Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/5C80511ECD7111EBB042E26FC4F9AE02.roa
File: 5C80511ECD7111EBB042E26FC4F9AE02.roa (raw, json)
Hash identifier: ehgsplH23ckop4Vl4H+PmX9zTFMw0AoQLge5Nfd+aic=
Subject key identifier: 72:21:FB:2B:70:DF:98:11:14:F1:8F:58:03:F2:DD:C4:56:99:89:EE
Certificate issuer: /CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Certificate serial: 04CE
Authority key identifier: 5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/5C80511ECD7111EBB042E26FC4F9AE02.roa
Signing time: Tue 01 Aug 2023 00:41:58 +0000
ROA not before: Tue 01 Aug 2023 00:41:58 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 38281
IP address blocks: 103.166.246.0/24 maxlen: 24
2001:df6:9f80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C83F1
Validity
Not Before: Aug 1 00:41:58 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64c854d6-89b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:d4:8e:54:6d:09:85:71:55:3d:fe:d8:46:
24:0f:24:7d:38:c4:be:f4:4b:ed:e9:09:a6:f4:bf:
fc:4d:7a:e8:c8:d9:90:3b:51:db:2c:74:3e:18:4e:
15:b8:76:66:db:67:da:4a:de:eb:3b:78:8e:95:61:
cd:9f:87:3a:c2:48:a1:79:ae:16:f0:97:74:86:62:
7c:93:a7:f8:bd:33:d6:84:44:fb:26:e8:c4:30:8d:
1a:13:4e:9a:40:8a:73:41:26:92:39:92:37:d7:18:
c7:0f:b3:bb:3b:27:33:b9:2f:10:cc:3a:54:59:1b:
cb:b5:2a:27:d5:b9:80:12:fa:df:04:c7:3a:98:98:
92:45:3c:3c:32:3d:e9:e5:0a:19:95:71:8d:0c:5b:
4f:b2:fe:f7:44:8c:dd:8f:65:6e:50:6e:76:a5:93:
48:49:c4:3d:c3:3a:58:85:a7:9f:07:e8:95:ba:b8:
a3:7e:c6:b6:60:03:d9:cb:a3:ce:5d:c3:5a:0d:f0:
bb:b7:9d:a5:91:b8:a8:56:d3:3d:ec:0f:55:a5:e3:
d1:fa:49:47:a0:d5:f2:de:f0:85:46:d2:42:7f:96:
ed:6e:f4:94:b8:24:64:80:40:ec:29:7e:d1:aa:4d:
c2:d4:05:35:5e:d2:e5:7c:4b:7c:2f:72:d2:40:03:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:21:FB:2B:70:DF:98:11:14:F1:8F:58:03:F2:DD:C4:56:99:89:EE
X509v3 Authority Key Identifier:
keyid:5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/WlozCZSmbPoShPMmBuOeGVx8qWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/5C80511ECD7111EBB042E26FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.246.0/24
IPv6:
2001:df6:9f80::/48
Signature Algorithm: sha256WithRSAEncryption
77:0e:df:8c:b3:5f:6b:36:b9:78:29:78:cb:48:19:61:ff:a6:
9e:09:7f:c4:3b:aa:aa:00:18:7d:94:0f:12:ad:42:42:16:31:
2a:43:7f:42:e0:47:2b:23:3e:3b:c4:b7:54:34:2a:19:ad:14:
76:df:07:81:8d:98:be:59:3e:99:0d:1a:27:e7:1d:6c:d0:de:
7c:ec:34:03:13:4e:bd:0e:ef:f8:f7:17:79:1f:82:4c:e6:bd:
e8:51:e0:1b:7d:88:8c:ec:8f:31:4f:33:6a:0b:b4:66:9b:3f:
55:35:c1:39:df:35:b9:97:6e:a5:3e:e6:78:c7:3a:d0:06:9b:
c0:ca:e3:55:fa:ab:c0:57:3b:ca:55:69:22:e7:4a:ce:c4:d7:
33:d6:df:32:9f:09:7d:a9:6c:70:64:b1:9b:0a:e7:d8:cc:bf:
a2:9b:50:20:21:89:dd:ee:cd:e4:36:68:c9:29:3d:22:be:ca:
3c:6c:3d:ae:b5:09:fc:7e:6f:96:ba:47:8d:4b:ab:f4:a7:e8:
cf:92:b8:55:2e:03:2f:59:dc:bd:79:da:d0:fc:7c:09:e9:93:
6b:87:22:a4:20:c8:04:4c:a9:df:7e:89:e1:41:e4:0b:cf:67:
f6:78:cf:23:1f:f6:f7:29:05:b6:73:51:66:65:bb:ce:40:de:
98:a9:33:03
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgzRjExMTAvBgNVBAUTKDVBNUEzMzA5OTRBNjZDRkExMjg0RjMyNjA2RTM5RTE5
NUM3Q0E5NjcwHhcNMjMwODAxMDA0MTU4WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGM4NTRkNi04OWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzyvUjlRtCYVxVT3+2EYkDyR9OMS+9Evt6Qmm9L/8TXroyNmQO1HbLHQ+GE4V
uHZm22faSt7rO3iOlWHNn4c6wkihea4W8Jd0hmJ8k6f4vTPWhET7JujEMI0aE06a
QIpzQSaSOZI31xjHD7O7OyczuS8QzDpUWRvLtSon1bmAEvrfBMc6mJiSRTw8Mj3p
5QoZlXGNDFtPsv73RIzdj2VuUG52pZNIScQ9wzpYhaefB+iVurijfsa2YAPZy6PO
XcNaDfC7t52lkbioVtM97A9VpePR+klHoNXy3vCFRtJCf5btbvSUuCRkgEDsKX7R
qk3C1AU1XtLlfEt8L3LSQANbKwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHIh+ytw
35gRFPGPWAPy3cRWmYnuMB8GA1UdIwQYMBaAFFpaMwmUpmz6EoTzJgbjnhlcfKln
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNGMS8wRDQzQjFGMEFG
QTcxMUVCOEFGMzQ0MzVDNEY5QUUwMi9XbG96Q1pTbWJQb1NoUE1tQnVPZUdWeDhx
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dsb3pDWlNtYlBvU2hQTW1CdU9lR1Z4OHFXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzgzRjEvMEQ0M0IxRjBBRkE3MTFFQjhBRjM0NDM1QzRGOUFFMDIvNUM4MDUxMUVD
RDcxMTFFQkIwNDJFMjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnpvYwDwQCAAIwCQMHACABDfafgDANBgkqhkiG9w0BAQsF
AAOCAQEAdw7fjLNfaza5eCl4y0gZYf+mngl/xDuqqgAYfZQPEq1CQhYxKkN/QuBH
KyM+O8S3VDQqGa0Udt8HgY2Yvlk+mQ0aJ+cdbNDefOw0AxNOvQ7v+PcXeR+CTOa9
6FHgG32IjOyPMU8zagu0Zps/VTXBOd81uZdupT7meMc60AabwMrjVfqrwFc7ylVp
IudKzsTXM9bfMp8JfalscGSxmwrn2My/optQICGJ3e7N5DZoySk9Ir7KPGw9rrUJ
/H5vlrpHjUur9Kfoz5K4VS4DL1ncvXna0Px8CemTa4cipCDIBEyp336J4UHkC89n
9njPIx/29ykFtnNRZmW7zkDemKkzAw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:52:31 2025 by rpki-client