Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa
File: 80F75824FAAD11EDB0C98683C4F9AE02.roa (raw, json)
Hash identifier: Ir6jieXDo5WhcOUHhq3j9urxgu6n6xKvObh/fql9Ym0=
Subject key identifier: 9B:15:7F:DC:F8:36:8E:EE:4A:51:3E:37:B4:86:11:89:CB:3D:CE:1F
Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Certificate serial: B2
Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa
Signing time: Thu 25 Apr 2024 06:39:43 +0000
ROA not before: Thu 25 Apr 2024 06:39:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133929
IP address blocks: 103.91.156.0/22 maxlen: 24
123.253.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Validity
Not Before: Apr 25 06:39:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6629faaf-e1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:10:4b:ce:6c:fa:fd:fb:b5:78:b1:75:94:62:
0d:14:4c:31:26:51:7e:c2:45:b5:87:39:f7:98:48:
b2:c5:53:93:3b:2c:b2:0b:33:da:d3:c4:7c:3c:c3:
85:18:2c:be:c9:44:10:15:3e:8e:be:1a:dd:8a:59:
69:49:de:94:1d:47:77:c3:cd:c3:c1:39:d1:d6:87:
85:3a:c4:6d:93:d0:89:14:d4:fd:fc:a8:fa:39:e9:
31:49:90:6c:d5:22:48:16:2c:28:78:5a:20:8a:9f:
7e:74:15:35:e7:16:de:fd:0b:b9:4f:fb:9e:89:27:
41:d0:2e:1f:3d:89:00:c7:86:02:43:7b:20:43:28:
a6:12:10:ca:a4:0c:72:a7:b6:d6:75:a2:90:20:fc:
67:f1:4b:cf:0c:4e:10:bd:b4:76:a7:65:b5:75:4a:
f9:7a:1d:72:88:c1:8a:06:47:68:de:08:ea:b9:b8:
1d:3c:6a:43:e0:f2:b4:54:9a:8e:51:7a:54:d7:ed:
c2:40:07:2b:19:53:91:27:37:0c:73:d0:0d:21:07:
99:44:42:81:82:ad:91:23:70:eb:b1:24:f3:fb:e7:
75:39:5b:5c:e8:9b:d6:19:8a:67:3e:bc:d5:9c:4b:
6d:f7:ca:f0:f1:a0:8a:1e:65:a2:fe:77:67:5e:a8:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:15:7F:DC:F8:36:8E:EE:4A:51:3E:37:B4:86:11:89:CB:3D:CE:1F
X509v3 Authority Key Identifier:
keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/80F75824FAAD11EDB0C98683C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.156.0/22
123.253.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:9c:54:87:20:e5:65:84:8a:ed:d0:d6:9b:79:ab:ba:ea:8e:
c1:d0:db:22:a2:0e:0f:db:26:9d:49:7d:57:45:37:d5:f6:b9:
e6:fa:e4:87:86:e3:85:f2:1e:20:71:7c:76:da:89:b0:95:ff:
6e:fe:e3:82:0c:54:df:39:8e:49:64:b9:2f:af:e5:8a:e7:a4:
e7:32:59:48:17:02:15:75:92:eb:6b:6e:e8:13:c9:b3:32:23:
ef:1a:36:62:48:fa:a1:6f:d2:86:02:48:6e:66:b9:41:43:3e:
08:6d:ef:ec:d9:5a:26:48:46:8a:da:2d:ee:61:fb:9e:00:27:
9d:ba:2a:10:50:11:c0:e0:9a:16:70:ad:0c:59:42:6f:11:b4:
47:54:ef:2d:d8:6f:e3:b4:c2:0a:6c:18:e0:3a:34:9d:4c:6f:
bc:65:e3:68:a0:b8:69:4a:73:27:e1:de:71:57:ab:4d:4d:29:
2c:8e:50:a7:53:96:c2:09:e9:41:0c:5d:55:59:f2:82:de:33:
75:90:4e:d1:45:18:14:4b:e4:3d:66:42:04:20:f8:4c:a5:10:
95:29:c1:db:08:d1:39:16:48:68:3c:ff:df:fa:c8:85:40:79:
6e:d1:dd:0d:84:f6:1b:c0:b3:d2:e5:1b:1d:67:3c:54:1b:6f:
35:9d:00:56
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTIzQTkxMTAvBgNVBAUTKDVDMTdBRjJFMEFBRjQ5MENFQUE4NEUyQUFBNzE0ODNE
MDM5NUYxRTQwHhcNMjQwNDI1MDYzOTQzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjI5ZmFhZi1lMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4RBLzmz6/fu1eLF1lGINFEwxJlF+wkW1hzn3mEiyxVOTOyyyCzPa08R8PMOF
GCy+yUQQFT6OvhrdillpSd6UHUd3w83DwTnR1oeFOsRtk9CJFNT9/Kj6OekxSZBs
1SJIFiwoeFogip9+dBU15xbe/Qu5T/ueiSdB0C4fPYkAx4YCQ3sgQyimEhDKpAxy
p7bWdaKQIPxn8UvPDE4QvbR2p2W1dUr5eh1yiMGKBkdo3gjqubgdPGpD4PK0VJqO
UXpU1+3CQAcrGVORJzcMc9ANIQeZREKBgq2RI3DrsSTz++d1OVtc6JvWGYpnPrzV
nEtt98rw8aCKHmWi/ndnXqi3iwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJsVf9z4
No7uSlE+N7SGEYnLPc4fMB8GA1UdIwQYMBaAFFwXry4Kr0kM6qhOKqpxSD0DlfHk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNBOS9BNjM4NzY4NEZB
QTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNRenFxRTRxcW5GSVBRT1Y4
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hCZXZMZ3F2U1F6cXFFNHFxbkZJUFFPVjhlUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTIzQTkvQTYzODc2ODRGQUE1MTFFREIyQjI5NTdGQzRGOUFFMDIvODBGNzU4MjRG
QUFEMTFFREIwQzk4NjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnW5wDBAB7/S4wDQYJKoZIhvcNAQELBQADggEBALOcVIcg
5WWEiu3Q1pt5q7rqjsHQ2yKiDg/bJp1JfVdFN9X2ueb65IeG44XyHiBxfHbaibCV
/27+44IMVN85jklkuS+v5YrnpOcyWUgXAhV1kutrbugTybMyI+8aNmJI+qFv0oYC
SG5muUFDPght7+zZWiZIRoraLe5h+54AJ526KhBQEcDgmhZwrQxZQm8RtEdU7y3Y
b+O0wgpsGOA6NJ1Mb7xl42iguGlKcyfh3nFXq01NKSyOUKdTlsIJ6UEMXVVZ8oLe
M3WQTtFFGBRL5D1mQgQg+EylEJUpwdsI0TkWSGg8/9/6yIVAeW7R3Q2E9hvAs9Ll
Gx1nPFQbbzWdAFY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:09:14 2025 by rpki-client