Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/F1C77A3C73E711ECA415F87FC4F9AE02.roa
File: F1C77A3C73E711ECA415F87FC4F9AE02.roa (raw, json)
Hash identifier: 2CyIyNp44NxNr2SQi/2YfeBSUBR+fj5EogTGvnYWavo=
Subject key identifier: 3D:08:A9:2A:28:CB:2E:8D:74:7D:23:23:D4:35:71:6C:6B:D9:B1:60
Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Certificate serial: 0481
Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/F1C77A3C73E711ECA415F87FC4F9AE02.roa
Signing time: Wed 17 Jul 2024 01:02:37 +0000
ROA not before: Wed 17 Jul 2024 01:02:37 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 63473
IP address blocks: 103.167.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153 (0x481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE352
Validity
Not Before: Jul 17 01:02:37 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6697182d-e756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:24:ca:43:ba:02:0b:22:d5:7f:4d:10:af:
eb:14:f5:5c:d4:9e:66:51:20:1b:e8:53:ce:98:39:
09:cb:6a:eb:20:1b:0a:2b:d3:0c:6a:aa:0b:9c:2b:
14:30:28:94:bc:20:eb:72:5f:ac:da:31:2a:0b:b0:
ec:1c:ca:a7:f6:d9:0a:c6:33:94:8e:ca:c5:ad:b8:
2e:6e:b7:eb:c8:dd:e0:c4:50:f0:43:3f:3c:f3:e0:
10:48:38:23:f7:4b:ac:3c:a1:c1:9e:8e:79:97:88:
50:e9:8f:4e:ea:51:1d:2a:32:23:7d:0c:4c:89:b9:
de:49:dd:2c:ab:9e:d4:ab:e0:31:d0:fc:10:c3:5d:
df:46:55:50:3b:02:ab:b2:b9:55:c1:d4:ca:49:e6:
73:73:3d:31:27:7c:23:ed:de:90:6b:4b:a0:48:11:
cb:e9:09:d5:74:0f:53:a2:d2:c8:7c:3a:e3:47:43:
17:71:16:31:ce:b5:8d:e4:6b:d5:11:fd:ff:bf:62:
d3:33:a2:44:89:58:32:3f:94:66:2c:2f:fe:2a:95:
4d:69:03:51:10:ba:60:bd:e1:7f:d0:4d:f8:d0:36:
a4:aa:28:05:49:f5:e8:d8:36:e5:05:d7:6b:cc:71:
bb:57:a3:c7:0b:9a:37:c2:82:d9:f9:e9:44:3b:36:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:A9:2A:28:CB:2E:8D:74:7D:23:23:D4:35:71:6C:6B:D9:B1:60
X509v3 Authority Key Identifier:
keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/F1C77A3C73E711ECA415F87FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.150.0/23
Signature Algorithm: sha256WithRSAEncryption
71:ec:79:93:b3:ee:b2:b1:23:ae:d3:d4:ac:57:85:9a:5e:44:
dc:e6:39:2e:d9:bf:60:65:7d:13:b3:ba:e5:08:07:03:d7:40:
67:98:5c:11:6e:0e:84:9a:84:7d:d1:be:fc:4a:8e:a2:b7:5c:
93:1b:35:08:0b:aa:e9:d7:d7:6b:ef:14:9d:c9:2a:9a:da:52:
46:a1:26:d3:58:71:a3:21:c4:49:11:a6:ca:0d:9f:e1:e8:d6:
4e:d3:d9:fc:48:94:d9:1b:f0:17:d2:16:3c:fe:4f:47:d7:80:
18:4e:9a:be:ea:48:5e:65:db:b8:18:00:9f:de:a9:c0:41:27:
c4:31:ad:0b:97:e6:58:c7:77:fe:33:bb:2f:8b:40:17:20:fd:
d5:8e:6b:7b:30:21:a5:44:66:55:2f:8c:dd:30:2b:9c:90:f2:
b1:fd:e5:bc:78:ed:23:fa:76:12:e0:6e:83:b0:74:2e:c7:82:
28:33:9b:91:23:a7:a0:df:44:9b:08:d7:d7:07:d1:75:bf:3a:
13:75:21:f5:d8:24:70:81:39:23:95:ed:53:70:c4:ca:36:d3:
c8:1b:94:58:91:36:82:49:ca:75:65:1d:4d:b4:41:13:2d:76:
63:00:5b:4d:22:0f:d0:74:e5:71:e1:a5:a8:ee:d5:69:e7:3d:
7b:9b:30:2d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUzNTIxMTAvBgNVBAUTKENBQTZFQjk5QjNGRTBFRkI2NUQzOEYxNUIyQUFFNERD
MzlEQUIzMUQwHhcNMjQwNzE3MDEwMjM3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njk3MTgyZC1lNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4tIkykO6Agsi1X9NEK/rFPVc1J5mUSAb6FPOmDkJy2rrIBsKK9MMaqoLnCsU
MCiUvCDrcl+s2jEqC7DsHMqn9tkKxjOUjsrFrbgubrfryN3gxFDwQz888+AQSDgj
90usPKHBno55l4hQ6Y9O6lEdKjIjfQxMibneSd0sq57Uq+Ax0PwQw13fRlVQOwKr
srlVwdTKSeZzcz0xJ3wj7d6Qa0ugSBHL6QnVdA9TotLIfDrjR0MXcRYxzrWN5GvV
Ef3/v2LTM6JEiVgyP5RmLC/+KpVNaQNRELpgveF/0E340DakqigFSfXo2DblBddr
zHG7V6PHC5o3woLZ+elEOzaRDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD0IqSoo
yy6NdH0jI9Q1cWxr2bFgMB8GA1UdIwQYMBaAFMqm65mz/g77ZdOPFbKq5Nw52rMd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTM1Mi9DOEUyMkU4QTAx
MTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2dGwwNDhWc3FyazNEbmFz
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lxYnJtYlAtRHZ0bDA0OFZzcXJrM0RuYXN4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REUzNTIvQzhFMjJFOEEwMTE2MTFFQzlDQ0RFNzIyQzRGOUFFMDIvRjFDNzdBM0M3
M0U3MTFFQ0E0MTVGODdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnp5YwDQYJKoZIhvcNAQELBQADggEBAHHseZOz7rKxI67T
1KxXhZpeRNzmOS7Zv2BlfROzuuUIBwPXQGeYXBFuDoSahH3RvvxKjqK3XJMbNQgL
qunX12vvFJ3JKpraUkahJtNYcaMhxEkRpsoNn+Ho1k7T2fxIlNkb8BfSFjz+T0fX
gBhOmr7qSF5l27gYAJ/eqcBBJ8QxrQuX5ljHd/4zuy+LQBcg/dWOa3swIaVEZlUv
jN0wK5yQ8rH95bx47SP6dhLgboOwdC7Hgigzm5Ejp6DfRJsI19cH0XW/OhN1IfXY
JHCBOSOV7VNwxMo208gblFiRNoJJynVlHU20QRMtdmMAW00iD9B05XHhpaju1Wnn
PXubMC0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:49:02 2025 by rpki-client