Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/583FA34E672E11EEB31AC02CC4F9AE02.roa
File: 583FA34E672E11EEB31AC02CC4F9AE02.roa (raw, json)
Hash identifier: UDY5XZZpboPOe4PuKIjoZcv8Z+maPhsL8V3N8OWNJu4=
Subject key identifier: 39:11:83:45:9C:38:88:36:E8:F2:8D:3D:98:ED:16:D7:F7:4D:70:DE
Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Certificate serial: BE
Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/583FA34E672E11EEB31AC02CC4F9AE02.roa
Signing time: Thu 03 Oct 2024 04:38:47 +0000
ROA not before: Thu 03 Oct 2024 04:38:46 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 396982
IP address blocks: 103.10.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Validity
Not Before: Oct 3 04:38:46 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fe1fd6-d94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:a7:02:76:db:7b:af:83:99:7c:6e:2b:f3:
9a:fe:7a:9d:14:72:07:e9:94:9e:01:d6:b4:fc:a0:
b7:43:6c:bf:bb:7c:87:83:57:ec:2c:1d:5a:8c:c3:
ba:a3:7a:73:db:a5:2f:ed:a5:7b:85:d1:6a:79:54:
34:c3:50:c6:38:8d:8a:33:f8:6a:c1:29:7e:a2:ee:
23:4a:1c:0d:3e:f3:7e:9e:4d:f8:48:52:18:7a:84:
4d:7c:d2:5f:06:f6:df:4d:3d:0e:5c:68:29:55:15:
00:47:d5:5f:8c:e9:bb:c9:3a:a0:7a:39:26:13:2a:
95:71:95:b0:5b:92:25:c1:42:a8:71:d8:da:f2:50:
3b:a0:ce:12:85:bf:65:08:ce:9c:eb:a8:d1:17:b7:
bf:ae:c6:e8:c3:2a:5e:28:75:88:27:af:69:ca:65:
05:e9:57:5a:f8:a2:a9:b5:35:b7:4c:d4:5c:ab:8b:
54:8a:1f:23:97:11:c2:3d:97:1c:0d:df:65:21:15:
70:4b:ef:d4:15:4a:4c:c7:81:d1:60:23:11:e0:74:
1b:02:5d:24:f8:0b:f1:75:fe:bf:f7:be:cb:b4:df:
46:c2:24:b5:a5:9f:40:d1:33:ab:81:02:9a:99:1c:
97:6f:f0:ed:fc:63:86:50:3e:04:db:71:81:ef:d9:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:11:83:45:9C:38:88:36:E8:F2:8D:3D:98:ED:16:D7:F7:4D:70:DE
X509v3 Authority Key Identifier:
keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/583FA34E672E11EEB31AC02CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.108.0/24
Signature Algorithm: sha256WithRSAEncryption
42:2d:1b:db:67:c3:0b:23:ec:d1:5d:39:fc:5f:c7:c7:69:4a:
a1:cc:1b:7d:d6:6e:d8:6c:8f:20:3f:98:bc:f4:f2:46:ce:76:
86:91:52:fa:47:3b:ce:a9:5f:fa:ca:f0:fb:75:d9:13:a5:c3:
a5:2b:ce:33:69:62:d4:87:3c:86:4b:99:e8:51:cd:59:af:e4:
76:09:4a:6f:cd:8c:7e:52:ec:62:47:e0:aa:51:4d:d9:18:43:
19:f1:a0:be:9a:d3:cc:2b:56:6c:7e:5f:b8:7a:70:18:9c:82:
07:d6:08:93:94:6d:b7:b5:be:23:88:30:5f:24:29:08:39:df:
0d:eb:b6:44:76:d9:b7:12:3d:be:7c:93:9b:74:87:76:85:49:
17:e2:fa:b4:4f:09:b0:b0:2b:5d:7b:8c:38:c8:15:32:11:0b:
be:95:46:9d:dc:1b:76:32:c8:00:c3:8f:ed:43:ea:e2:68:e7:
d7:45:36:33:74:4a:cf:91:7e:2c:07:0e:dc:d4:f3:38:86:83:
07:d6:66:3d:a6:fa:69:e2:53:f4:27:ec:2a:e1:d3:f9:79:09:
90:64:c5:3a:fa:9b:58:ea:f7:79:17:26:4d:a4:1b:bc:3d:68:
2e:88:76:e4:d0:7d:f6:05:ee:6f:24:6a:6d:86:9f:2d:60:21:
21:a4:2f:83
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD
REM1OUZBMkEwHhcNMjQxMDAzMDQzODQ2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZlMWZkNi1kOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVKnAnbbe6+DmXxuK/Oa/nqdFHIH6ZSeAda0/KC3Q2y/u3yHg1fsLB1ajMO6
o3pz26Uv7aV7hdFqeVQ0w1DGOI2KM/hqwSl+ou4jShwNPvN+nk34SFIYeoRNfNJf
BvbfTT0OXGgpVRUAR9VfjOm7yTqgejkmEyqVcZWwW5IlwUKocdja8lA7oM4Shb9l
CM6c66jRF7e/rsbowypeKHWIJ69pymUF6Vda+KKptTW3TNRcq4tUih8jlxHCPZcc
Dd9lIRVwS+/UFUpMx4HRYCMR4HQbAl0k+Avxdf6/977LtN9GwiS1pZ9A0TOrgQKa
mRyXb/Dt/GOGUD4E23GB79m7eQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDkRg0Wc
OIg26PKNPZjtFtf3TXDeMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3
MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzA2NEMvNjgzQzlEOTg2NzJEMTFFRTlDODA5RjEyQzRGOUFFMDIvNTgzRkEzNEU2
NzJFMTFFRUIzMUFDMDJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnCmwwDQYJKoZIhvcNAQELBQADggEBAEItG9tnwwsj7NFd
Ofxfx8dpSqHMG33WbthsjyA/mLz08kbOdoaRUvpHO86pX/rK8Pt12ROlw6UrzjNp
YtSHPIZLmehRzVmv5HYJSm/NjH5S7GJH4KpRTdkYQxnxoL6a08wrVmx+X7h6cBic
ggfWCJOUbbe1viOIMF8kKQg53w3rtkR22bcSPb58k5t0h3aFSRfi+rRPCbCwK117
jDjIFTIRC76VRp3cG3YyyADDj+1D6uJo59dFNjN0Ss+RfiwHDtzU8ziGgwfWZj2m
+mniU/Qn7Crh0/l5CZBkxTr6m1jq93kXJk2kG7w9aC6IduTQffYF7m8kam2Gny1g
ISGkL4M=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:38:48 2025 by rpki-client