Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/314597D64EEF11EF8BACFA30C4F9AE02.roa
File: 314597D64EEF11EF8BACFA30C4F9AE02.roa (raw, json)
Hash identifier: NfFMnt+VEyqSWVwOi+J918td9eREww3K9CdjnLDT82w=
Subject key identifier: F1:E5:EE:BB:D1:B3:AD:5E:82:B0:08:C8:A1:4E:88:93:03:9D:60:06
Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Certificate serial: 24
Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/314597D64EEF11EF8BACFA30C4F9AE02.roa
Signing time: Tue 01 Oct 2024 06:50:51 +0000
ROA not before: Tue 01 Oct 2024 06:50:50 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 141016
IP address blocks: 103.154.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Validity
Not Before: Oct 1 06:50:50 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fb9bca-7101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:ef:22:9f:17:85:28:22:e1:e7:1a:2a:fb:
7e:67:73:20:25:7d:01:7d:bd:04:2f:d8:d9:08:7d:
09:2e:75:03:cf:f3:9c:56:48:18:57:58:48:15:4a:
1e:d1:3a:f7:5e:19:e9:b5:3f:fa:d6:24:54:9f:31:
aa:73:85:ff:62:83:c9:12:cb:55:90:d4:68:00:98:
8c:13:bf:a3:9e:c6:b1:6a:0f:13:c7:82:6e:03:1c:
ff:b3:b2:76:7d:95:f5:3f:95:d2:cf:3a:6d:12:28:
5b:c3:93:05:df:01:77:31:9a:8b:6b:20:ee:56:0b:
92:c8:be:4d:bf:a7:6a:32:e0:93:37:7c:d2:7f:e4:
a1:1e:23:ce:82:12:42:71:80:fe:67:44:b0:28:48:
ef:75:4f:5e:10:aa:85:e7:df:0c:55:6c:8b:dd:87:
13:39:44:87:5f:81:3d:45:67:19:fa:22:b6:19:02:
08:de:f5:50:98:c0:75:72:29:2a:25:aa:24:07:f8:
89:7d:1d:f0:c3:7e:92:99:0c:34:8c:46:46:9e:54:
60:64:6f:32:89:1b:15:30:b3:49:68:94:16:38:af:
70:d4:92:24:84:c2:88:79:5b:9e:b8:1f:1c:5d:29:
ef:81:3b:e2:73:10:70:35:89:12:cd:70:92:bc:c6:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E5:EE:BB:D1:B3:AD:5E:82:B0:08:C8:A1:4E:88:93:03:9D:60:06
X509v3 Authority Key Identifier:
keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/314597D64EEF11EF8BACFA30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.250.0/24
Signature Algorithm: sha256WithRSAEncryption
09:92:56:6c:b8:15:75:8c:fe:cc:27:d3:52:85:5f:74:e1:c1:
fd:f9:a3:27:42:16:49:4d:24:02:a0:bb:3f:36:86:4f:09:57:
ee:56:6f:34:00:65:63:5e:ad:0f:27:05:ba:6d:13:2b:5d:1e:
36:0e:c6:a0:77:fd:4d:12:84:2b:6a:d2:e0:e0:d3:c9:97:90:
26:b8:8a:d1:da:fa:0d:a8:4d:89:44:d8:81:1e:1e:5e:6c:32:
de:d6:9b:58:7a:ad:0c:62:c4:a8:ec:cd:5a:40:fa:e4:43:d0:
6a:a7:66:40:55:46:a2:88:b8:ce:ad:18:d9:7c:4c:ed:90:0c:
3b:cd:33:fa:eb:8d:d2:13:d9:c2:3d:ed:c8:1e:d5:6f:c1:86:
af:46:4c:e3:33:12:1d:2a:5b:d9:a9:e7:93:3a:7b:17:f1:53:
bc:1f:8f:17:7b:fe:34:f8:f7:54:86:3a:3a:1b:70:a9:e7:6f:
fd:4f:49:93:b3:f5:93:6c:f7:0c:ba:23:e2:08:3a:c9:16:56:
c9:72:11:d3:47:09:b4:1c:9f:93:e0:67:35:85:cc:14:9b:9c:
80:78:4e:9b:e8:05:ff:af:44:4d:a1:cf:4f:f8:50:0f:b5:09:
d2:91:d0:38:f9:e8:34:ac:b0:44:48:ec:9c:a4:b5:ac:83:79:
72:a1:82:56
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MDMxRDExMC8GA1UEBRMoNjY5QkNBMEE5MERFNTgwMzkxQThFRTY0OUJFNEVGQkUz
NkNFODQxODAeFw0yNDEwMDEwNjUwNTBaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZmI5YmNhLTcxMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpYO8inxeFKCLh5xoq+35ncyAlfQF9vQQv2NkIfQkudQPP85xWSBhXWEgVSh7R
OvdeGem1P/rWJFSfMapzhf9ig8kSy1WQ1GgAmIwTv6OexrFqDxPHgm4DHP+zsnZ9
lfU/ldLPOm0SKFvDkwXfAXcxmotrIO5WC5LIvk2/p2oy4JM3fNJ/5KEeI86CEkJx
gP5nRLAoSO91T14QqoXn3wxVbIvdhxM5RIdfgT1FZxn6IrYZAgje9VCYwHVyKSol
qiQH+Il9HfDDfpKZDDSMRkaeVGBkbzKJGxUws0lolBY4r3DUkiSEwoh5W564Hxxd
Ke+BO+JzEHA1iRLNcJK8xvWLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU8eXuu9Gz
rV6CsAjIoU6IkwOdYAYwHwYDVR0jBBgwFoAUZpvKCpDeWAORqO5km+TvvjbOhBgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwMzFEL0VENDYzQkM2NEVF
RTExRUZCMUQzMzAzMEM0RjlBRTAyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hC
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWnB2S0NwRGVXQU9ScU81a20tVHZ2amJPaEJnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi8zMTQ1OTdENjRF
RUYxMUVGOEJBQ0ZBMzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGea+jANBgkqhkiG9w0BAQsFAAOCAQEACZJWbLgVdYz+zCfT
UoVfdOHB/fmjJ0IWSU0kAqC7PzaGTwlX7lZvNABlY16tDycFum0TK10eNg7GoHf9
TRKEK2rS4ODTyZeQJriK0dr6DahNiUTYgR4eXmwy3tabWHqtDGLEqOzNWkD65EPQ
aqdmQFVGooi4zq0Y2XxM7ZAMO80z+uuN0hPZwj3tyB7Vb8GGr0ZM4zMSHSpb2ann
kzp7F/FTvB+PF3v+NPj3VIY6Ohtwqedv/U9Jk7P1k2z3DLoj4gg6yRZWyXIR00cJ
tByfk+BnNYXMFJucgHhOm+gF/69ETaHPT/hQD7UJ0pHQOPnoNKywREjsnKS1rIN5
cqGCVg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:10:26 2025 by rpki-client