Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa
File: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (raw, json)
Hash identifier: tLChoqAT+qMzYdiOem/hyADnIcDAlpuqVUc6loXrSu8=
Subject key identifier: 8F:43:0F:DD:90:26:7C:4B:21:EA:E2:DD:D3:1B:21:6B:9C:1B:66:B1
Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Certificate serial: 0379
Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa
Signing time: Wed 25 Dec 2024 00:43:26 +0000
ROA not before: Wed 25 Dec 2024 00:43:26 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 132584
IP address blocks: 103.142.38.0/24 maxlen: 24
103.176.216.0/24 maxlen: 24
103.176.217.0/24 maxlen: 24
203.56.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889 (0x379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Validity
Not Before: Dec 25 00:43:26 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676b552e-2073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:9f:b3:6c:e3:66:71:2d:43:3f:ee:51:1d:
01:59:74:37:0c:2a:47:72:c4:58:44:ad:6e:60:40:
29:d6:04:ec:a7:80:08:a8:67:01:9f:2f:46:f2:08:
9d:a4:cf:28:65:ce:75:6a:fe:47:a3:ea:ca:8f:ad:
bb:4d:b0:82:64:f4:97:59:27:f8:bc:6d:76:aa:35:
b5:5e:f1:26:b7:96:73:e9:d3:4c:21:b6:ca:f8:71:
9c:6a:8c:cd:af:2e:df:3f:43:e2:ad:04:e2:5a:76:
93:2c:4c:11:32:45:03:10:14:03:ac:fd:7e:fe:13:
71:d8:f7:f2:3f:0b:ec:3e:1b:9f:d8:db:61:0a:13:
35:87:db:cb:0e:b6:cd:10:1e:35:9f:ad:f4:0d:36:
da:ab:03:1c:2f:ea:f5:f7:94:ba:eb:0b:d4:dc:fe:
86:0b:7e:e1:ef:6a:f8:d0:18:fa:bd:e6:70:62:72:
0a:22:0d:6f:00:7b:19:5c:e0:db:60:ff:61:e2:b0:
4a:0f:62:8e:6c:87:be:f4:9a:4a:ee:04:51:d0:2c:
f1:83:58:5b:72:ff:01:de:fe:7d:2d:a6:d3:10:e4:
c2:97:95:78:a3:15:b0:c4:b2:32:78:42:f5:04:7b:
b4:f8:08:06:ab:ae:6e:90:e9:14:2f:0f:d8:21:ad:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:43:0F:DD:90:26:7C:4B:21:EA:E2:DD:D3:1B:21:6B:9C:1B:66:B1
X509v3 Authority Key Identifier:
keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.38.0/24
103.176.216.0/23
203.56.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8a:8c:33:a3:c0:9e:a4:47:9a:c5:ab:55:d1:23:c8:cb:90:
6f:8c:9c:7a:47:d5:78:53:88:c5:5f:ff:a3:15:03:62:e6:26:
f4:fc:1a:05:01:16:c0:b7:9f:4f:82:45:7f:4d:bd:c3:b7:ca:
cf:ff:fc:70:e2:2c:c4:12:59:2b:ca:2d:a8:f1:f6:98:d5:09:
00:c7:40:5d:cc:00:b3:10:83:f5:5a:e5:15:18:b6:6b:24:44:
3e:20:3d:e6:98:76:b8:5a:d6:ff:d1:e3:9a:c2:43:aa:82:3f:
ec:26:d2:e5:c2:f1:36:ba:e4:8a:ed:2f:7a:57:5f:03:87:68:
4d:85:0f:f6:40:16:4c:11:74:85:01:d4:f5:67:96:29:31:04:
a8:c1:10:ae:0c:0d:b9:f4:51:db:1b:58:50:72:5b:63:ff:29:
e0:37:0f:13:81:3a:4f:4e:d7:6d:8f:5d:19:94:f0:ee:f4:30:
47:a8:57:b1:3c:a1:ca:78:1d:6b:87:e6:ea:65:c1:42:3b:75:
f2:1b:18:88:0a:40:60:63:34:e9:d9:48:5c:a2:9b:f7:fe:4b:
a5:84:fa:9e:02:53:c3:20:39:f7:58:90:69:32:3c:ab:b6:50:
1d:50:12:e6:25:28:2d:bc:29:73:50:2b:ee:1d:21:66:d1:21:
d0:c3:58:f1
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB
MUE2RkVBM0EwHhcNMjQxMjI1MDA0MzI2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzZiNTUyZS0yMDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArgqfs2zjZnEtQz/uUR0BWXQ3DCpHcsRYRK1uYEAp1gTsp4AIqGcBny9G8gid
pM8oZc51av5Ho+rKj627TbCCZPSXWSf4vG12qjW1XvEmt5Zz6dNMIbbK+HGcaozN
ry7fP0PirQTiWnaTLEwRMkUDEBQDrP1+/hNx2PfyPwvsPhuf2NthChM1h9vLDrbN
EB41n630DTbaqwMcL+r195S66wvU3P6GC37h72r40Bj6veZwYnIKIg1vAHsZXODb
YP9h4rBKD2KObIe+9JpK7gRR0Czxg1hbcv8B3v59LabTEOTCl5V4oxWwxLIyeEL1
BHu0+AgGq65ukOkULw/YIa0TsQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFI9DD92Q
JnxLIeri3dMbIWucG2axMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF
NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjg5QTIvRkI1MkY2NEU4RTYzMTFFQzlFMDE1RDZEQzRGOUFFMDIvOTdFOEFDRDY4
RTY2MTFFQzlFQkU2MjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBABnjiYDBAFnsNgDBADLOFAwDQYJKoZIhvcNAQELBQADggEB
AKaKjDOjwJ6kR5rFq1XRI8jLkG+MnHpH1XhTiMVf/6MVA2LmJvT8GgUBFsC3n0+C
RX9NvcO3ys///HDiLMQSWSvKLajx9pjVCQDHQF3MALMQg/Va5RUYtmskRD4gPeaY
drha1v/R45rCQ6qCP+wm0uXC8Ta65IrtL3pXXwOHaE2FD/ZAFkwRdIUB1PVnlikx
BKjBEK4MDbn0UdsbWFByW2P/KeA3DxOBOk9O122PXRmU8O70MEeoV7E8ocp4HWuH
5uplwUI7dfIbGIgKQGBjNOnZSFyim/f+S6WE+p4CU8MgOfdYkGkyPKu2UB1QEuYl
KC28KXNQK+4dIWbRIdDDWPE=
-----END CERTIFICATE-----
Generated at Fri May 2 02:08:24 2025 by rpki-client