Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
File: C8900982059611ECB2896C55C4F9AE02.roa (raw, json)
Hash identifier: hg4ELKymdwHyn2QAAvtW6T2bJJMNtTNjpAlYq36iGfA=
Subject key identifier: 50:A9:33:5F:29:65:E5:F6:63:79:C8:50:4C:09:CA:75:CD:4E:E8:B9
Certificate issuer: /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial: 04AC
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
Signing time: Tue 01 Oct 2024 00:14:37 +0000
ROA not before: Tue 01 Oct 2024 00:14:37 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 146953
IP address blocks: 103.172.38.0/24 maxlen: 24
2407:cac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Validity
Not Before: Oct 1 00:14:37 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fb3eed-407e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:3c:be:1f:64:59:eb:87:c7:45:e2:f7:b9:
50:8a:db:33:e7:78:7b:9b:10:b5:00:3c:b1:4b:89:
6b:1b:a9:f8:f9:3a:03:35:43:96:f6:db:bc:64:59:
6c:55:1a:3d:8d:94:c3:f9:5c:d8:0f:38:5b:1f:da:
85:27:9c:04:74:be:56:dd:61:7a:62:c7:1e:f5:43:
2d:f5:58:48:8b:90:22:fa:60:80:aa:99:09:95:3e:
41:25:69:12:e8:fb:fa:aa:45:06:a8:6e:b0:d2:15:
6d:33:1f:2e:f4:ae:29:b2:de:9a:96:97:fe:7a:bc:
48:b3:4a:ae:1d:25:54:27:aa:e3:a6:f1:63:1f:9c:
a1:72:aa:7c:cb:2f:81:ef:a2:67:19:34:09:28:27:
08:bc:9e:6a:43:af:28:57:17:d1:f2:43:ec:bd:1f:
ad:f2:90:9b:3f:9c:ec:d8:e1:02:94:94:6e:23:ee:
c4:6b:2f:e5:54:fc:8a:d4:4c:f9:0d:76:74:8e:36:
c8:1a:d2:7c:81:cf:30:4d:88:25:a7:8d:fe:2d:89:
b0:dd:b3:b2:33:10:b1:fd:b1:52:2c:bc:f8:c3:c0:
e4:89:60:0b:8f:82:81:7e:a4:d4:f3:3e:58:dc:76:
7e:74:2c:5a:ae:79:70:dc:dd:da:09:07:5f:31:7a:
52:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A9:33:5F:29:65:E5:F6:63:79:C8:50:4C:09:CA:75:CD:4E:E8:B9
X509v3 Authority Key Identifier:
keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.38.0/24
IPv6:
2407:cac0::/32
Signature Algorithm: sha256WithRSAEncryption
72:cb:a4:25:31:fe:c1:e1:08:69:99:f0:a8:6f:c8:c0:8e:92:
92:6f:a7:c2:40:21:ed:d2:20:ff:47:b6:4b:42:34:ed:2f:1a:
51:1c:28:22:a4:22:2d:58:a9:48:0d:fb:19:b8:4f:2d:4c:d2:
b3:c9:fc:e6:07:c4:0e:e3:48:7a:9c:75:7e:d5:cb:04:90:a1:
97:16:de:29:97:29:7b:91:fb:63:f6:33:ab:61:56:a1:e1:08:
37:d0:a7:a4:2d:d1:7e:bd:36:43:16:20:42:9a:ef:0c:c0:2a:
8f:59:8f:d8:8b:10:5e:6e:a1:db:77:85:8d:9f:86:8f:c5:56:
4a:32:1a:e2:12:ec:47:8b:a5:23:32:f1:37:10:95:52:03:4d:
05:db:99:7e:e1:dd:58:64:11:2c:9b:07:fc:bc:e4:d4:70:ea:
f5:cc:7b:00:0a:ee:31:af:24:7b:b1:8b:8b:8a:68:d0:96:f4:
c1:4b:47:66:79:e9:fa:a2:3c:8b:24:dc:72:14:f6:99:92:11:
06:27:e4:c4:2a:45:cd:6b:59:54:9f:88:03:1c:33:9b:d7:fb:
73:e9:2e:8d:66:4e:fd:12:b9:0b:bf:55:91:fb:7f:e0:41:94:
b4:15:82:78:66:82:d7:6a:61:85:bb:71:53:a3:a9:55:54:93:
89:d3:5a:30
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzQzExMTAvBgNVBAUTKDE0NTQ4RTcwOTQ5RTUwNUY4QkE4QTUzOTFFNDY2RTFF
OTlEM0I3MjcwHhcNMjQxMDAxMDAxNDM3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZiM2VlZC00MDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbY8vh9kWeuHx0Xi97lQitsz53h7mxC1ADyxS4lrG6n4+ToDNUOW9tu8ZFls
VRo9jZTD+VzYDzhbH9qFJ5wEdL5W3WF6Ysce9UMt9VhIi5Ai+mCAqpkJlT5BJWkS
6Pv6qkUGqG6w0hVtMx8u9K4pst6alpf+erxIs0quHSVUJ6rjpvFjH5yhcqp8yy+B
76JnGTQJKCcIvJ5qQ68oVxfR8kPsvR+t8pCbP5zs2OEClJRuI+7Eay/lVPyK1Ez5
DXZ0jjbIGtJ8gc8wTYglp43+LYmw3bOyMxCx/bFSLLz4w8DkiWALj4KBfqTU8z5Y
3HZ+dCxarnlw3N3aCQdfMXpSqwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFCpM18p
ZeX2Y3nIUEwJynXNTui5MB8GA1UdIwQYMBaAFBRUjnCUnlBfi6ilOR5Gbh6Z07cn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTNDMS83MzZFM0I0ODA1
OTMxMUVDODkyMUVEODVDNEY5QUUwMi9GRlNPY0pTZVVGLUxxS1U1SGtadUhwblR0
eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZGU09jSlNlVUYtTHFLVTVIa1p1SHBuVHR5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTkzQzEvNzM2RTNCNDgwNTkzMTFFQzg5MjFFRDg1QzRGOUFFMDIvQzg5MDA5ODIw
NTk2MTFFQ0IyODk2QzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBABnrCYwDQQCAAIwBwMFACQHysAwDQYJKoZIhvcNAQELBQAD
ggEBAHLLpCUx/sHhCGmZ8KhvyMCOkpJvp8JAIe3SIP9HtktCNO0vGlEcKCKkIi1Y
qUgN+xm4Ty1M0rPJ/OYHxA7jSHqcdX7VywSQoZcW3imXKXuR+2P2M6thVqHhCDfQ
p6Qt0X69NkMWIEKa7wzAKo9Zj9iLEF5uodt3hY2fho/FVkoyGuIS7EeLpSMy8TcQ
lVIDTQXbmX7h3VhkESybB/y85NRw6vXMewAK7jGvJHuxi4uKaNCW9MFLR2Z56fqi
PIsk3HIU9pmSEQYn5MQqRc1rWVSfiAMcM5vX+3PpLo1mTv0SuQu/VZH7f+BBlLQV
gnhmgtdqYYW7cVOjqVVUk4nTWjA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:54:06 2025 by rpki-client