Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/A82A33A6C0A711EE97A2E984C4F9AE02.roa
File: A82A33A6C0A711EE97A2E984C4F9AE02.roa (raw, json)
Hash identifier: CnZXtw3/4AqdJCTI5d8ujaryQpbefwk1oaJ074/WgPk=
Subject key identifier: 0B:31:75:BA:69:50:23:88:52:33:87:F1:04:A9:4C:90:F2:F7:78:03
Certificate issuer: /CN=A91A3B91/serialNumber=AD102ED0289DC4E4FADE70B34D7660CA0D2BBD2B
Certificate serial: 0463
Authority key identifier: AD:10:2E:D0:28:9D:C4:E4:FA:DE:70:B3:4D:76:60:CA:0D:2B:BD:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/A82A33A6C0A711EE97A2E984C4F9AE02.roa
Signing time: Fri 31 Jan 2025 00:44:29 +0000
ROA not before: Fri 31 Jan 2025 00:44:29 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 212806
IP address blocks: 103.175.234.0/23 maxlen: 23
103.175.234.0/24 maxlen: 24
103.175.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123 (0x463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3B91/serialNumber=AD102ED0289DC4E4FADE70B34D7660CA0D2BBD2B
Validity
Not Before: Jan 31 00:44:29 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679c1ced-76bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:fe:de:31:98:5f:ce:f0:4f:8a:61:49:69:
50:09:ce:c7:f8:a7:b1:87:f7:b3:93:07:61:f7:90:
23:82:cd:d5:30:0e:10:b2:64:99:e8:eb:2d:39:63:
d4:fb:44:5c:10:90:b9:b3:d8:e1:39:13:94:dc:8e:
0d:be:e9:3a:b0:96:59:e2:1b:fd:60:95:c3:36:0d:
5c:ef:8e:a8:7f:63:09:95:97:64:d7:c0:05:4b:30:
a2:36:91:e0:71:56:84:8c:fc:b4:89:58:2a:09:5e:
4c:1f:0e:96:a3:61:2d:97:20:bd:a9:ee:ad:9e:c9:
db:bc:9a:a7:b3:5e:43:fa:c5:e9:a7:e2:81:24:37:
26:5a:ff:6a:41:0d:76:c1:b2:b5:c1:0c:86:0f:84:
39:d6:ab:fc:4c:4f:9a:b4:29:ae:87:46:44:0e:ec:
2f:c3:24:cd:4c:8f:fb:1d:ed:53:6e:98:47:e0:e0:
6f:6b:0c:b9:9e:29:31:a9:51:09:ab:04:0f:cd:66:
93:9a:c7:4a:67:72:17:cd:20:96:9d:97:90:c5:a3:
20:e4:d4:4c:32:26:80:67:d7:81:d7:a2:d1:12:76:
14:5c:85:b7:67:16:6f:5a:23:5d:a7:8c:ab:e0:69:
7d:3a:84:b1:e8:16:e9:f1:8a:d6:ac:e6:02:42:22:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:75:BA:69:50:23:88:52:33:87:F1:04:A9:4C:90:F2:F7:78:03
X509v3 Authority Key Identifier:
keyid:AD:10:2E:D0:28:9D:C4:E4:FA:DE:70:B3:4D:76:60:CA:0D:2B:BD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/rRAu0CidxOT63nCzTXZgyg0rvSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRAu0CidxOT63nCzTXZgyg0rvSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3B91/A365336E3E2411EC9B55E152C4F9AE02/A82A33A6C0A711EE97A2E984C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.234.0/23
Signature Algorithm: sha256WithRSAEncryption
33:97:4f:c9:82:2e:56:ff:a4:af:b1:1b:a3:3d:b0:82:7c:64:
35:d4:1c:d3:cb:00:82:4f:48:a2:cb:5e:55:5d:65:f1:31:27:
c1:08:63:2c:04:b6:b9:33:7d:a3:14:ab:73:23:4f:23:9d:32:
81:81:42:4d:4d:41:89:96:7d:7e:d1:5f:95:1c:6f:a7:c3:fb:
54:62:62:47:03:73:94:70:e6:ed:59:55:fb:f9:d2:22:a1:10:
21:3b:dc:76:85:9f:4f:d7:01:91:8c:65:76:09:2b:a4:76:85:
f7:a1:9b:71:36:be:25:1c:19:19:bd:ce:dc:4c:7e:9b:b0:91:
cd:4a:ec:39:ed:10:95:d8:2f:d6:ee:d9:47:ce:9a:3b:40:a3:
1d:16:fe:9a:46:5f:58:87:9b:e2:29:d2:1e:48:85:f8:c9:fd:
c5:c3:6f:53:16:04:ee:16:b8:12:35:de:e0:04:9f:aa:cd:06:
0d:3d:ea:c0:d5:67:d6:7d:7b:32:5a:97:62:21:68:3b:ac:90:
57:1e:1d:5e:95:07:04:ef:4e:e0:20:4a:86:da:5e:2e:e1:5a:
8a:d1:90:dc:13:c8:0a:4c:01:b4:32:5d:29:36:fa:ce:38:37:
87:84:5f:c5:b1:26:54:23:42:8d:5c:5e:1f:6f:54:df:bd:3b:
b0:cd:fd:51
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNCOTExMTAvBgNVBAUTKEFEMTAyRUQwMjg5REM0RTRGQURFNzBCMzRENzY2MENB
MEQyQkJEMkIwHhcNMjUwMTMxMDA0NDI5WhcNMjUwNjAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzljMWNlZC03NmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZb+3jGYX87wT4phSWlQCc7H+Kexh/ezkwdh95Ajgs3VMA4QsmSZ6OstOWPU
+0RcEJC5s9jhOROU3I4Nvuk6sJZZ4hv9YJXDNg1c746of2MJlZdk18AFSzCiNpHg
cVaEjPy0iVgqCV5MHw6Wo2EtlyC9qe6tnsnbvJqns15D+sXpp+KBJDcmWv9qQQ12
wbK1wQyGD4Q51qv8TE+atCmuh0ZEDuwvwyTNTI/7He1TbphH4OBvawy5nikxqVEJ
qwQPzWaTmsdKZ3IXzSCWnZeQxaMg5NRMMiaAZ9eB16LREnYUXIW3ZxZvWiNdp4yr
4Gl9OoSx6Bbp8YrWrOYCQiJwJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAsxdbpp
UCOIUjOH8QSpTJDy93gDMB8GA1UdIwQYMBaAFK0QLtAoncTk+t5ws012YMoNK70r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0I5MS9BMzY1MzM2RTNF
MjQxMUVDOUI1NUUxNTJDNEY5QUUwMi9yUkF1MENpZHhPVDYzbkN6VFhaZ3lnMHJ2
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JSQXUwQ2lkeE9UNjNuQ3pUWFpneWcwcnZTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTNCOTEvQTM2NTMzNkUzRTI0MTFFQzlCNTVFMTUyQzRGOUFFMDIvQTgyQTMzQTZD
MEE3MTFFRTk3QTJFOTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnr+owDQYJKoZIhvcNAQELBQADggEBADOXT8mCLlb/pK+x
G6M9sIJ8ZDXUHNPLAIJPSKLLXlVdZfExJ8EIYywEtrkzfaMUq3MjTyOdMoGBQk1N
QYmWfX7RX5Ucb6fD+1RiYkcDc5Rw5u1ZVfv50iKhECE73HaFn0/XAZGMZXYJK6R2
hfehm3E2viUcGRm9ztxMfpuwkc1K7DntEJXYL9bu2UfOmjtAox0W/ppGX1iHm+Ip
0h5IhfjJ/cXDb1MWBO4WuBI13uAEn6rNBg096sDVZ9Z9ezJal2IhaDuskFceHV6V
BwTvTuAgSobaXi7hWorRkNwTyApMAbQyXSk2+s44N4eEX8WxJlQjQo1cXh9vVN+9
O7DN/VE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:23:53 2025 by rpki-client