Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/865246208A7311EE9A63E50AC4F9AE02.roa
File: 865246208A7311EE9A63E50AC4F9AE02.roa (raw, json)
Hash identifier: v9ZGdlOjZStV7I7ytsGRkV0jUz2dkwvsMI8HDzxGUnQ=
Subject key identifier: B7:7C:39:1F:E5:A4:06:68:D4:32:E2:B4:B2:E2:3E:8D:ED:5F:80:FB
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4552
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/865246208A7311EE9A63E50AC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:14 +0000
ROA not before: Thu 05 Sep 2024 03:32:14 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131421
IP address blocks: 103.17.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17746 (0x4552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:32:14 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9263e-c8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:a2:41:22:9d:92:87:6c:13:bf:24:2e:eb:
35:0c:45:b3:57:46:78:34:38:a4:fc:95:67:f9:be:
a1:b8:91:47:88:cb:db:d2:ea:95:aa:fa:c9:02:93:
f3:b6:b0:df:41:44:ed:b8:f0:19:c9:78:9a:38:8f:
5a:6a:83:3b:54:54:92:b0:83:62:76:48:3d:03:95:
80:2a:b2:8d:07:5e:57:29:3f:2c:57:a8:2f:39:a2:
fc:1f:c1:cd:98:3f:db:4a:e6:a4:ca:0e:16:24:c3:
49:97:e8:0a:98:27:99:78:4d:0f:9d:0f:20:54:4f:
a8:1e:6c:55:30:4a:0a:f0:5a:ee:89:75:f8:80:81:
9c:bc:f3:7b:81:85:56:50:3f:f0:12:eb:a6:02:84:
6a:99:75:90:0a:2b:a7:14:80:d2:d8:b8:a4:8b:86:
aa:64:1a:8f:25:3c:5c:ae:9a:d7:9e:49:ac:39:5a:
98:3b:20:f3:a6:e9:ed:b5:45:10:23:50:ce:b8:34:
0c:f6:eb:15:87:65:85:03:f6:ce:88:be:e9:82:ff:
cc:23:7a:3c:23:58:54:76:a2:2c:99:e6:0b:60:c5:
2a:6a:c4:85:34:2a:47:80:5e:03:f8:71:f0:06:de:
ef:87:7e:7f:e8:de:27:e3:e7:d0:45:8b:60:99:20:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7C:39:1F:E5:A4:06:68:D4:32:E2:B4:B2:E2:3E:8D:ED:5F:80:FB
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/865246208A7311EE9A63E50AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:b8:89:e0:85:62:d6:3f:17:73:f6:b9:e4:a7:1f:a8:64:ad:
b7:26:ef:23:c8:69:1b:96:81:ef:85:81:b3:96:60:d9:cc:70:
3f:66:5f:9e:c8:b9:fe:e2:87:79:75:04:4f:a1:3d:af:e2:91:
9c:af:ef:4a:fd:f4:0e:81:74:6c:42:65:7a:11:1f:f1:17:aa:
bb:61:05:23:66:e0:0b:ed:39:ad:e7:ba:e4:c7:48:00:5d:9b:
bd:53:b5:13:b5:65:8c:83:c8:d1:4a:52:33:64:49:94:c2:7b:
5e:18:79:d2:15:45:ee:2e:fc:46:39:07:2e:e5:0e:c7:48:c4:
a4:6c:7d:e4:29:82:9c:13:81:2d:c9:c4:02:74:8b:e1:b3:39:
07:f2:69:90:e2:0f:1b:0d:2e:68:69:b0:8c:89:0e:5a:a0:e8:
0b:91:01:f0:2d:61:43:41:05:9a:f6:75:68:ab:bc:f8:a7:6b:
74:58:4e:17:86:b0:d8:22:ea:ae:bd:d5:b4:9b:b8:01:c9:be:
7e:64:f4:f5:e1:7c:cd:90:13:51:90:a1:82:20:03:36:e0:fd:
ac:3f:40:48:76:64:7d:bb:55:64:23:23:8f:a0:6a:47:03:2a:
d2:76:f5:54:8c:a7:bd:2a:c8:2b:56:eb:79:83:2b:72:a5:c7:
be:48:e4:16
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICRVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjE0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjYzZS1jOGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8iiQSKdkodsE78kLus1DEWzV0Z4NDik/JVn+b6huJFHiMvb0uqVqvrJApPz
trDfQUTtuPAZyXiaOI9aaoM7VFSSsINidkg9A5WAKrKNB15XKT8sV6gvOaL8H8HN
mD/bSuakyg4WJMNJl+gKmCeZeE0PnQ8gVE+oHmxVMEoK8FruiXX4gIGcvPN7gYVW
UD/wEuumAoRqmXWQCiunFIDS2Liki4aqZBqPJTxcrprXnkmsOVqYOyDzpunttUUQ
I1DOuDQM9usVh2WFA/bOiL7pgv/MI3o8I1hUdqIsmeYLYMUqasSFNCpHgF4D+HHw
Bt7vh35/6N4n4+fQRYtgmSDlSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLd8OR/l
pAZo1DLitLLiPo3tX4D7MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODY1MjQ2MjA4
QTczMTFFRTlBNjNFNTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnEewwDQYJKoZIhvcNAQELBQADggEBAKO4ieCFYtY/F3P2
ueSnH6hkrbcm7yPIaRuWge+FgbOWYNnMcD9mX57Iuf7ih3l1BE+hPa/ikZyv70r9
9A6BdGxCZXoRH/EXqrthBSNm4AvtOa3nuuTHSABdm71TtRO1ZYyDyNFKUjNkSZTC
e14YedIVRe4u/EY5By7lDsdIxKRsfeQpgpwTgS3JxAJ0i+GzOQfyaZDiDxsNLmhp
sIyJDlqg6AuRAfAtYUNBBZr2dWirvPina3RYTheGsNgi6q691bSbuAHJvn5k9PXh
fM2QE1GQoYIgAzbg/aw/QEh2ZH27VWQjI4+gakcDKtJ29VSMp70qyCtW63mDK3Kl
x75I5BY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:47 2025 by rpki-client