Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa
File: 42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa (raw, json)
Hash identifier: nt/C5UqGWxuhs0rJfMTTRANch2B813Esmep9pWumhkU=
Subject key identifier: 78:9D:17:92:12:8F:B4:C7:B8:50:0A:26:6B:7A:80:E2:71:43:EB:AA
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4948
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa
Signing time: Thu 09 Jan 2025 03:53:18 +0000
ROA not before: Thu 09 Jan 2025 03:53:18 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131386
IP address blocks: 45.119.80.0/22 maxlen: 24
45.119.84.0/22 maxlen: 24
103.2.228.0/22 maxlen: 24
103.27.236.0/22 maxlen: 24
103.87.220.0/22 maxlen: 24
103.95.156.0/22 maxlen: 24
103.200.24.0/22 maxlen: 24
2403:bf40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18760 (0x4948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jan 9 03:53:18 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=677f482e-8bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ca:8a:e9:a2:70:27:3f:15:84:d8:45:1f:c6:
6a:ed:2e:92:cb:58:b2:1b:6b:78:22:a8:9c:4c:74:
c4:e6:fb:36:f6:83:51:6f:bc:fe:a2:52:f6:df:74:
07:06:9b:ec:1a:86:1d:4c:5a:18:3f:2f:17:a2:a4:
29:aa:0f:74:2f:7d:2b:a1:22:06:53:b8:ad:42:ca:
3e:4b:04:79:5b:c9:5c:00:5a:2f:fb:15:12:d6:e2:
92:cc:38:09:3d:db:87:b0:06:55:fb:a9:57:7b:12:
fd:87:ff:d3:a6:7b:52:71:33:7b:e7:fd:e2:ce:49:
89:4b:04:be:4e:0d:4f:5d:1b:f6:26:f9:41:c7:f8:
e1:02:c0:cb:c5:39:17:53:de:b0:ba:a8:92:4b:8f:
56:b0:24:f9:18:46:44:1a:94:83:7a:0d:14:6e:e9:
96:96:06:a0:07:b2:a1:6a:ca:2a:d8:a9:02:8b:88:
96:09:72:46:fc:26:43:9c:4f:58:52:c5:8b:e9:cf:
49:62:9e:0c:8d:8e:0a:a8:a0:83:4e:52:69:5b:0b:
13:ab:ba:46:f0:eb:d0:a0:8c:35:a1:56:69:aa:49:
a1:42:16:60:36:07:e2:9a:12:db:08:51:23:5f:27:
c1:37:25:2a:98:d3:75:78:13:3b:80:ec:c7:6f:d4:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9D:17:92:12:8F:B4:C7:B8:50:0A:26:6B:7A:80:E2:71:43:EB:AA
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.119.80.0/21
103.2.228.0/22
103.27.236.0/22
103.87.220.0/22
103.95.156.0/22
103.200.24.0/22
IPv6:
2403:bf40::/48
Signature Algorithm: sha256WithRSAEncryption
91:b7:9a:25:3b:6d:e5:aa:52:d8:c4:f0:af:f9:07:bc:ce:89:
46:29:46:ea:34:e6:1f:d1:e3:ce:de:82:88:8a:ff:ac:c8:8e:
48:89:ea:45:b6:be:98:f5:cf:a7:c5:e7:e2:ee:1e:10:1a:28:
fb:dd:a4:32:6c:2e:47:04:9d:b2:7a:78:2c:06:61:5e:fb:f8:
73:7a:8d:87:f4:6c:84:fe:47:ac:57:ba:4b:cc:13:d0:37:bb:
2e:f8:b8:84:53:fd:38:d5:0a:6b:16:b8:c8:8c:fe:a0:d2:66:
34:fe:4f:3e:fa:c7:cd:cc:51:c5:54:fb:13:0b:09:94:a4:6e:
53:21:56:6b:dd:f0:1b:03:93:4e:87:1d:38:e6:83:08:c1:1e:
e0:fb:b7:75:66:0d:2e:9e:0a:e9:b6:65:11:b9:74:f6:ec:fc:
c7:0b:ae:38:c5:c6:62:23:4f:e1:63:9f:26:f1:bf:53:5e:54:
45:0b:9b:a9:46:05:57:ab:fd:13:78:c6:9b:f1:00:99:ac:1c:
ce:9c:ea:33:6c:a3:fe:b5:03:d5:98:dd:7f:6d:6b:69:56:88:
9c:49:94:77:fb:58:7e:17:f3:00:4a:4f:81:e3:eb:18:4e:ee:
96:5a:6d:c3:20:67:11:50:e1:eb:0a:2c:30:93:2a:91:ce:22:
f9:68:8c:5f
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgICSUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwMTA5MDM1MzE4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdmNDgyZS04YmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5sqK6aJwJz8VhNhFH8Zq7S6Sy1iyG2t4IqicTHTE5vs29oNRb7z+olL233QH
BpvsGoYdTFoYPy8XoqQpqg90L30roSIGU7itQso+SwR5W8lcAFov+xUS1uKSzDgJ
PduHsAZV+6lXexL9h//TpntScTN75/3izkmJSwS+Tg1PXRv2JvlBx/jhAsDLxTkX
U96wuqiSS49WsCT5GEZEGpSDeg0UbumWlgagB7Khasoq2KkCi4iWCXJG/CZDnE9Y
UsWL6c9JYp4MjY4KqKCDTlJpWwsTq7pG8OvQoIw1oVZpqkmhQhZgNgfimhLbCFEj
XyfBNyUqmNN1eBM7gOzHb9TmcwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFHidF5IS
j7THuFAKJmt6gOJxQ+uqMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDJDRTJBRjRD
RTNEMTFFRkI2NEMyRDFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E
PzA9MCoEAgABMCQDBAMtd1ADBAJnAuQDBAJnG+wDBAJnV9wDBAJnX5wDBAJnyBgw
DwQCAAIwCQMHACQDv0AAADANBgkqhkiG9w0BAQsFAAOCAQEAkbeaJTtt5apS2MTw
r/kHvM6JRilG6jTmH9Hjzt6CiIr/rMiOSInqRba+mPXPp8Xn4u4eEBoo+92kMmwu
RwSdsnp4LAZhXvv4c3qNh/RshP5HrFe6S8wT0De7Lvi4hFP9ONUKaxa4yIz+oNJm
NP5PPvrHzcxRxVT7EwsJlKRuUyFWa93wGwOTTocdOOaDCMEe4Pu3dWYNLp4K6bZl
Ebl09uz8xwuuOMXGYiNP4WOfJvG/U15URQubqUYFV6v9E3jGm/EAmawczpzqM2yj
/rUD1Zjdf21raVaInEmUd/tYfhfzAEpPgePrGE7ullptwyBnEVDh6wosMJMqkc4i
+WiMXw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:45 2025 by rpki-client