Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/F9E21144D90F11EDB2DBEA49C4F9AE02.roa
File: F9E21144D90F11EDB2DBEA49C4F9AE02.roa (raw, json)
Hash identifier: fP45NGSHNvdQShMBiD1rePe2Esz9p+VlDQo2vfi2cz0=
Subject key identifier: CE:87:A1:D6:2C:FD:C4:F4:74:08:28:45:F2:C3:BC:01:05:76:18:06
Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Certificate serial: 168C
Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/F9E21144D90F11EDB2DBEA49C4F9AE02.roa
Signing time: Tue 18 Feb 2025 17:34:28 +0000
ROA not before: Tue 18 Feb 2025 17:34:28 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136970
IP address blocks: 103.107.236.0/24 maxlen: 24
103.107.237.0/24 maxlen: 24
103.107.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5772 (0x168c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5A9
Validity
Not Before: Feb 18 17:34:28 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67b4c4a4-d2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:9f:5e:ac:e3:d0:5f:c7:9a:9c:e4:5f:b5:
79:22:33:04:08:72:09:43:03:05:00:bf:d5:59:3d:
8a:13:64:12:1d:f1:15:25:52:36:9a:9a:f8:25:79:
cd:da:13:2e:6d:56:74:83:41:24:d9:24:b6:b9:c5:
ee:7e:ea:96:ef:9b:a0:06:a9:2a:83:ba:fd:2d:0a:
f3:82:0e:ba:55:a9:e6:fc:71:b8:d9:4e:9f:da:77:
73:9e:29:74:29:df:9d:23:97:01:89:41:8d:0e:8b:
fd:26:7d:4a:33:d7:7d:25:23:aa:01:8a:3d:f0:4c:
71:91:8b:e0:d4:c0:5e:79:cd:cb:59:09:26:a6:d1:
db:a8:3f:25:f2:cb:1f:24:bd:f2:0f:2c:cd:a6:f9:
f1:1c:74:e1:31:da:9f:ad:90:03:88:8d:1f:d3:6a:
cf:d2:e6:b1:7a:2c:37:8b:53:c5:94:07:7b:77:fe:
30:82:a2:a5:53:f3:74:0a:0e:34:f3:22:a8:ee:7b:
7d:5e:55:fc:b2:bf:a0:d4:75:8b:c0:b0:d5:58:e0:
d1:40:cd:45:46:30:9d:f0:a0:28:90:89:2e:95:01:
f3:fc:1f:d5:6f:8b:66:f8:e6:33:20:dd:3a:c5:fc:
e2:46:0a:f8:ec:e8:23:64:3f:5b:c2:82:2e:a0:e3:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:87:A1:D6:2C:FD:C4:F4:74:08:28:45:F2:C3:BC:01:05:76:18:06
X509v3 Authority Key Identifier:
keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/F9E21144D90F11EDB2DBEA49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.236.0-103.107.238.255
Signature Algorithm: sha256WithRSAEncryption
b4:50:b7:04:12:ce:b5:c8:05:0d:f0:56:02:81:01:10:38:93:
b5:bf:6b:6f:f3:39:61:10:6e:a2:d8:ec:b8:81:19:35:9a:0f:
45:9b:42:50:b4:da:99:68:b4:76:b0:7f:6f:11:e5:7c:53:ab:
2a:62:c3:2e:ae:3f:51:3f:f5:bd:8e:44:c5:5e:6c:a4:10:79:
3b:18:42:bc:f2:c8:33:d7:74:7b:6b:a3:ff:30:3b:a2:11:9d:
a0:d5:f3:bf:1e:a0:29:56:c0:a3:39:41:a4:a9:d1:a8:ea:7c:
99:c5:be:ef:5d:0a:7f:96:fc:a4:b2:33:68:a4:b5:9d:6f:8f:
71:36:5b:c6:ee:77:eb:9f:64:1c:1c:ab:c8:15:8b:a2:6f:f2:
6e:77:52:f2:61:29:32:c9:6a:bf:2c:ff:f1:aa:69:fb:df:10:
d2:8b:a7:7a:e4:89:f1:90:fd:44:8f:44:7e:17:fd:c6:99:3f:
53:f4:75:74:bb:61:95:a6:a7:fe:03:b7:96:07:e1:46:03:6d:
da:19:d7:53:d4:01:f7:43:ba:b5:78:28:99:84:a5:04:46:6d:
56:32:de:cb:9c:cf:6a:54:cf:80:8f:e1:ab:fc:f5:91:f6:aa:
83:21:e3:6b:cc:7a:91:d0:5a:1e:50:63:30:db:6a:88:bc:dd:
29:51:a0:c4
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICFowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw
QUVEREJCNkIwHhcNMjUwMjE4MTczNDI4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2I0YzRhNC1kMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs9CfXqzj0F/HmpzkX7V5IjMECHIJQwMFAL/VWT2KE2QSHfEVJVI2mpr4JXnN
2hMubVZ0g0Ek2SS2ucXufuqW75ugBqkqg7r9LQrzgg66Vanm/HG42U6f2ndznil0
Kd+dI5cBiUGNDov9Jn1KM9d9JSOqAYo98ExxkYvg1MBeec3LWQkmptHbqD8l8ssf
JL3yDyzNpvnxHHThMdqfrZADiI0f02rP0uaxeiw3i1PFlAd7d/4wgqKlU/N0Cg40
8yKo7nt9XlX8sr+g1HWLwLDVWODRQM1FRjCd8KAokIkulQHz/B/Vb4tm+OYzIN06
xfziRgr47OgjZD9bwoIuoONTzQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFM6HodYs
/cT0dAgoRfLDvAEFdhgGMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE
MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1
MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkY1QTkvMDBCNzE1MUNGRDA4MTFFN0E0MjhGRjBGQzRGOUFFMDIvRjlFMjExNDRE
OTBGMTFFREIyREJFQTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAmdr7AMEAGdr7jANBgkqhkiG9w0BAQsFAAOCAQEAtFC3
BBLOtcgFDfBWAoEBEDiTtb9rb/M5YRBuotjsuIEZNZoPRZtCULTamWi0drB/bxHl
fFOrKmLDLq4/UT/1vY5ExV5spBB5OxhCvPLIM9d0e2uj/zA7ohGdoNXzvx6gKVbA
ozlBpKnRqOp8mcW+710Kf5b8pLIzaKS1nW+PcTZbxu53659kHByryBWLom/ybndS
8mEpMslqvyz/8app+98Q0ouneuSJ8ZD9RI9Efhf9xpk/U/R1dLthlaan/gO3lgfh
RgNt2hnXU9QB90O6tXgomYSlBEZtVjLey5zPalTPgI/hq/z1kfaqgyHja8x6kdBa
HlBjMNtqiLzdKVGgxA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:07:52 2025 by rpki-client