Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa
File: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (raw, json)
Hash identifier: lpjw5BWb1D28FIiM0Q0zwOopAGhOPre90gYeT7boapw=
Subject key identifier: 57:3D:E4:82:76:5F:18:6A:B3:E2:6C:D2:62:31:0F:7D:EC:B5:8B:15
Certificate issuer: /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial: 03FB
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa
Signing time: Sun 12 Jan 2025 23:53:45 +0000
ROA not before: Sun 12 Jan 2025 23:53:45 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 141446
IP address blocks: 103.177.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1019 (0x3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Validity
Not Before: Jan 12 23:53:45 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67845609-2cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:06:cd:90:04:17:d0:f3:06:70:df:39:2e:
fa:80:e6:53:80:fd:80:5c:d9:c0:78:f8:17:9d:d5:
5b:92:f8:8c:75:34:6a:ab:17:4e:14:db:98:21:e5:
5d:04:e5:ed:41:2c:96:48:5e:12:c6:ee:86:df:1f:
10:d0:4a:44:70:2c:85:70:3d:92:b2:f4:7b:48:9f:
e8:86:d8:a4:bc:e5:51:23:cf:6c:11:d8:b2:d2:33:
1a:de:c4:ad:3a:26:93:70:e2:a1:72:b0:13:6a:09:
b6:fe:b1:a4:a5:a8:ac:3c:86:7d:55:34:a2:07:a7:
aa:2b:9f:be:8f:7d:47:7e:2e:76:37:0f:d3:e1:18:
37:79:08:55:3d:e4:28:e0:87:fa:29:83:bf:b3:cd:
c7:6f:43:dc:d6:3e:98:c6:98:05:a1:e4:f1:64:aa:
40:cb:20:52:65:17:43:61:03:24:0c:7a:b3:ce:51:
e0:df:f2:6f:a8:1e:1e:8e:5e:d9:7d:21:e5:39:b8:
2b:3a:9b:07:4c:17:dc:e9:ad:b5:4c:ff:7f:42:d7:
90:f5:88:bb:65:5f:a5:a3:ab:4b:1e:53:dc:d7:d6:
77:86:24:e6:45:99:98:8f:0c:3a:64:20:99:8d:65:
ec:b9:43:ca:8a:fa:a6:73:5d:67:27:07:44:74:31:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:E4:82:76:5F:18:6A:B3:E2:6C:D2:62:31:0F:7D:EC:B5:8B:15
X509v3 Authority Key Identifier:
keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.169.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0e:99:ee:19:8e:3f:92:4d:15:6b:1c:e4:9e:93:8a:51:5b:
92:38:5a:df:7b:27:20:c7:6e:80:80:ed:90:ef:2d:f4:21:09:
e1:a2:ce:f3:28:aa:f3:56:12:8d:51:4f:c8:2b:7f:64:bf:7e:
97:2c:5d:4f:3d:d0:cd:ec:28:ec:8d:08:64:27:60:ff:1a:b1:
a7:0c:93:db:7f:78:42:33:fc:57:6f:e7:ea:e1:25:ef:4f:60:
5b:87:0a:8f:6b:4b:67:ce:ba:a4:4b:f2:c2:ca:e6:26:7a:7e:
58:da:cf:cc:be:30:15:a5:19:c5:5c:f0:98:51:49:94:ed:c4:
99:da:35:4e:fc:c0:a0:00:a2:6b:8b:2f:2c:9b:ad:c5:0d:86:
b7:6c:3f:1b:1c:4c:e0:95:60:00:2f:fb:f6:fe:58:62:0a:9f:
90:fd:96:5c:05:a1:37:cc:14:6f:15:cc:a6:61:9c:a0:6b:de:
c0:30:9d:78:af:1c:ff:fb:79:b5:4b:3f:ef:d1:6b:3d:eb:41:
6f:d3:7c:8e:00:70:f8:fd:d5:5f:df:db:fb:63:b0:25:0b:72:
b5:3a:10:c1:bb:9d:d6:3f:4e:07:a5:3a:3e:67:ce:90:df:06:
66:e0:1b:7f:ba:49:89:a1:51:4a:47:ea:d5:bd:15:1f:63:38:
cb:b0:1d:c3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdEM0QxMTAvBgNVBAUTKDgzNTFBMEE4OTQ1OEE0NzQyNkE1NzBBMDI5MDFGOEU2
NTQyRTgyRTIwHhcNMjUwMTEyMjM1MzQ1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg0NTYwOS0yY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuscGzZAEF9DzBnDfOS76gOZTgP2AXNnAePgXndVbkviMdTRqqxdOFNuYIeVd
BOXtQSyWSF4Sxu6G3x8Q0EpEcCyFcD2SsvR7SJ/ohtikvOVRI89sEdiy0jMa3sSt
OiaTcOKhcrATagm2/rGkpaisPIZ9VTSiB6eqK5++j31Hfi52Nw/T4Rg3eQhVPeQo
4If6KYO/s83Hb0Pc1j6YxpgFoeTxZKpAyyBSZRdDYQMkDHqzzlHg3/JvqB4ejl7Z
fSHlObgrOpsHTBfc6a21TP9/QteQ9Yi7ZV+lo6tLHlPc19Z3hiTmRZmYjww6ZCCZ
jWXsuUPKivqmc11nJwdEdDGvLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFc95IJ2
Xxhqs+Js0mIxD33stYsVMB8GA1UdIwQYMBaAFINRoKiUWKR0JqVwoCkB+OZULoLi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QzRC8yMzNDMEI0NjYz
QkMxMUVDOEI4QzgzMkFDNEY5QUUwMi9nMUdncUpSWXBIUW1wWENnS1FINDVsUXVn
dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2cxR2dxSlJZcEhRbXBYQ2dLUUg0NWxRdWd1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjdEM0QvMjMzQzBCNDY2M0JDMTFFQzhCOEM4MzJBQzRGOUFFMDIvRDNFMTVFQ0VB
MUU2MTFFREFCRkQ3RDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnsakwDQYJKoZIhvcNAQELBQADggEBAFEOme4Zjj+STRVr
HOSek4pRW5I4Wt97JyDHboCA7ZDvLfQhCeGizvMoqvNWEo1RT8grf2S/fpcsXU89
0M3sKOyNCGQnYP8asacMk9t/eEIz/Fdv5+rhJe9PYFuHCo9rS2fOuqRL8sLK5iZ6
fljaz8y+MBWlGcVc8JhRSZTtxJnaNU78wKAAomuLLyybrcUNhrdsPxscTOCVYAAv
+/b+WGIKn5D9llwFoTfMFG8VzKZhnKBr3sAwnXivHP/7ebVLP+/Raz3rQW/TfI4A
cPj91V/f2/tjsCULcrU6EMG7ndY/TgelOj5nzpDfBmbgG3+6SYmhUUpH6tW9FR9j
OMuwHcM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:33 2025 by rpki-client