Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C611EE6CBCF711EEA90A1F1DC4F9AE02.roa
File: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (raw, json)
Hash identifier: i9dMAMF25KUvras5KvDG1QM1xBWeYt+C+ALZFoy+wTs=
Subject key identifier: F2:11:7F:8A:F5:B6:33:02:D0:63:AC:3C:49:AC:65:23:93:3A:9C:EC
Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial: 04FD
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C611EE6CBCF711EEA90A1F1DC4F9AE02.roa
Signing time: Wed 06 Nov 2024 23:22:11 +0000
ROA not before: Wed 06 Nov 2024 23:22:11 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 203963
IP address blocks: 103.31.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1277 (0x4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Validity
Not Before: Nov 6 23:22:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=672bfa23-c6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:79:2d:99:40:d7:73:b5:0d:3e:4f:c3:0a:
5f:6a:1b:6b:16:d8:e7:07:54:65:de:37:14:2e:39:
dd:6c:a2:80:65:ec:17:34:9a:4e:7e:f1:71:8a:09:
11:f9:f1:fa:04:5a:b3:15:60:e8:ff:21:8c:cb:e9:
2c:ac:c9:24:38:3e:f9:4d:6b:45:64:4b:b0:bb:50:
a8:ab:4b:fd:c0:5c:e9:12:10:6c:80:fe:03:44:ec:
ac:7e:37:bb:2b:6f:67:79:b1:2e:9a:0b:d2:ed:05:
44:26:6d:b2:76:a9:9c:95:93:32:87:2c:d4:fa:7e:
ae:36:30:98:db:90:05:2e:0b:05:6a:ea:e4:7b:94:
b9:6e:81:94:e5:0e:e9:a6:36:bb:f1:f8:88:42:d9:
1b:0e:59:3d:35:b9:c4:64:d7:62:b6:47:f6:e3:67:
93:5d:65:33:62:2a:b1:1d:60:62:da:f9:8f:b2:ac:
00:85:f3:4d:7d:37:42:dd:dc:6f:29:68:fd:f4:5f:
30:ec:1e:36:e0:06:05:51:9c:82:b9:82:e2:7a:d4:
d8:dc:88:86:77:5d:aa:0e:07:42:b7:94:c7:51:e4:
06:f4:3c:e4:ac:bd:01:26:e3:65:3f:12:95:63:0c:
73:38:20:77:d0:80:b6:ca:d5:d8:f3:05:15:7d:25:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:11:7F:8A:F5:B6:33:02:D0:63:AC:3C:49:AC:65:23:93:3A:9C:EC
X509v3 Authority Key Identifier:
keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C611EE6CBCF711EEA90A1F1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2b:30:d8:0a:f3:58:5e:a0:30:76:64:7b:ab:74:98:da:18:
8e:72:e9:8a:ee:5a:81:f4:25:2d:a4:c1:b5:d3:68:b1:09:af:
02:a0:35:92:12:7b:58:d0:11:e0:37:32:f7:83:2d:5f:63:80:
af:36:c6:ef:c3:ab:81:2f:d4:6f:20:f2:7e:af:dc:fe:2c:f3:
3c:3b:e0:73:5d:d3:25:81:ce:84:ed:be:7d:4c:1f:c6:56:a0:
af:e9:40:e8:c0:e1:1c:0b:c8:eb:54:da:4b:d2:24:13:5b:26:
72:2a:c0:0f:84:89:60:77:c5:b0:38:da:8d:07:db:8e:f2:3c:
73:b0:97:52:43:1e:59:d5:1c:b3:40:3f:9d:cd:37:1b:57:4b:
57:5b:7d:8d:fe:ad:e6:60:28:70:8c:95:a7:f9:ac:15:c9:ff:
8a:c5:e3:fe:1a:b0:cb:a7:80:80:fc:95:53:8a:97:40:cf:fc:
93:96:a8:74:5a:ab:52:8a:a4:c6:a0:61:ac:e4:03:2c:18:8a:
25:00:f8:b1:74:0a:f7:74:a2:f6:ef:95:b9:d6:2e:52:c7:2d:
9e:31:80:1a:ea:63:00:88:30:13:95:23:a3:37:c1:23:f0:24:
0f:87:3a:9d:de:66:a3:78:02:31:0d:f7:18:ad:36:78:61:e6:
cd:93:43:92
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4
RjQ0RkI4ODEwHhcNMjQxMTA2MjMyMjExWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzJiZmEyMy1jNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcB5LZlA13O1DT5PwwpfahtrFtjnB1Rl3jcULjndbKKAZewXNJpOfvFxigkR
+fH6BFqzFWDo/yGMy+ksrMkkOD75TWtFZEuwu1Coq0v9wFzpEhBsgP4DROysfje7
K29nebEumgvS7QVEJm2ydqmclZMyhyzU+n6uNjCY25AFLgsFaurke5S5boGU5Q7p
pja78fiIQtkbDlk9NbnEZNditkf242eTXWUzYiqxHWBi2vmPsqwAhfNNfTdC3dxv
KWj99F8w7B424AYFUZyCuYLietTY3IiGd12qDgdCt5THUeQG9DzkrL0BJuNlPxKV
YwxzOCB30IC2ytXY8wUVfSURIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPIRf4r1
tjMC0GOsPEmsZSOTOpzsMB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4
RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0U1REMvQkJFMkI1MDJGOEVCMTFFQkJFRjVBQTM3QzRGOUFFMDIvQzYxMUVFNkNC
Q0Y3MTFFRUE5MEExRjFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnH9EwDQYJKoZIhvcNAQELBQADggEBACorMNgK81heoDB2
ZHurdJjaGI5y6YruWoH0JS2kwbXTaLEJrwKgNZISe1jQEeA3MveDLV9jgK82xu/D
q4Ev1G8g8n6v3P4s8zw74HNd0yWBzoTtvn1MH8ZWoK/pQOjA4RwLyOtU2kvSJBNb
JnIqwA+EiWB3xbA42o0H247yPHOwl1JDHlnVHLNAP53NNxtXS1dbfY3+reZgKHCM
laf5rBXJ/4rF4/4asMungID8lVOKl0DP/JOWqHRaq1KKpMagYazkAywYiiUA+LF0
Cvd0ovbvlbnWLlLHLZ4xgBrqYwCIMBOVI6M3wSPwJA+HOp3eZqN4AjEN9xitNnhh
5s2TQ5I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:44 2025 by rpki-client