Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/B3F935160E0F11ED89E89675C4F9AE02.roa
File: B3F935160E0F11ED89E89675C4F9AE02.roa (raw, json)
Hash identifier: FlIBDcsCI6hEzE/Hsl8Oo4AgNaxmcJbVTdpEo3OVvJM=
Subject key identifier: 2D:98:78:F9:CF:ED:59:0B:0B:34:EB:D4:FE:DA:54:B7:B4:10:76:7E
Certificate issuer: /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
Certificate serial: 01F8
Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/B3F935160E0F11ED89E89675C4F9AE02.roa
Signing time: Thu 19 Sep 2024 02:16:04 +0000
ROA not before: Thu 19 Sep 2024 02:16:04 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 14618
IP address blocks: 103.23.68.0/23 maxlen: 23
2400:9920::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0
Validity
Not Before: Sep 19 02:16:04 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66eb8964-4223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:4f:9f:9b:0b:0d:cb:5c:90:b5:c4:2d:d7:
f0:4f:26:8d:a0:91:b7:12:f5:0d:35:97:4e:18:46:
de:71:c5:94:78:55:a3:3e:b2:5e:7c:2a:e1:b4:16:
12:19:dc:01:b8:8c:d4:d8:11:46:84:a6:19:f5:a9:
71:d5:34:2b:c7:21:c2:fb:85:7d:a1:a4:3a:02:3a:
aa:17:2b:30:de:63:c6:26:50:2f:e4:0f:bf:29:d1:
dc:4a:43:e4:de:3b:02:bb:9e:21:24:80:31:07:9b:
ed:ae:1a:14:4b:40:f4:fb:98:93:cb:84:51:39:88:
27:3d:94:ea:41:77:6b:aa:60:2a:c0:a0:ba:af:01:
48:7c:22:30:8f:04:ba:ee:db:15:92:e1:d7:f1:63:
9e:60:a4:3a:fa:94:5b:68:a2:e8:40:81:9d:bf:2b:
a0:81:b8:ec:0c:b3:90:23:59:23:ce:09:62:9a:27:
6c:91:63:d6:ac:b2:c9:87:30:ac:29:83:88:e3:f6:
ee:0f:06:e9:d8:d1:b2:f7:29:1a:18:d2:2e:1d:00:
58:f2:be:8f:30:0d:5f:ec:56:d6:5d:38:ed:c9:7d:
7f:37:14:36:33:79:95:d5:84:86:ba:e7:70:a0:02:
15:9a:1e:36:ba:74:36:bd:23:ba:54:25:91:79:fd:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:78:F9:CF:ED:59:0B:0B:34:EB:D4:FE:DA:54:B7:B4:10:76:7E
X509v3 Authority Key Identifier:
keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/B3F935160E0F11ED89E89675C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.68.0/23
IPv6:
2400:9920::/32
Signature Algorithm: sha256WithRSAEncryption
8a:8f:04:dd:8b:01:c5:41:a9:4b:30:db:c6:77:01:a9:86:a1:
ea:84:d4:aa:eb:bb:4d:37:f5:26:61:aa:54:c6:da:50:a7:cf:
88:62:5a:0c:5a:88:e9:a5:8f:81:3d:9a:b6:1e:d1:d3:c7:29:
d3:e3:22:b2:26:53:dc:c1:81:b3:63:f6:dd:03:a5:cf:a4:f4:
1a:f6:27:96:11:0b:a4:0c:81:c2:30:0d:55:cc:b1:45:2f:1c:
45:a9:69:72:f1:31:76:86:e9:6c:61:15:7f:90:c5:7b:83:7e:
59:b8:fb:db:43:1f:03:be:c9:ac:8a:3e:0a:8f:a0:eb:4e:4d:
1b:7f:ee:25:93:e5:fd:6a:4f:5f:68:9f:95:98:fa:50:7d:cd:
1d:d4:23:23:29:1d:5e:a0:5b:8c:7f:14:1b:28:f5:10:6a:3a:
62:97:c0:9d:2f:b9:e1:04:93:ae:67:29:4c:60:81:36:4a:17:
a8:20:8d:26:a7:00:ed:4b:4d:77:e8:5e:02:4f:c2:8f:bb:52:
a8:19:f8:e1:3a:4a:c8:ef:f8:43:ca:7f:f4:58:a2:a7:65:cd:
40:29:50:2f:06:46:20:48:75:22:45:a3:ed:19:62:d2:8c:53:
7c:8a:c8:76:a4:fd:d3:42:83:ad:49:5c:40:5e:79:ee:06:75:
c6:9e:b8:d9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlCMUIxMTAvBgNVBAUTKDRCNDQxNEFFNjg1RTQ4OEY0MkIxQjY0N0VFQTAxREVC
QjBDNEYzQTAwHhcNMjQwOTE5MDIxNjA0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmViODk2NC00MjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsJdPn5sLDctckLXELdfwTyaNoJG3EvUNNZdOGEbeccWUeFWjPrJefCrhtBYS
GdwBuIzU2BFGhKYZ9alx1TQrxyHC+4V9oaQ6AjqqFysw3mPGJlAv5A+/KdHcSkPk
3jsCu54hJIAxB5vtrhoUS0D0+5iTy4RROYgnPZTqQXdrqmAqwKC6rwFIfCIwjwS6
7tsVkuHX8WOeYKQ6+pRbaKLoQIGdvyuggbjsDLOQI1kjzglimidskWPWrLLJhzCs
KYOI4/buDwbp2NGy9ykaGNIuHQBY8r6PMA1f7FbWXTjtyX1/NxQ2M3mV1YSGuudw
oAIVmh42unQ2vSO6VCWRef0AQQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFC2YePnP
7VkLCzTr1P7aVLe0EHZ+MB8GA1UdIwQYMBaAFEtEFK5oXkiPQrG2R+6gHeuwxPOg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIxQi80QjM4NjREODBF
MEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJOUNzYlpIN3FBZDY3REU4
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1MwUVVybWhlU0k5Q3NiWkg3cUFkNjdERTg2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTlCMUIvNEIzODY0RDgwRTBCMTFFREE4RDEyRTU4QzRGOUFFMDIvQjNGOTM1MTYw
RTBGMTFFRDg5RTg5Njc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnF0QwDQQCAAIwBwMFACQAmSAwDQYJKoZIhvcNAQELBQAD
ggEBAIqPBN2LAcVBqUsw28Z3AamGoeqE1Krru0039SZhqlTG2lCnz4hiWgxaiOml
j4E9mrYe0dPHKdPjIrImU9zBgbNj9t0Dpc+k9Br2J5YRC6QMgcIwDVXMsUUvHEWp
aXLxMXaG6WxhFX+QxXuDflm4+9tDHwO+yayKPgqPoOtOTRt/7iWT5f1qT19on5WY
+lB9zR3UIyMpHV6gW4x/FBso9RBqOmKXwJ0vueEEk65nKUxggTZKF6ggjSanAO1L
TXfoXgJPwo+7UqgZ+OE6Ssjv+EPKf/RYoqdlzUApUC8GRiBIdSJFo+0ZYtKMU3yK
yHak/dNCg61JXEBeee4GdcaeuNk=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:45:00 2025 by rpki-client