Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F7D72D3E23E211EFA47D6C68C4F9AE02.roa
File: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (raw, json)
Hash identifier: e+M4adDsVVtiBfslPnOBJOSyjq+6gRCvAtKsdhjHrg8=
Subject key identifier: AF:9D:E0:1C:27:8D:4C:EB:B8:30:8F:67:B8:75:30:AB:49:10:F9:BA
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 0387
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F7D72D3E23E211EFA47D6C68C4F9AE02.roa
Signing time: Thu 05 Dec 2024 01:15:07 +0000
ROA not before: Thu 05 Dec 2024 01:15:07 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 135110
IP address blocks: 103.239.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Dec 5 01:15:07 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6750fe9b-9f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:13:af:b9:39:6a:cc:01:bf:5a:9f:ce:30:
8d:40:db:9b:a4:bf:b6:42:be:32:dc:05:6d:68:64:
a2:e4:37:84:42:09:0a:84:06:c6:b9:17:c6:48:ca:
87:6a:d8:19:b3:a2:46:19:07:53:66:84:6f:fa:e3:
9e:46:df:b9:cd:80:44:d8:88:f1:13:08:60:a1:eb:
d7:74:08:be:3b:7a:2f:9a:d8:93:da:31:33:ef:31:
fd:91:95:30:31:cd:67:49:da:d3:7a:68:05:5c:03:
7b:57:38:df:a4:1b:db:9c:62:9c:d6:d2:58:17:53:
ac:f2:8a:e6:9f:3d:e1:29:14:3b:ba:15:64:71:03:
04:dd:5e:de:8f:fd:ec:4e:de:da:5a:2c:43:32:04:
fd:7d:92:c9:a3:b0:a4:dc:d6:41:77:2b:18:9d:5e:
1c:b0:bb:fd:15:31:d4:1e:d5:23:3d:6b:ea:83:59:
6c:b8:93:9d:42:6d:66:c1:89:c4:48:5a:c9:e5:21:
ee:74:e7:74:4d:40:66:83:09:28:1d:3d:e7:8b:cf:
7b:f7:24:58:6b:0c:3a:5d:e5:ee:c4:3a:84:bf:19:
dd:96:14:cf:a4:5f:88:b8:03:b2:e6:29:a1:24:20:
0d:66:20:6e:ba:bf:28:03:b5:b6:07:cd:b9:b3:33:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:E0:1C:27:8D:4C:EB:B8:30:8F:67:B8:75:30:AB:49:10:F9:BA
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F7D72D3E23E211EFA47D6C68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.102.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ff:00:a8:6b:13:83:dc:ed:e5:19:bc:33:b1:54:f8:a4:d3:
ce:dd:47:ac:8c:4a:fd:0e:8c:ec:fa:21:ca:a8:e7:67:77:68:
49:fe:51:22:14:33:b5:e9:08:c7:3d:93:fe:ff:a4:a0:b2:b2:
30:27:8a:aa:2c:a7:4f:5b:1a:3d:ae:8b:b1:83:62:0f:cb:fb:
36:55:cc:35:aa:b1:8a:3f:2a:87:a4:99:81:67:98:d1:1c:5d:
f5:4b:be:4c:55:fc:8a:34:ae:7a:ea:1c:b9:49:d0:74:2e:70:
6a:74:5f:c5:0a:23:04:6c:21:22:63:7e:e5:22:e2:62:6e:b8:
9d:3d:81:5b:e3:5e:7a:4f:32:df:6b:e7:aa:82:2e:eb:f6:5c:
cd:18:ec:d8:c3:e0:9b:72:65:49:a9:08:3f:a7:c8:d1:81:cb:
ec:ed:77:a9:ec:75:eb:a1:42:e9:e3:3c:80:23:32:3b:10:89:
ea:21:7f:4f:ce:e7:51:7c:f3:56:7c:77:08:d2:8d:29:2b:01:
a4:1e:28:da:7f:fe:de:39:55:42:11:3f:08:29:3f:61:d9:bb:
3a:02:87:c1:27:67:ad:c9:9c:c0:40:1a:97:43:0a:32:2b:ee:
66:ca:e7:4d:95:21:e4:ad:f8:c2:51:8e:93:dd:5b:44:00:42:
79:69:8c:85
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE
MjYwQUE5NzgwHhcNMjQxMjA1MDExNTA3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUwZmU5Yi05ZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1TkTr7k5aswBv1qfzjCNQNubpL+2Qr4y3AVtaGSi5DeEQgkKhAbGuRfGSMqH
atgZs6JGGQdTZoRv+uOeRt+5zYBE2IjxEwhgoevXdAi+O3ovmtiT2jEz7zH9kZUw
Mc1nSdrTemgFXAN7VzjfpBvbnGKc1tJYF1Os8ormnz3hKRQ7uhVkcQME3V7ej/3s
Tt7aWixDMgT9fZLJo7Ck3NZBdysYnV4csLv9FTHUHtUjPWvqg1lsuJOdQm1mwYnE
SFrJ5SHudOd0TUBmgwkoHT3ni8979yRYaww6XeXuxDqEvxndlhTPpF+IuAOy5imh
JCANZiBuur8oA7W2B825szN4BwIDAQABo4IClTCCApEwHQYDVR0OBBYEFK+d4Bwn
jUzruDCPZ7h1MKtJEPm6MB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx
RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvRjdENzJEM0Uy
M0UyMTFFRkE0N0Q2QzY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn72YwDQYJKoZIhvcNAQELBQADggEBAID/AKhrE4Pc7eUZ
vDOxVPik087dR6yMSv0OjOz6Icqo52d3aEn+USIUM7XpCMc9k/7/pKCysjAniqos
p09bGj2ui7GDYg/L+zZVzDWqsYo/KoekmYFnmNEcXfVLvkxV/Io0rnrqHLlJ0HQu
cGp0X8UKIwRsISJjfuUi4mJuuJ09gVvjXnpPMt9r56qCLuv2XM0Y7NjD4JtyZUmp
CD+nyNGBy+ztd6nsdeuhQunjPIAjMjsQieohf0/O51F881Z8dwjSjSkrAaQeKNp/
/t45VUIRPwgpP2HZuzoCh8EnZ63JnMBAGpdDCjIr7mbK502VIeSt+MJRjpPdW0QA
QnlpjIU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:35 2025 by rpki-client