Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/9EB49D14D17411EFA96F8E19C4F9AE02.roa
File: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (raw, json)
Hash identifier: 70+Nv3dW1TlRVjSfYz9QWyUrypqW/MlYCw/LOgFBLs8=
Subject key identifier: FF:F6:BD:32:51:58:8D:55:DD:B3:4F:F7:24:12:DD:51:90:20:1D:3B
Certificate issuer: /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Certificate serial: 0C66
Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/9EB49D14D17411EFA96F8E19C4F9AE02.roa
Signing time: Thu 30 Jan 2025 18:37:07 +0000
ROA not before: Thu 30 Jan 2025 18:37:07 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 63969
IP address blocks: 103.105.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3174 (0xc66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5868
Validity
Not Before: Jan 30 18:37:07 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679bc6d3-cc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:3e:b7:a3:5a:e9:37:af:8f:69:9a:87:4e:
d8:c1:96:ba:12:df:c6:1c:1b:4f:65:04:96:30:58:
16:9d:8f:92:06:92:61:46:3c:86:b4:af:5e:08:5b:
13:44:74:01:e8:d5:ac:67:6c:73:dc:9d:04:cc:4f:
c5:df:27:bc:a0:e0:73:2f:6d:52:80:81:0f:af:60:
fb:81:74:bd:a3:e8:02:22:5f:96:59:ae:20:94:e4:
cb:e2:c8:10:02:f8:c8:a5:3d:d8:ea:2d:e6:92:e0:
07:76:7e:3d:79:0a:51:cf:6a:4a:a6:9c:47:d0:35:
fb:43:2f:05:04:c4:af:89:f4:66:33:86:ad:fa:5f:
f1:91:b9:fd:7d:6b:19:d4:36:c7:21:9e:dd:c8:15:
28:85:ec:ee:9e:cd:2b:7e:ae:8c:89:c0:85:e2:a3:
e4:c0:bf:45:8c:e3:0d:84:c2:9c:b1:18:14:40:30:
20:5c:f1:25:cf:be:6c:b8:e1:75:d6:2a:59:8b:19:
ac:ef:4d:79:c6:b2:1e:a9:7f:6b:23:11:4b:5f:e4:
d5:0b:ba:72:cf:b5:fe:49:40:44:13:d2:ab:a0:d6:
f8:88:04:1a:fb:90:c2:cd:9e:fc:7c:0d:92:9c:e2:
3e:34:fc:55:47:74:d7:b3:7a:68:54:9f:17:53:61:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F6:BD:32:51:58:8D:55:DD:B3:4F:F7:24:12:DD:51:90:20:1D:3B
X509v3 Authority Key Identifier:
keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/9EB49D14D17411EFA96F8E19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.86.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8f:ca:a9:7a:f0:88:52:3d:bf:c4:9f:d7:fd:f9:9b:f4:ae:
b5:b7:c6:00:29:c0:11:63:36:da:40:53:7f:45:5a:19:5f:86:
28:d1:de:6f:44:dc:b1:2f:05:29:87:ff:d2:2f:5b:7a:d8:fa:
68:2f:f4:7c:2a:e7:9f:3c:7d:2c:1e:9c:9d:64:86:3d:16:ff:
36:31:ee:37:e4:a2:f1:a8:da:b4:05:9c:81:5a:ed:d3:50:f5:
e6:49:d8:cd:67:b4:b8:b1:57:19:da:60:4f:30:87:d9:6c:f9:
c2:a5:98:15:78:0d:0c:67:ad:08:13:89:ab:5c:75:94:88:c4:
12:db:aa:cf:35:94:6a:4e:2d:fa:6a:bb:7a:20:39:02:b8:a8:
11:9d:83:8e:41:ed:4c:3b:05:da:fc:eb:29:ee:6e:30:c3:fc:
87:45:18:74:6a:76:59:97:58:6f:04:4e:aa:cf:4d:6f:42:94:
ae:2a:53:2c:32:24:68:10:63:02:73:74:f5:6c:91:9e:a1:4c:
7b:6e:93:ac:a8:b9:21:ea:da:71:b6:fd:60:63:d3:cc:cb:bc:
06:6b:97:14:ce:97:29:ac:91:ec:51:b9:04:c5:fc:ca:d6:47:
64:1c:5a:ff:15:7f:6d:a1:c4:68:d1:e2:fd:07:f2:14:44:c8:
1c:ed:1e:20
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU4NjgxMTAvBgNVBAUTKDI1NTE5MDA3MDhBMDMxNDA3OTVCQTFCQTlCMUREQUZD
RjQxN0M5M0YwHhcNMjUwMTMwMTgzNzA3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzliYzZkMy1jYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzNw+t6Na6Tevj2mah07YwZa6Et/GHBtPZQSWMFgWnY+SBpJhRjyGtK9eCFsT
RHQB6NWsZ2xz3J0EzE/F3ye8oOBzL21SgIEPr2D7gXS9o+gCIl+WWa4glOTL4sgQ
AvjIpT3Y6i3mkuAHdn49eQpRz2pKppxH0DX7Qy8FBMSvifRmM4at+l/xkbn9fWsZ
1DbHIZ7dyBUohezuns0rfq6MicCF4qPkwL9FjOMNhMKcsRgUQDAgXPElz75suOF1
1ipZixms7015xrIeqX9rIxFLX+TVC7pyz7X+SUBEE9KroNb4iAQa+5DCzZ78fA2S
nOI+NPxVR3TXs3poVJ8XU2HJTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP/2vTJR
WI1V3bNP9yQS3VGQIB07MB8GA1UdIwQYMBaAFCVRkAcIoDFAeVuhupsd2vz0F8k/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTg2OC8wNjVBQzIyQ0Yz
RkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01VQjVXNkc2bXgzYV9QUVh5
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pWR1FCd2lnTVVCNVc2RzZteDNhX1BRWHlUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU4NjgvMDY1QUMyMkNGM0ZFMTFFOTlCNjk1RjE5QzRGOUFFMDIvOUVCNDlEMTRE
MTc0MTFFRkE5NkY4RTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnaVYwDQYJKoZIhvcNAQELBQADggEBAIOPyql68IhSPb/E
n9f9+Zv0rrW3xgApwBFjNtpAU39FWhlfhijR3m9E3LEvBSmH/9IvW3rY+mgv9Hwq
5588fSwenJ1khj0W/zYx7jfkovGo2rQFnIFa7dNQ9eZJ2M1ntLixVxnaYE8wh9ls
+cKlmBV4DQxnrQgTiatcdZSIxBLbqs81lGpOLfpqu3ogOQK4qBGdg45B7Uw7Bdr8
6ynubjDD/IdFGHRqdlmXWG8ETqrPTW9ClK4qUywyJGgQYwJzdPVskZ6hTHtuk6yo
uSHq2nG2/WBj08zLvAZrlxTOlymskexRuQTF/MrWR2QcWv8Vf22hxGjR4v0H8hRE
yBztHiA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:42:21 2025 by rpki-client