Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
File: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (raw, json)
Hash identifier: zYMb1XnG0WFocOb8g6o9H1kl0CBRuaJqUP3nm71UW5w=
Subject key identifier: 8A:46:09:2D:D2:2A:30:E8:57:0D:F5:AF:E8:FB:B8:4D:CB:59:AD:4C
Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial: 3444
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
Signing time: Thu 16 Jan 2025 15:30:59 +0000
ROA not before: Thu 16 Jan 2025 15:30:59 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 56258
IP address blocks: 103.28.93.0/24 maxlen: 24
103.28.94.0/24 maxlen: 24
103.28.95.0/24 maxlen: 24
103.28.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13380 (0x3444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Validity
Not Before: Jan 16 15:30:59 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67892633-d0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8e:ec:bb:18:ff:68:36:75:cf:40:dd:a4:10:
c1:f9:9b:8e:0e:0a:60:c6:a4:b3:6f:4c:06:f2:e2:
c8:c4:ae:c7:29:80:ad:fa:84:0b:60:db:ad:27:7d:
8c:37:5a:18:aa:84:58:7a:8a:df:3c:1d:88:3b:f8:
ef:cf:10:53:f3:18:d9:5e:8a:e7:29:fa:41:60:4f:
e1:3b:3f:c6:33:6d:44:0b:4b:cf:2e:c4:d1:e2:09:
f6:19:be:1b:a1:8f:fd:fd:34:8c:4d:74:a7:ea:d9:
16:ea:45:ea:c8:76:e1:9e:eb:2e:41:22:7d:2e:1f:
b0:44:27:1c:a6:b2:4c:36:17:91:41:d0:f0:ba:12:
d0:3b:70:7d:f2:40:a0:8e:43:a9:9d:f7:46:40:52:
9b:53:89:1c:8b:9b:6a:59:a9:9c:d7:9b:c2:6e:4c:
f0:e3:bd:72:82:fb:19:75:29:2f:2b:6b:f9:61:dd:
d0:e8:26:cd:b9:0e:0a:4c:b7:3c:4a:05:a5:53:89:
1c:0d:5f:15:05:5f:2c:69:29:fa:b6:f8:77:ad:24:
ff:19:2b:a0:62:38:b4:78:49:2b:09:7b:7d:f4:e0:
a1:3c:92:5d:d7:50:30:44:fc:84:75:32:0b:9d:12:
d0:27:7b:de:7a:28:13:71:1d:b9:e1:8a:8f:6e:42:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:46:09:2D:D2:2A:30:E8:57:0D:F5:AF:E8:FB:B8:4D:CB:59:AD:4C
X509v3 Authority Key Identifier:
keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.93.0-103.28.95.255
103.28.104.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3c:11:ff:0d:94:31:4c:f2:cd:28:dc:72:1a:81:b5:5e:e1:
ff:d5:f0:12:e0:d0:f6:34:67:50:24:1d:f0:ef:f0:6f:c5:d1:
e7:f6:e1:8c:5c:4d:f7:64:6a:fd:83:af:6f:e1:81:92:9b:50:
57:49:46:29:29:33:25:4d:0b:ad:3b:d2:31:63:8c:9e:09:c9:
b0:64:5c:f5:cf:90:b7:ee:19:1d:26:c8:0c:99:74:15:22:ff:
d7:20:70:a6:a9:86:f5:36:e0:88:ee:0f:88:52:23:fa:5d:00:
82:af:a1:5d:b0:84:b0:ae:60:c4:6e:e5:cf:b0:1e:87:80:d1:
50:61:a4:09:aa:6b:43:39:84:db:e4:bd:52:20:7f:60:33:e3:
35:11:1a:04:e6:08:92:fb:94:37:0a:0a:36:46:fb:a5:0a:f2:
49:ef:85:ad:d8:4c:fb:55:35:15:f2:cc:24:80:6d:20:53:b9:
0a:7a:6f:4f:64:f6:1c:10:53:8a:fa:d7:15:8d:1e:49:33:a5:
b6:4a:04:47:b4:b9:a1:57:cf:55:cb:a8:82:21:4f:e9:0e:d1:
e7:67:cf:68:3e:73:2a:39:cf:78:6b:e4:ce:25:34:82:ff:60:
30:ca:e6:0e:81:57:40:af:69:87:a0:42:d1:51:9d:7c:e2:80:
66:8d:25:0c
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICNEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz
NkMxNDdBNzEwHhcNMjUwMTE2MTUzMDU5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg5MjYzMy1kMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Y7suxj/aDZ1z0DdpBDB+ZuODgpgxqSzb0wG8uLIxK7HKYCt+oQLYNutJ32M
N1oYqoRYeorfPB2IO/jvzxBT8xjZXornKfpBYE/hOz/GM21EC0vPLsTR4gn2Gb4b
oY/9/TSMTXSn6tkW6kXqyHbhnusuQSJ9Lh+wRCccprJMNheRQdDwuhLQO3B98kCg
jkOpnfdGQFKbU4kci5tqWamc15vCbkzw471ygvsZdSkvK2v5Yd3Q6CbNuQ4KTLc8
SgWlU4kcDV8VBV8saSn6tvh3rST/GSugYji0eEkrCXt99OChPJJd11AwRPyEdTIL
nRLQJ3veeigTcR254YqPbkK5GwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFIpGCS3S
KjDoVw31r+j7uE3LWa1MMB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE
QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjM1MkYvRjZGRkUyOUUxREE5MTFFMkE4RUY2RUE1MDhCMDJDRDIvOTJCQTdGNEE2
OURFMTFFRjhGRjBFRjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQwDAMEAGccXQMEBWccQAMEAGccaDANBgkqhkiG9w0BAQsFAAOC
AQEAkjwR/w2UMUzyzSjcchqBtV7h/9XwEuDQ9jRnUCQd8O/wb8XR5/bhjFxN92Rq
/YOvb+GBkptQV0lGKSkzJU0LrTvSMWOMngnJsGRc9c+Qt+4ZHSbIDJl0FSL/1yBw
pqmG9TbgiO4PiFIj+l0Agq+hXbCEsK5gxG7lz7Aeh4DRUGGkCaprQzmE2+S9UiB/
YDPjNREaBOYIkvuUNwoKNkb7pQrySe+FrdhM+1U1FfLMJIBtIFO5CnpvT2T2HBBT
ivrXFY0eSTOltkoER7S5oVfPVcuogiFP6Q7R52fPaD5zKjnPeGvkziU0gv9gMMrm
DoFXQK9ph6BC0VGdfOKAZo0lDA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:21 2025 by rpki-client