Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa
File: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (raw, json)
Hash identifier: Zx1NZFaobsMkPgZlMNZ8S9A1zmjC7C3D22JCgStrQxA=
Subject key identifier: F8:F1:B5:42:CC:CE:8B:5C:7E:54:79:CA:4F:52:A2:1E:76:BA:DE:4C
Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Certificate serial: 0FF1
Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa
Signing time: Fri 08 Nov 2024 17:25:24 +0000
ROA not before: Fri 08 Nov 2024 17:25:24 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58433
IP address blocks: 103.5.228.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4081 (0xff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Validity
Not Before: Nov 8 17:25:24 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672e4984-25a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:ff:fb:9d:e6:15:d6:bb:0c:54:54:a6:49:
ce:86:28:ce:7a:f0:50:0f:35:3a:b3:2f:33:25:46:
0e:58:b4:51:20:35:d9:53:4d:a8:03:48:43:61:cd:
0e:ac:25:fc:a5:42:8d:76:41:4c:20:b7:fb:b8:b4:
0e:79:af:28:cc:6a:df:36:c9:1e:39:f6:a1:0d:c3:
c7:16:80:0d:40:01:37:6c:6c:68:30:c7:3c:b0:c6:
43:f0:90:85:50:3e:f2:31:2a:81:a8:21:4a:e7:f6:
51:b9:2e:6c:1b:da:65:1f:7c:a5:4b:01:0c:5c:e7:
fe:da:f9:6f:65:b0:5a:3f:eb:a3:44:15:4a:1a:a1:
15:89:1e:8a:86:2d:d3:03:df:18:87:1a:3f:f1:9c:
b8:d7:ec:fe:99:48:ed:14:03:45:4f:91:0e:d8:c4:
98:01:e5:22:ed:11:a8:b5:10:a8:32:e7:55:ef:6f:
e7:20:93:d7:ce:21:94:8d:02:3c:df:5d:4e:14:fb:
21:37:a3:f7:dd:88:1c:a7:6e:9c:8f:8e:8a:a7:ce:
a5:21:55:9d:d6:ca:82:cc:ed:ac:0d:1c:e4:38:48:
2e:00:e0:71:2e:7f:1c:51:e8:19:ad:51:c8:ad:89:
29:07:bc:4d:2d:83:f7:3c:12:ca:29:25:7e:c7:75:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F1:B5:42:CC:CE:8B:5C:7E:54:79:CA:4F:52:A2:1E:76:BA:DE:4C
X509v3 Authority Key Identifier:
keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/4178B83237ED11E99B3C9C4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.228.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:74:e6:fe:90:9a:68:d4:c7:bf:16:3c:05:4b:3b:80:d0:98:
ae:f4:7e:a0:57:ce:85:b9:ed:23:08:3c:e2:83:c5:4d:6b:02:
f9:e8:11:be:db:d1:cc:e2:49:46:ac:a1:d0:60:fa:fb:7c:85:
d2:87:0c:90:c8:af:77:e3:1f:9b:1a:e9:1b:80:40:f0:97:36:
bf:1c:1e:f1:7f:64:b7:77:e4:a0:ea:4c:85:67:9d:a2:0c:ba:
f0:67:73:ce:d5:5f:33:66:70:84:4d:19:82:5c:84:4e:c8:e3:
b1:90:d2:f6:49:10:8a:43:ec:b4:24:24:48:a3:3b:5d:18:9b:
e5:66:20:3d:e0:91:cb:86:23:78:0e:c8:1c:6a:95:7f:c5:a1:
4d:ae:cf:db:c5:94:77:83:33:19:28:40:b2:3c:8f:c5:f1:33:
08:ab:72:2a:1a:e8:1c:f2:9a:ee:d0:cb:45:08:ff:f8:29:17:
f3:5b:a2:df:20:7b:e6:a3:61:c8:4c:05:a4:3c:c7:23:de:ed:
29:c1:ed:6d:36:bd:07:fa:ee:3c:3e:0e:9f:ef:0f:46:7b:18:
06:cf:69:80:b5:3a:a7:93:6c:ca:ac:0a:d7:d9:83:31:2e:1a:
bf:16:df:70:62:90:78:2a:2d:10:93:15:07:a5:9a:fd:63:5a:
a4:8f:77:e4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5
QzY5NUMwNTcwHhcNMjQxMTA4MTcyNTI0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzJlNDk4NC0yNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvS//+53mFda7DFRUpknOhijOevBQDzU6sy8zJUYOWLRRIDXZU02oA0hDYc0O
rCX8pUKNdkFMILf7uLQOea8ozGrfNskeOfahDcPHFoANQAE3bGxoMMc8sMZD8JCF
UD7yMSqBqCFK5/ZRuS5sG9plH3ylSwEMXOf+2vlvZbBaP+ujRBVKGqEViR6Khi3T
A98Yhxo/8Zy41+z+mUjtFANFT5EO2MSYAeUi7RGotRCoMudV72/nIJPXziGUjQI8
311OFPshN6P33Ygcp26cj46Kp86lIVWd1sqCzO2sDRzkOEguAOBxLn8cUegZrVHI
rYkpB7xNLYP3PBLKKSV+x3USewIDAQABo4IClTCCApEwHQYDVR0OBBYEFPjxtULM
zotcflR5yk9Soh52ut5MMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3
RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkMxQ0UvMjRGQTYwRTQzN0VDMTFFOUE4NzVFODQ4QzRGOUFFMDIvNDE3OEI4MzIz
N0VEMTFFOTlCM0M5QzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnBeQwDQYJKoZIhvcNAQELBQADggEBAH505v6QmmjUx78W
PAVLO4DQmK70fqBXzoW57SMIPOKDxU1rAvnoEb7b0cziSUasodBg+vt8hdKHDJDI
r3fjH5sa6RuAQPCXNr8cHvF/ZLd35KDqTIVnnaIMuvBnc87VXzNmcIRNGYJchE7I
47GQ0vZJEIpD7LQkJEijO10Ym+VmID3gkcuGI3gOyBxqlX/FoU2uz9vFlHeDMxko
QLI8j8XxMwircioa6Bzymu7Qy0UI//gpF/Nbot8ge+ajYchMBaQ8xyPe7SnB7W02
vQf67jw+Dp/vD0Z7GAbPaYC1OqeTbMqsCtfZgzEuGr8W33BikHgqLRCTFQelmv1j
WqSPd+Q=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:23 2025 by rpki-client