Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa
File: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (raw, json)
Hash identifier: Ofg177dT9U9TbFcWrgETTbW4rQYxs3ewgMOUkLe9Rug=
Subject key identifier: 56:62:5E:72:26:7A:69:57:A6:76:D8:7F:BA:66:55:38:B5:A2:51:F6
Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial: 0537
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa
Signing time: Sat 13 Jul 2024 01:14:56 +0000
ROA not before: Sat 13 Jul 2024 01:14:56 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132480
IP address blocks: 103.151.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1335 (0x537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Validity
Not Before: Jul 13 01:14:56 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6691d510-de90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:63:03:7d:99:51:ca:fd:0a:61:7c:0c:c0:82:
22:5b:39:70:8f:8e:0a:9f:58:14:3f:a5:07:4a:94:
fc:b5:ee:6b:3b:b6:96:34:1a:37:87:79:84:dc:3c:
8b:bb:3d:09:eb:b2:b1:1b:3f:4f:c1:ab:c4:2a:a0:
ab:92:1a:ea:ea:e2:6f:53:08:94:90:1b:e1:df:33:
ca:c3:6e:67:65:41:3f:0c:3a:27:19:32:97:1e:67:
cf:c2:b1:69:1d:09:fe:e9:35:4d:32:8c:d4:3a:c6:
1a:f5:f5:54:20:60:64:2b:e8:e8:d6:a4:83:ca:7e:
c1:ef:11:ad:4a:36:6c:13:65:7d:28:ad:b5:41:e5:
9c:b7:04:b4:47:51:ff:84:09:6c:93:1e:15:2b:ed:
85:68:9e:dc:2d:33:e2:5f:d5:15:95:92:15:1a:62:
50:2e:7d:a2:f2:da:04:41:12:93:0f:02:ff:2a:8f:
65:dd:df:8d:b2:f6:42:e9:69:b6:ef:e7:25:69:e4:
bd:23:e9:89:5b:ae:95:0e:45:25:e2:1b:c5:cb:f9:
16:c2:4f:55:4f:1b:71:33:f2:2d:8e:2b:fe:ea:39:
db:94:e4:cb:e8:1c:ad:85:c4:c8:a1:94:14:70:15:
2b:1c:df:d4:84:45:34:35:bd:08:6d:68:ba:ee:e9:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:62:5E:72:26:7A:69:57:A6:76:D8:7F:BA:66:55:38:B5:A2:51:F6
X509v3 Authority Key Identifier:
keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.42.0/24
Signature Algorithm: sha256WithRSAEncryption
60:0c:12:79:82:c3:b7:f4:c5:a2:78:49:81:ed:e8:56:95:3b:
b1:a9:cb:a9:6f:e2:92:1f:f4:1a:52:25:d8:70:d1:4c:83:7b:
65:a1:84:79:7d:38:0f:2d:08:c9:28:b3:a9:d6:8d:83:04:17:
0b:ba:26:b9:be:42:dd:52:3b:f0:da:e1:4c:2d:4c:9d:ea:8c:
3f:ce:ea:89:d4:61:a1:e4:bc:83:e7:b6:62:7d:52:1e:9f:79:
8b:e3:9a:95:ae:1c:69:15:af:85:97:da:a7:4d:12:45:8c:ad:
61:8f:14:e9:e2:dc:9f:b1:56:d5:4a:c2:9c:c3:d6:96:23:cd:
a7:15:43:57:ce:1d:32:4a:7f:16:86:16:00:67:1a:b0:18:eb:
e6:55:1a:f3:69:1f:08:0f:64:c6:24:31:16:be:78:94:38:ff:
2f:14:2a:86:e3:66:86:e1:8f:55:ee:db:41:42:be:4f:3c:b4:
44:07:4a:97:a2:cd:b1:dd:8a:c4:5a:9c:ec:ca:fc:a5:4f:86:
fb:9c:45:f0:7c:a6:e2:1c:2a:86:04:0d:73:88:6f:cd:1f:a3:
b9:1a:f8:d1:3e:1e:5d:55:04:72:2c:01:a3:77:b7:45:58:40:
7f:4a:fa:50:ea:7c:3b:15:a8:40:94:f8:44:41:91:bb:3d:b9:
85:6c:85:84
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2
NzQ0NDA2NTQwHhcNMjQwNzEzMDExNDU2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjkxZDUxMC1kZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7mMDfZlRyv0KYXwMwIIiWzlwj44Kn1gUP6UHSpT8te5rO7aWNBo3h3mE3DyL
uz0J67KxGz9PwavEKqCrkhrq6uJvUwiUkBvh3zPKw25nZUE/DDonGTKXHmfPwrFp
HQn+6TVNMozUOsYa9fVUIGBkK+jo1qSDyn7B7xGtSjZsE2V9KK21QeWctwS0R1H/
hAlskx4VK+2FaJ7cLTPiX9UVlZIVGmJQLn2i8toEQRKTDwL/Ko9l3d+NsvZC6Wm2
7+claeS9I+mJW66VDkUl4hvFy/kWwk9VTxtxM/Itjiv+6jnblOTL6BythcTIoZQU
cBUrHN/UhEU0Nb0IbWi67umhQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFZiXnIm
emlXpnbYf7pmVTi1olH2MB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1
NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODkyRUIvRkQwMDgxREVDNTY3MTFFQkFGRUE2MDJCQzRGOUFFMDIvRjREQzNDMkFD
NTkyMTFFQkFBOUM1QjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlyowDQYJKoZIhvcNAQELBQADggEBAGAMEnmCw7f0xaJ4
SYHt6FaVO7Gpy6lv4pIf9BpSJdhw0UyDe2WhhHl9OA8tCMkos6nWjYMEFwu6Jrm+
Qt1SO/Da4UwtTJ3qjD/O6onUYaHkvIPntmJ9Uh6feYvjmpWuHGkVr4WX2qdNEkWM
rWGPFOni3J+xVtVKwpzD1pYjzacVQ1fOHTJKfxaGFgBnGrAY6+ZVGvNpHwgPZMYk
MRa+eJQ4/y8UKobjZobhj1Xu20FCvk88tEQHSpeizbHdisRanOzK/KVPhvucRfB8
puIcKoYEDXOIb80fo7ka+NE+Hl1VBHIsAaN3t0VYQH9K+lDqfDsVqECU+ERBkbs9
uYVshYQ=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:36 2025 by rpki-client