Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/996294F0F6F811ECB7D4B564C4F9AE02.roa
File: 996294F0F6F811ECB7D4B564C4F9AE02.roa (raw, json)
Hash identifier: mTvmOQDPJVukrnSSNdcqtgbN5ePeF9G67UQ1C4nmwgQ=
Subject key identifier: 6E:C1:75:4D:6B:BC:4E:22:A0:DE:A5:F7:0E:AF:F8:87:28:FA:A5:7B
Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Certificate serial: 0BEC
Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/996294F0F6F811ECB7D4B564C4F9AE02.roa
Signing time: Thu 30 Jan 2025 19:07:57 +0000
ROA not before: Thu 30 Jan 2025 19:07:57 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 136027
IP address blocks: 103.80.70.0/23 maxlen: 23
103.80.70.0/24 maxlen: 24
103.80.71.0/24 maxlen: 24
103.107.123.0/24 maxlen: 24
103.121.175.0/24 maxlen: 24
2001:df6:de00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Validity
Not Before: Jan 30 19:07:57 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679bce0d-7804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:5d:b2:29:32:ba:3b:2f:0e:61:96:ce:0f:
82:6e:00:32:f7:24:74:33:05:e9:f0:17:6b:89:c2:
8e:71:5c:94:08:10:1b:a9:a0:e4:5f:c0:ae:36:4c:
a7:31:c5:e1:cf:a3:b2:7d:3c:f7:d2:dc:b6:e8:1e:
5f:0d:3e:a6:3b:fd:69:f7:e9:80:79:d6:84:7d:a1:
e9:98:2a:1d:93:1c:01:bb:a8:73:64:0d:ae:8a:be:
dc:00:07:dd:9b:62:56:47:77:6b:bf:db:6a:a6:c0:
1c:64:79:d8:fc:f1:92:d3:2f:e0:f3:6d:dc:e6:b8:
39:c8:09:47:d2:57:e0:fc:0c:15:46:fc:d7:48:43:
97:2c:19:1f:ff:6e:93:bc:50:2a:1b:1e:a6:0c:57:
74:f9:95:3e:93:f2:3a:87:9d:2b:7e:75:57:bd:00:
e4:cc:be:99:fb:a5:bd:b9:20:0c:f9:39:97:5c:2c:
1b:13:64:d2:62:29:12:d1:72:10:b0:6c:0a:d1:20:
f6:9b:10:eb:f8:5d:85:5a:29:b5:7c:fe:43:05:b2:
2b:29:3c:ba:36:d8:5d:a1:94:b6:71:40:3b:af:af:
3b:93:ec:4d:4c:bb:c3:4e:cf:16:aa:de:06:35:ee:
f4:78:26:74:a6:3f:72:1c:d2:eb:e3:4c:7e:ea:e8:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:75:4D:6B:BC:4E:22:A0:DE:A5:F7:0E:AF:F8:87:28:FA:A5:7B
X509v3 Authority Key Identifier:
keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/996294F0F6F811ECB7D4B564C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.70.0/23
103.107.123.0/24
103.121.175.0/24
IPv6:
2001:df6:de00::/48
Signature Algorithm: sha256WithRSAEncryption
83:79:e0:53:02:90:ff:a7:be:50:c0:02:b9:c5:e3:7d:c3:c6:
c2:62:61:8a:ef:2b:1e:87:5e:a1:c4:4a:7f:8a:a0:46:41:32:
1f:f0:0b:de:3f:a6:e0:f4:95:e8:d0:98:aa:bb:34:37:ff:c4:
23:f5:01:cc:ec:21:fb:e6:62:0f:72:43:e3:c8:5c:58:ab:e6:
39:a8:b3:a1:00:b7:ff:cc:93:ca:cf:58:d7:3a:50:a2:4a:af:
c1:f8:98:8f:67:03:87:a9:8c:36:0a:f8:d4:f1:f2:c4:f7:d3:
a5:3c:83:5d:18:92:94:76:a3:be:d6:7f:e4:02:6a:4f:15:d5:
23:96:c8:3a:ce:a2:64:bd:64:eb:54:fe:4a:8a:d2:2b:be:64:
18:6f:fb:dc:16:c2:af:4b:a9:6e:04:18:25:fa:d6:c1:ed:7a:
b5:d5:40:04:46:a4:60:a4:b9:19:c8:4b:b8:83:c3:63:01:9b:
50:8d:0f:95:ce:24:b0:93:a3:d7:fd:75:f2:75:79:24:9c:2e:
ec:a9:d4:75:b2:df:ec:1e:67:2e:8e:7a:f6:e2:ea:67:99:23:
54:4c:5e:84:08:6b:f1:b0:1b:48:0c:30:81:b9:57:4f:6e:9c:
7a:e2:38:07:76:b4:8d:00:6f:8b:6d:23:44:36:6e:bc:44:8b:
10:bf:60:19
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk3RjAxMTAvBgNVBAUTKDhDNjZGOUMwRTY2OEFDOTA4MURGNzEwRDYwNDJERjQ3
NDkwQjBBQjkwHhcNMjUwMTMwMTkwNzU3WhcNMjUwNjAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzliY2UwZC03ODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw+ddsikyujsvDmGWzg+CbgAy9yR0MwXp8BdricKOcVyUCBAbqaDkX8CuNkyn
McXhz6OyfTz30ty26B5fDT6mO/1p9+mAedaEfaHpmCodkxwBu6hzZA2uir7cAAfd
m2JWR3drv9tqpsAcZHnY/PGS0y/g823c5rg5yAlH0lfg/AwVRvzXSEOXLBkf/26T
vFAqGx6mDFd0+ZU+k/I6h50rfnVXvQDkzL6Z+6W9uSAM+TmXXCwbE2TSYikS0XIQ
sGwK0SD2mxDr+F2FWim1fP5DBbIrKTy6NthdoZS2cUA7r687k+xNTLvDTs8Wqt4G
Ne70eCZ0pj9yHNLr40x+6uhMXwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFG7BdU1r
vE4ioN6l9w6v+Ico+qV7MB8GA1UdIwQYMBaAFIxm+cDmaKyQgd9xDWBC30dJCwq5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdGMC9BNjYzMTlGMDEy
RDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JKQ0IzM0VOWUVMZlIwa0xD
cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pHYjV3T1pvckpDQjMzRU5ZRUxmUjBrTENyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTk3RjAvQTY2MzE5RjAxMkQ5MTFFQUExNkE0QjYxQzRGOUFFMDIvOTk2Mjk0RjBG
NkY4MTFFQ0I3RDRCNTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E
LTArMBgEAgABMBIDBAFnUEYDBABna3sDBABnea8wDwQCAAIwCQMHACABDfbeADAN
BgkqhkiG9w0BAQsFAAOCAQEAg3ngUwKQ/6e+UMACucXjfcPGwmJhiu8rHodeocRK
f4qgRkEyH/AL3j+m4PSV6NCYqrs0N//EI/UBzOwh++ZiD3JD48hcWKvmOaizoQC3
/8yTys9Y1zpQokqvwfiYj2cDh6mMNgr41PHyxPfTpTyDXRiSlHajvtZ/5AJqTxXV
I5bIOs6iZL1k61T+SorSK75kGG/73BbCr0upbgQYJfrWwe16tdVABEakYKS5GchL
uIPDYwGbUI0Plc4ksJOj1/118nV5JJwu7KnUdbLf7B5nLo569uLqZ5kjVExehAhr
8bAbSAwwgblXT26ceuI4B3a0jQBvi20jRDZuvESLEL9gGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:05 2025 by rpki-client