Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/6FA4F9C44D8511EFA6073432C4F9AE02.roa
File: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (raw, json)
Hash identifier: DuiwpTOQ+46YBE83w0bBmQr9D587PUkTi9Qcefln7w8=
Subject key identifier: 24:85:5F:4F:25:FD:74:41:9A:68:47:AD:6A:9C:03:A6:86:30:F8:60
Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial: 07FF
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/6FA4F9C44D8511EFA6073432C4F9AE02.roa
Signing time: Mon 29 Jul 2024 08:34:57 +0000
ROA not before: Mon 29 Jul 2024 08:34:57 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 15830
IP address blocks: 103.6.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2047 (0x7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Validity
Not Before: Jul 29 08:34:57 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66a75431-8a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:34:f2:3e:4f:7d:f1:b8:20:e2:91:bc:68:
46:c4:e2:af:34:09:45:40:98:97:2d:96:fa:fb:95:
0f:ec:19:76:de:38:ee:03:20:45:fa:a0:14:5d:14:
3f:52:ab:f0:1e:7b:1b:eb:80:59:43:8e:63:c7:ed:
d3:76:66:01:02:9e:05:a4:c0:5b:b3:2b:9d:f3:4a:
ba:e3:4d:c2:8f:be:e6:bd:e1:4b:e4:ba:a4:99:72:
d9:1a:6b:c3:9d:ef:a8:c9:53:c8:7e:26:58:b3:de:
f1:ff:38:c8:3f:db:91:1e:6d:33:1d:21:3e:f7:74:
53:54:fb:6f:19:2f:1e:81:e4:54:04:3b:80:ca:b1:
99:64:1f:10:dd:f7:f8:ca:16:c4:11:8a:b3:52:68:
e8:0c:b1:5c:43:d6:6b:9e:ad:9d:b3:33:7c:83:5b:
23:e2:0e:2a:a0:8e:64:67:4a:9f:d0:82:a7:42:fc:
dd:40:97:35:66:3e:f3:50:39:ca:03:ef:39:3d:6b:
85:cf:27:7f:3f:5f:4b:61:cd:d6:70:ae:25:2c:2d:
bc:8b:89:b5:8e:68:a5:ce:45:2e:5b:39:d1:46:8e:
29:2f:d5:22:a9:04:64:60:65:27:02:ea:f9:ff:ce:
5a:55:e1:5d:3a:0e:d8:cc:ee:20:b1:6a:21:a4:64:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:5F:4F:25:FD:74:41:9A:68:47:AD:6A:9C:03:A6:86:30:F8:60
X509v3 Authority Key Identifier:
keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/6FA4F9C44D8511EFA6073432C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.62.0/24
Signature Algorithm: sha256WithRSAEncryption
98:97:02:a7:1a:7b:2c:0c:c6:f4:1e:a0:67:b8:a4:ce:3d:0f:
43:a7:5f:d2:d8:86:b6:21:5e:ba:4f:e2:41:cd:f8:1c:a9:ac:
b9:ce:50:c4:df:e0:9b:83:c4:86:61:1f:2e:40:1f:c7:04:c9:
84:74:a0:6f:50:81:c3:29:9e:c1:cf:a5:8f:b4:51:30:ab:23:
44:9f:1c:f9:42:78:e7:09:7e:bc:3a:9e:9a:ab:fc:c3:30:ed:
a8:f9:c6:4d:00:9f:f1:ee:5d:e0:01:44:c4:15:49:db:99:be:
17:62:67:c3:42:77:d7:65:4b:02:c6:95:67:40:1e:c2:8f:0e:
a0:d0:fa:2f:55:5f:9f:cd:fa:1a:92:15:13:72:57:c0:6c:23:
a0:d6:de:9a:05:a9:48:fc:7f:1a:b7:84:11:dc:15:29:01:73:
6c:2b:93:e3:78:93:60:b7:3a:4b:c2:65:ee:a6:3b:a0:e6:7a:
17:df:e1:cd:7c:a2:1c:c0:40:7b:17:c6:f6:5b:42:a0:35:ac:
7e:be:f7:74:bb:cc:01:46:3e:60:0e:85:fe:1d:3c:31:a0:20:
60:9c:9b:eb:59:8c:c1:11:50:9a:af:80:88:b0:0e:62:ce:2d:
14:a1:7c:fd:e0:df:3d:40:57:86:98:d3:98:ae:ea:58:ce:d3:
bf:0c:e7:a1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5RkIxMTAvBgNVBAUTKEE5RjdCOTNFOTUyNEZDNEYxNjgxQTg5MkM0NzMyMjE1
NTQyMkIxOEUwHhcNMjQwNzI5MDgzNDU3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE3NTQzMS04YTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzs408j5PffG4IOKRvGhGxOKvNAlFQJiXLZb6+5UP7Bl23jjuAyBF+qAUXRQ/
UqvwHnsb64BZQ45jx+3TdmYBAp4FpMBbsyud80q6403Cj77mveFL5LqkmXLZGmvD
ne+oyVPIfiZYs97x/zjIP9uRHm0zHSE+93RTVPtvGS8egeRUBDuAyrGZZB8Q3ff4
yhbEEYqzUmjoDLFcQ9Zrnq2dszN8g1sj4g4qoI5kZ0qf0IKnQvzdQJc1Zj7zUDnK
A+85PWuFzyd/P19LYc3WcK4lLC28i4m1jmilzkUuWznRRo4pL9UiqQRkYGUnAur5
/85aVeFdOg7YzO4gsWohpGT28QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCSFX08l
/XRBmmhHrWqcA6aGMPhgMB8GA1UdIwQYMBaAFKn3uT6VJPxPFoGoksRzIhVUIrGO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjlGQi8yMEFENDgzNEJG
MzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19FOFdnYWlTeEhNaUZWUWlz
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FmZTVQcFVrX0U4V2dhaVN4SE1pRlZRaXNZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY5RkIvMjBBRDQ4MzRCRjM3MTFFQUEzRTNBMzZGQzRGOUFFMDIvNkZBNEY5QzQ0
RDg1MTFFRkE2MDczNDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnBj4wDQYJKoZIhvcNAQELBQADggEBAJiXAqcaeywMxvQe
oGe4pM49D0OnX9LYhrYhXrpP4kHN+ByprLnOUMTf4JuDxIZhHy5AH8cEyYR0oG9Q
gcMpnsHPpY+0UTCrI0SfHPlCeOcJfrw6npqr/MMw7aj5xk0An/HuXeABRMQVSduZ
vhdiZ8NCd9dlSwLGlWdAHsKPDqDQ+i9VX5/N+hqSFRNyV8BsI6DW3poFqUj8fxq3
hBHcFSkBc2wrk+N4k2C3OkvCZe6mO6Dmehff4c18ohzAQHsXxvZbQqA1rH6+93S7
zAFGPmAOhf4dPDGgIGCcm+tZjMERUJqvgIiwDmLOLRShfP3g3z1AV4aY05iu6ljO
078M56E=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:50 2025 by rpki-client