Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/9ED423000B1211F08F4E1E7EC4F9AE02.roa
File: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (raw, json)
Hash identifier: 28RTGOVxaiYLARwHZ0Std1aK28GFPOrIsqNmVkJG6o8=
Subject key identifier: 6E:07:2E:FC:9F:18:E8:00:44:DB:3E:F5:62:65:21:BC:90:F8:78:4B
Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial: 0385
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/9ED423000B1211F08F4E1E7EC4F9AE02.roa
Signing time: Thu 27 Mar 2025 13:51:45 +0000
ROA not before: Thu 27 Mar 2025 13:51:45 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 55933
IP address blocks: 103.178.56.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDCF1
Validity
Not Before: Mar 27 13:51:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67e557f1-f008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:3c:8d:20:50:10:10:b2:f4:6f:c5:7c:ad:
03:98:6a:9e:0a:1d:b4:88:6a:e6:77:3c:b5:46:6b:
d8:dc:79:a1:b7:d5:f8:d2:10:2f:63:59:cd:2a:a3:
49:c8:d8:69:73:f5:e2:1c:e1:3e:a0:cb:b7:85:fe:
f5:c2:70:d4:b5:c3:cf:1c:a1:79:12:06:b0:62:05:
54:37:18:87:f1:b9:10:60:d7:52:ec:3b:08:1a:71:
db:c2:57:1f:ac:3c:74:a7:72:cf:a2:f9:48:39:6c:
27:b8:ec:a6:d9:2a:df:7e:71:dc:97:a3:46:b2:8c:
ab:80:bb:ad:f9:63:49:23:d5:a8:df:15:76:e7:6d:
6e:d0:51:5d:9e:1b:b2:43:5a:83:7c:65:4c:e7:07:
a0:33:9c:d1:ed:5e:e2:3c:9e:c2:e1:9e:5d:f3:3d:
e0:71:18:32:82:4e:cc:c8:ec:ad:05:6c:2e:54:0d:
4c:dd:6a:de:38:68:db:e7:f2:8e:1b:81:9b:d5:ee:
36:07:81:5d:1b:f5:e0:e2:1f:80:69:4a:12:89:b9:
6a:ff:ab:75:da:18:7d:52:ee:7f:3c:41:7c:db:8b:
01:c8:8b:84:80:a4:3f:d7:30:0b:b4:d7:e8:a5:89:
79:f1:dd:e5:8c:c5:70:f9:37:d8:0b:ed:6f:79:01:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:07:2E:FC:9F:18:E8:00:44:DB:3E:F5:62:65:21:BC:90:F8:78:4B
X509v3 Authority Key Identifier:
keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/9ED423000B1211F08F4E1E7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.56.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:c8:dd:94:27:8d:88:59:a4:4c:7f:19:98:1b:3f:53:10:5d:
3d:b8:d5:8a:94:85:97:ba:b7:5f:73:b1:19:8a:78:e1:41:07:
63:aa:75:08:eb:14:6a:65:7e:68:f7:fb:eb:34:cb:82:48:f2:
1a:c9:4a:13:02:b3:81:3e:0a:d1:09:45:8c:05:d6:af:f0:1e:
fd:0c:cf:2a:50:ca:c5:db:1c:20:16:bf:e5:10:3a:b8:32:6b:
a7:29:d5:a1:ac:fb:60:4b:3f:ce:91:ef:a3:94:44:3f:57:db:
9b:d3:74:b9:cd:14:55:ac:fa:0a:d8:cc:39:a6:53:29:fa:58:
fc:06:4c:d4:05:0d:24:f6:35:75:d7:22:67:e1:2a:e3:73:18:
91:0e:1d:e6:db:60:89:38:99:21:8a:a9:4e:3c:9f:cb:83:76:
d4:78:2e:f6:09:32:81:45:0a:f8:f7:ab:c3:9f:fd:82:c0:41:
bb:75:58:c2:a9:df:55:79:da:a6:eb:e0:b1:63:8d:49:39:d1:
f7:4c:cc:55:68:38:7c:89:a8:68:2e:2c:e7:11:b6:ef:33:0a:
8e:3a:e1:38:53:95:f6:e4:0a:36:d7:af:ce:b7:98:0d:4e:af:
e8:e4:3d:da:9e:5f:21:12:ae:b3:b2:75:8c:4e:3c:94:54:14:
31:a9:5c:51
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC
NDc1QzdCOUEwHhcNMjUwMzI3MTM1MTQ1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2U1NTdmMS1mMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvmE8jSBQEBCy9G/FfK0DmGqeCh20iGrmdzy1RmvY3Hmht9X40hAvY1nNKqNJ
yNhpc/XiHOE+oMu3hf71wnDUtcPPHKF5EgawYgVUNxiH8bkQYNdS7DsIGnHbwlcf
rDx0p3LPovlIOWwnuOym2SrffnHcl6NGsoyrgLut+WNJI9Wo3xV2521u0FFdnhuy
Q1qDfGVM5wegM5zR7V7iPJ7C4Z5d8z3gcRgygk7MyOytBWwuVA1M3WreOGjb5/KO
G4Gb1e42B4FdG/Xg4h+AaUoSiblq/6t12hh9Uu5/PEF824sByIuEgKQ/1zALtNfo
pYl58d3ljMVw+TfYC+1veQHPxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG4HLvyf
GOgARNs+9WJlIbyQ+HhLMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4
M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkRDRjEvRUI1OTExMjJBODNDMTFFQ0EzQTRGMzI1QzRGOUFFMDIvOUVENDIzMDAw
QjEyMTFGMDhGNEUxRTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnsjgwDQYJKoZIhvcNAQELBQADggEBAJrI3ZQnjYhZpEx/
GZgbP1MQXT241YqUhZe6t19zsRmKeOFBB2OqdQjrFGplfmj3++s0y4JI8hrJShMC
s4E+CtEJRYwF1q/wHv0MzypQysXbHCAWv+UQOrgya6cp1aGs+2BLP86R76OURD9X
25vTdLnNFFWs+grYzDmmUyn6WPwGTNQFDST2NXXXImfhKuNzGJEOHebbYIk4mSGK
qU48n8uDdtR4LvYJMoFFCvj3q8Of/YLAQbt1WMKp31V52qbr4LFjjUk50fdMzFVo
OHyJqGguLOcRtu8zCo464ThTlfbkCjbXr863mA1Or+jkPdqeXyESrrOydYxOPJRU
FDGpXFE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:03 2025 by rpki-client