Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/9AB64290908211EF9877C022C4F9AE02.roa
File: 9AB64290908211EF9877C022C4F9AE02.roa (raw, json)
Hash identifier: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o=
Subject key identifier: 71:2D:91:D9:21:6A:7B:3E:EA:05:09:0A:34:6F:86:25:FD:88:0E:B8
Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial: 0186
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/9AB64290908211EF9877C022C4F9AE02.roa
Signing time: Fri 07 Mar 2025 02:48:58 +0000
ROA not before: Fri 07 Mar 2025 02:48:58 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 62390
IP address blocks: 103.163.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF4A1
Validity
Not Before: Mar 7 02:48:58 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67ca5e9a-e8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:7c:11:64:67:75:16:f1:35:a2:bc:64:2a:
fb:99:53:5d:f7:df:b2:7c:85:d0:f8:e4:db:72:94:
85:c7:d8:66:2a:7d:ca:6b:18:b9:c7:3c:8b:43:67:
53:08:43:60:5f:59:fa:89:d7:f1:06:f9:ea:3d:39:
57:0f:f2:a0:2b:ac:7b:e2:09:9e:88:c9:49:58:35:
e2:c3:50:93:64:09:a6:0d:e0:ef:e9:5b:16:0c:6f:
a9:0e:84:45:e2:c3:14:2e:ab:db:64:b7:c1:dc:fa:
a2:c9:ea:74:57:c6:0e:e5:aa:04:b0:ba:56:1c:a7:
7e:46:bf:4f:50:9e:3a:5b:1c:86:12:cd:50:d4:8e:
0f:60:07:cd:07:4f:34:80:48:10:6f:d8:55:e5:be:
32:cf:cb:af:69:a6:6d:1d:39:56:3c:8a:04:b3:b0:
f9:03:a2:d8:b2:26:e5:7e:8c:f9:ea:37:f6:d1:d8:
6f:c3:eb:bf:77:d7:6a:83:41:03:42:27:62:d1:f9:
9f:32:31:41:81:f9:11:94:18:1d:c3:8d:78:bd:cb:
a0:24:b6:a6:15:f7:66:87:3a:d6:6a:3e:ae:6f:0d:
c9:e9:98:9e:3d:cc:85:c1:a0:99:89:bc:37:ea:3b:
0d:1a:cf:e6:35:c1:75:15:91:6b:16:bb:a2:e6:53:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2D:91:D9:21:6A:7B:3E:EA:05:09:0A:34:6F:86:25:FD:88:0E:B8
X509v3 Authority Key Identifier:
keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/9AB64290908211EF9877C022C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:30:23:7e:49:f5:de:be:4a:99:3c:8c:26:c7:2a:10:e6:ee:
69:91:98:35:28:f8:ff:a0:62:29:fd:b7:05:58:bd:31:2d:16:
6b:66:ef:97:93:fb:88:48:61:df:76:34:af:5e:04:bc:08:fc:
6f:ba:a6:70:56:ee:c6:bd:7d:07:6b:a7:58:64:ca:14:a4:73:
8c:50:61:33:2d:41:9e:35:3b:16:f1:9b:36:6a:77:f7:7d:02:
0a:65:9f:8a:64:7c:d7:37:55:4c:50:e3:04:05:2b:02:17:1a:
f4:18:0f:eb:66:cc:42:48:87:d1:97:cb:94:9d:3c:7b:d5:38:
2f:0d:5a:92:7c:cd:d7:34:04:49:bd:ff:64:3e:2d:ac:ab:ef:
02:9f:7c:3a:1a:df:71:7d:14:d2:44:51:fb:54:9a:25:9c:fa:
a0:51:ad:41:06:5f:e4:ec:8e:9f:f5:14:0e:6f:03:55:e3:b7:
3f:c0:a3:af:63:0c:e0:c3:23:15:cf:6a:18:3c:5a:c4:7f:dd:
a1:5c:9c:0e:3a:1a:d2:1d:3a:22:b6:08:4a:e5:2e:da:8d:e2:
8d:79:bc:79:b6:21:c2:98:4e:7a:5b:dd:9f:ed:69:de:40:d4:
43:02:08:68:09:f1:7c:3b:2d:57:23:26:87:92:9a:1e:ab:12:
ab:40:48:c9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz
NTQ5MjM3REMwHhcNMjUwMzA3MDI0ODU4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2NhNWU5YS1lOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0YZ8EWRndRbxNaK8ZCr7mVNd99+yfIXQ+OTbcpSFx9hmKn3Kaxi5xzyLQ2dT
CENgX1n6idfxBvnqPTlXD/KgK6x74gmeiMlJWDXiw1CTZAmmDeDv6VsWDG+pDoRF
4sMULqvbZLfB3Pqiyep0V8YO5aoEsLpWHKd+Rr9PUJ46WxyGEs1Q1I4PYAfNB080
gEgQb9hV5b4yz8uvaaZtHTlWPIoEs7D5A6LYsiblfoz56jf20dhvw+u/d9dqg0ED
Qidi0fmfMjFBgfkRlBgdw414vcugJLamFfdmhzrWaj6ubw3J6ZiePcyFwaCZibw3
6jsNGs/mNcF1FZFrFrui5lMiDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHEtkdkh
ans+6gUJCjRvhiX9iA64MB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx
Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO
OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkY0QTEvMEY1ODdBODhCMUNDMTFFRDg1RjI1QTNEQzRGOUFFMDIvOUFCNjQyOTA5
MDgyMTFFRjk4NzdDMDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABno9EwDQYJKoZIhvcNAQELBQADggEBADswI35J9d6+Spk8
jCbHKhDm7mmRmDUo+P+gYin9twVYvTEtFmtm75eT+4hIYd92NK9eBLwI/G+6pnBW
7sa9fQdrp1hkyhSkc4xQYTMtQZ41OxbxmzZqd/d9Agpln4pkfNc3VUxQ4wQFKwIX
GvQYD+tmzEJIh9GXy5SdPHvVOC8NWpJ8zdc0BEm9/2Q+Layr7wKffDoa33F9FNJE
UftUmiWc+qBRrUEGX+Tsjp/1FA5vA1Xjtz/Ao69jDODDIxXPahg8WsR/3aFcnA46
GtIdOiK2CErlLtqN4o15vHm2IcKYTnpb3Z/tad5A1EMCCGgJ8Xw7LVcjJoeSmh6r
EqtASMk=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:10:12 2025 by rpki-client