Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/9F7C20921ADD11EC80226B61C4F9AE02.roa
File: 9F7C20921ADD11EC80226B61C4F9AE02.roa (raw, json)
Hash identifier: 76Aj2e1/zvO+ptuFoEi5Uq+Ik3Pi+kbiWoL+xAlC1Eg=
Subject key identifier: F7:7F:81:32:B7:DB:16:1F:4E:3B:E0:75:65:55:84:5A:2C:9B:9D:27
Certificate issuer: /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F
Certificate serial: 044E
Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/9F7C20921ADD11EC80226B61C4F9AE02.roa
Signing time: Tue 13 Aug 2024 01:02:46 +0000
ROA not before: Tue 13 Aug 2024 01:02:46 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 136735
IP address blocks: 103.94.207.0/24 maxlen: 24
103.163.5.0/24 maxlen: 24
2001:df1:8700::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102 (0x44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F
Validity
Not Before: Aug 13 01:02:46 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66bab0b6-6469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e9:50:6a:6a:5f:d6:9d:52:f2:e2:5d:f1:c6:
b1:1b:7f:bd:87:e8:1f:56:66:68:da:4b:2d:c3:fb:
af:0e:3f:26:c9:33:e1:41:fb:eb:b3:87:7f:6e:b6:
68:22:ff:30:bc:bf:ee:71:49:fe:c9:34:d3:34:50:
61:9f:02:a1:22:c1:91:fa:5a:a7:f0:50:b6:d5:22:
42:97:c0:2f:1e:41:92:05:fd:ea:36:50:9f:56:0a:
07:13:42:dd:8d:30:09:92:55:66:d1:32:31:82:05:
c4:d7:5e:ed:88:38:e8:88:6b:bc:94:a7:8f:41:01:
34:90:c6:5d:fc:69:d8:4c:5c:22:aa:af:34:31:e0:
be:53:d2:b6:15:92:6f:dd:ed:45:a7:13:f0:2d:01:
c4:18:7b:ad:04:08:58:81:26:96:83:1d:59:42:56:
32:9f:1a:04:af:e8:9d:85:ff:58:ef:cc:fe:a2:86:
33:fb:09:99:21:78:7f:2f:b2:ca:6c:ae:e0:34:a3:
48:43:67:f2:32:13:26:3b:5d:16:b6:7a:f7:dc:fa:
7d:e8:10:3f:46:32:02:7c:dd:61:99:7c:a3:42:e5:
00:04:21:e4:55:1f:b0:3e:fa:ff:9a:6a:2a:30:32:
dd:66:23:c6:61:cf:5a:84:09:c2:1c:6a:f5:2b:40:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7F:81:32:B7:DB:16:1F:4E:3B:E0:75:65:55:84:5A:2C:9B:9D:27
X509v3 Authority Key Identifier:
keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/9F7C20921ADD11EC80226B61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.207.0/24
103.163.5.0/24
IPv6:
2001:df1:8700::/48
Signature Algorithm: sha256WithRSAEncryption
3c:e7:c7:49:c0:f5:e7:30:de:2b:aa:a1:8a:5c:fe:93:a3:57:
62:0d:d3:46:e7:0f:10:da:98:68:07:5a:d8:b0:b3:61:fb:63:
9c:17:b0:df:76:d8:bc:5e:c8:4a:d4:a1:0c:38:e5:36:9f:5c:
69:08:2b:fe:4d:81:f1:e2:76:a9:76:b1:ab:58:cb:db:d3:e8:
ef:9e:9a:e0:53:6c:5f:59:ad:35:97:86:15:a2:6b:97:18:b5:
f0:8a:bd:88:5a:69:a5:69:34:01:3b:4c:97:28:b4:cf:0b:fe:
a8:a1:d5:16:20:55:5e:98:28:71:19:a8:f0:c5:5f:70:21:7d:
86:60:75:94:f8:85:f1:80:8c:c8:e4:b8:78:9e:ab:fe:c5:a5:
38:72:fa:e9:bd:ba:bb:34:14:8f:4d:a8:57:d1:0f:52:f8:40:
bb:e0:56:97:86:a6:24:42:14:03:7e:72:5f:44:fa:a4:0f:89:
cc:c3:52:97:ec:28:8e:8a:06:15:cf:d6:58:99:23:fd:4b:82:
62:42:50:66:52:53:f8:5c:bd:1d:fd:4c:47:60:d5:62:24:15:
84:20:ac:a9:7d:94:08:b3:ec:4a:97:c4:11:76:2a:3e:ea:15:
80:31:aa:fa:2d:cb:a4:05:d6:6b:ed:90:5a:f5:49:b6:1c:67:
89:da:23:90
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgzRTcxMTAvBgNVBAUTKDMwRjJEQzAwMUJENjU4Q0QxNjNFMjM3NzFGNDE0NzY5
NzJFMEQxNEYwHhcNMjQwODEzMDEwMjQ2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJhYjBiNi02NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7elQampf1p1S8uJd8caxG3+9h+gfVmZo2kstw/uvDj8myTPhQfvrs4d/brZo
Iv8wvL/ucUn+yTTTNFBhnwKhIsGR+lqn8FC21SJCl8AvHkGSBf3qNlCfVgoHE0Ld
jTAJklVm0TIxggXE117tiDjoiGu8lKePQQE0kMZd/GnYTFwiqq80MeC+U9K2FZJv
3e1FpxPwLQHEGHutBAhYgSaWgx1ZQlYynxoEr+idhf9Y78z+ooYz+wmZIXh/L7LK
bK7gNKNIQ2fyMhMmO10Wtnr33Pp96BA/RjICfN1hmXyjQuUABCHkVR+wPvr/mmoq
MDLdZiPGYc9ahAnCHGr1K0BiaQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFPd/gTK3
2xYfTjvgdWVVhFosm50nMB8GA1UdIwQYMBaAFDDy3AAb1ljNFj4jdx9BR2ly4NFP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODNFNy83Mzk2MENDNDFB
REIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dNMFdQaU4zSDBGSGFYTGcw
VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01QTGNBQnZXV00wV1BpTjNIMEZIYVhMZzBVOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjgzRTcvNzM5NjBDQzQxQURCMTFFQzkzRDA2QzYwQzRGOUFFMDIvOUY3QzIwOTIx
QUREMTFFQzgwMjI2QjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBABnXs8DBABnowUwDwQCAAIwCQMHACABDfGHADANBgkqhkiG
9w0BAQsFAAOCAQEAPOfHScD15zDeK6qhilz+k6NXYg3TRucPENqYaAda2LCzYftj
nBew33bYvF7IStShDDjlNp9caQgr/k2B8eJ2qXaxq1jL29Po756a4FNsX1mtNZeG
FaJrlxi18Iq9iFpppWk0ATtMlyi0zwv+qKHVFiBVXpgocRmo8MVfcCF9hmB1lPiF
8YCMyOS4eJ6r/sWlOHL66b26uzQUj02oV9EPUvhAu+BWl4amJEIUA35yX0T6pA+J
zMNSl+wojooGFc/WWJkj/UuCYkJQZlJT+Fy9Hf1MR2DVYiQVhCCsqX2UCLPsSpfE
EXYqPuoVgDGq+i3LpAXWa+2QWvVJthxnidojkA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:21 2025 by rpki-client