by rpki-client