Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa
File: C85D0F7E477711EBB4044E31C4F9AE02.roa (raw, json)
Hash identifier: Bhz7N8pZoKpTA86d7VHsfPqDjwr9atp9lYNrAhBYh2s=
Subject key identifier: DF:D0:65:50:77:3F:A3:F4:76:C4:68:14:20:E4:99:08:55:A9:7A:F5
Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial: 1A9A
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa
Signing time: Fri 02 Feb 2024 17:04:10 +0000
ROA not before: Fri 02 Feb 2024 17:04:10 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 61317
IP address blocks: 103.5.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6810 (0x1a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Validity
Not Before: Feb 2 17:04:10 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65bd208a-5041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:0c:fd:a7:2e:8d:2e:39:ea:f3:ba:7f:bf:
b4:3e:aa:ce:88:bf:48:09:5f:58:b1:29:55:17:a9:
12:24:65:15:fc:46:e0:a4:8f:4e:fb:2a:61:d9:32:
b3:0b:e2:1e:9d:d2:bc:94:59:1a:2b:88:36:a0:63:
ba:91:f1:75:b4:87:4c:4f:0e:9a:2f:81:91:1e:70:
db:7f:ad:b9:aa:a8:56:7a:df:95:68:9c:00:f7:1c:
ac:66:2a:8e:c1:c0:e0:a9:da:c0:74:5a:4c:c0:dd:
71:db:db:e8:18:08:c4:39:de:7c:3a:91:f2:93:85:
9c:3a:da:30:a8:f1:0d:51:31:e4:32:24:1f:13:1b:
d8:24:95:e5:11:11:30:ba:5e:01:8e:92:25:60:0d:
3f:72:a1:cb:7f:d9:fe:aa:91:c4:07:56:11:04:a8:
0c:3b:15:9a:5a:e1:7e:f4:7f:9a:a1:0e:84:34:60:
32:1d:6c:0d:5e:87:d1:ba:d5:1a:e7:77:ef:3c:0e:
cd:e5:e2:a6:5c:0f:e4:d8:22:ac:80:f8:d3:6b:89:
00:97:16:58:51:e0:21:75:04:6a:95:c6:46:43:4f:
26:9d:29:8d:6f:e1:9f:42:8c:e6:8f:8a:cb:2d:21:
48:db:d5:04:74:2d:41:28:f1:3c:3d:44:75:3b:e5:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D0:65:50:77:3F:A3:F4:76:C4:68:14:20:E4:99:08:55:A9:7A:F5
X509v3 Authority Key Identifier:
keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C85D0F7E477711EBB4044E31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:45:54:fb:2d:ba:fa:c9:32:60:79:b0:26:04:f6:59:1b:e6:
5b:80:ac:a8:38:bb:2d:52:c2:2e:6a:fe:8b:07:8f:0d:3b:39:
3d:2d:c9:1b:ed:61:2f:e5:50:29:9b:ed:4b:16:a7:91:88:1c:
4d:bc:6e:68:70:ca:10:c1:37:3b:03:04:47:4b:31:a0:19:e5:
06:58:be:ff:db:b9:94:49:27:17:87:26:d7:27:0e:98:ab:bc:
8f:bf:42:28:66:ab:c9:55:9c:ee:9f:15:1e:16:7b:93:08:12:
ea:ed:94:cb:84:d6:f5:f2:aa:c3:35:02:39:7e:2e:f4:1b:e1:
4c:30:9a:84:db:24:8b:b3:15:c7:3b:6d:93:92:27:cd:08:4d:
d1:e6:96:41:69:1f:76:97:18:68:6a:af:75:64:a7:e4:35:4e:
bf:8a:18:23:aa:0a:cf:3d:ae:de:79:f7:e1:03:d0:56:88:c1:
d6:3e:bc:1c:38:b0:24:23:9f:1c:b0:3f:dd:be:5d:37:b4:06:
3c:2c:81:f0:05:31:5c:40:81:01:08:be:9a:24:b2:3c:73:82:
19:26:bd:2f:87:dc:9c:86:e6:1b:dc:5e:59:2e:b4:ef:b1:1e:
fc:70:fa:f7:fa:92:33:51:b7:8d:5e:bd:c1:ea:3e:89:1f:68:
cd:15:35:07
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3
OUQzMDUyMzQwHhcNMjQwMjAyMTcwNDEwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWJkMjA4YS01MDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0vQM/acujS456vO6f7+0PqrOiL9ICV9YsSlVF6kSJGUV/EbgpI9O+yph2TKz
C+IendK8lFkaK4g2oGO6kfF1tIdMTw6aL4GRHnDbf625qqhWet+VaJwA9xysZiqO
wcDgqdrAdFpMwN1x29voGAjEOd58OpHyk4WcOtowqPENUTHkMiQfExvYJJXlEREw
ul4BjpIlYA0/cqHLf9n+qpHEB1YRBKgMOxWaWuF+9H+aoQ6ENGAyHWwNXofRutUa
53fvPA7N5eKmXA/k2CKsgPjTa4kAlxZYUeAhdQRqlcZGQ08mnSmNb+GfQozmj4rL
LSFI29UEdC1BKPE8PUR1O+WmuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN/QZVB3
P6P0dsRoFCDkmQhVqXr1MB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5
ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkFFREMvMkRDMUJBRjIwOTg1MTFFN0IxRkZDMjNGQzRGOUFFMDIvQzg1RDBGN0U0
Nzc3MTFFQkI0MDQ0RTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnBaQwDQYJKoZIhvcNAQELBQADggEBAAxFVPstuvrJMmB5
sCYE9lkb5luArKg4uy1Swi5q/osHjw07OT0tyRvtYS/lUCmb7UsWp5GIHE28bmhw
yhDBNzsDBEdLMaAZ5QZYvv/buZRJJxeHJtcnDpirvI+/Qihmq8lVnO6fFR4We5MI
EurtlMuE1vXyqsM1Ajl+LvQb4UwwmoTbJIuzFcc7bZOSJ80ITdHmlkFpH3aXGGhq
r3Vkp+Q1Tr+KGCOqCs89rt559+ED0FaIwdY+vBw4sCQjnxywP92+XTe0BjwsgfAF
MVxAgQEIvpoksjxzghkmvS+H3JyG5hvcXlkutO+xHvxw+vf6kjNRt41evcHqPokf
aM0VNQc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:01 2025 by rpki-client