Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa
File: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (raw, json)
Hash identifier: 5o54TJ7CvBWY2lPEbb8bfTWNjpq8SWQjpNjv9BAXw6o=
Subject key identifier: 43:6B:6D:9D:57:EA:3C:6E:D9:44:F4:E3:A6:57:88:44:7F:30:E0:CA
Certificate issuer: /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77
Certificate serial: 0242
Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa
Signing time: Sat 27 Jul 2024 03:26:16 +0000
ROA not before: Sat 27 Jul 2024 03:26:16 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 149860
IP address blocks: 103.189.66.0/24 maxlen: 24
103.189.67.0/24 maxlen: 24
2001:df0:ccc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77
Validity
Not Before: Jul 27 03:26:16 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a468d8-f357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:c8:1f:3d:27:66:2c:37:ab:ef:df:c0:a3:
75:4c:ad:71:ef:8f:9c:73:d1:25:24:de:f4:30:ce:
33:99:97:6b:a7:0a:f6:87:a0:be:5a:48:2b:46:b8:
c8:67:14:ad:42:fd:a3:be:e6:76:70:11:83:3b:78:
bd:18:6c:6c:8d:67:94:6b:ef:4c:21:fc:e3:e9:d5:
c1:a0:9a:4d:92:d8:42:47:ca:64:97:84:ec:0d:66:
ee:b3:39:ad:91:13:57:02:97:49:6c:d6:28:05:24:
63:d0:29:5c:1e:30:fc:be:0e:93:b4:d3:70:7f:c5:
d9:a1:81:8b:68:b4:d5:6a:92:62:44:b0:ff:fa:f3:
fe:af:9b:2e:1a:d4:e6:3d:f2:94:4e:65:00:58:f9:
df:6b:b6:15:fa:ba:fc:ed:70:2c:8b:2c:0a:1b:18:
a3:0d:2a:7e:93:8f:55:45:01:e3:c0:70:ec:9d:a6:
96:9d:17:f6:b2:73:21:2f:b4:24:77:3f:4f:5f:1a:
95:93:f7:31:22:07:f2:83:ef:c3:a1:d5:ad:ce:ae:
ad:e5:28:5c:95:67:b1:a9:fb:76:71:0c:09:22:30:
52:3c:32:57:89:75:11:27:2f:cc:9b:0b:5f:b8:ff:
45:1c:31:c6:69:1b:98:3d:4e:08:91:7d:60:28:4e:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6B:6D:9D:57:EA:3C:6E:D9:44:F4:E3:A6:57:88:44:7F:30:E0:CA
X509v3 Authority Key Identifier:
keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.66.0/23
IPv6:
2001:df0:ccc0::/48
Signature Algorithm: sha256WithRSAEncryption
06:6e:0e:65:af:80:d0:c4:7b:8e:5f:cc:aa:45:b9:ad:65:13:
88:ab:36:02:38:8e:ca:2c:c8:d3:13:90:49:82:e9:b2:7d:cd:
83:85:b9:cb:50:7b:18:5a:10:20:4d:4f:82:b1:ed:91:1d:a1:
4a:95:f8:c4:43:bc:18:19:de:22:95:1b:1a:21:cb:cc:ba:4d:
de:b7:7e:54:74:5e:52:43:c6:02:4b:2e:43:06:d3:b9:b4:96:
40:6f:3b:19:a9:70:ec:ca:b0:b9:0a:15:1b:1a:b8:34:00:8c:
a5:b7:39:b3:4c:b1:5e:0d:a4:03:66:9e:10:ec:2d:ed:dd:b2:
55:d2:9c:46:58:3f:47:52:98:f4:31:75:f1:2b:b2:8d:08:e1:
59:8f:24:4d:d3:09:67:56:2a:66:11:f5:96:c1:1e:a8:26:a0:
ca:48:a7:7e:0e:23:f9:b5:c3:86:33:6d:df:1e:ca:6e:43:49:
62:71:3e:e2:30:a6:d3:42:59:70:9b:ea:d4:23:f9:de:b8:af:
54:7d:23:e1:88:84:fe:e8:15:2c:d6:6a:90:46:af:e9:fd:d2:
5c:db:67:30:2e:93:1d:e0:df:80:de:05:c0:0c:f6:de:23:3e:
76:f0:1b:51:0d:51:46:2f:54:67:68:1e:cd:fd:9c:d3:d0:08:
72:70:da:71
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IwNkYxMTAvBgNVBAUTKEM5NDVCNzc3MkNDQzI3NDEzODY1QTkyQ0I4OTJERkQy
N0NBQTlGNzcwHhcNMjQwNzI3MDMyNjE2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE0NjhkOC1mMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyXIHz0nZiw3q+/fwKN1TK1x74+cc9ElJN70MM4zmZdrpwr2h6C+WkgrRrjI
ZxStQv2jvuZ2cBGDO3i9GGxsjWeUa+9MIfzj6dXBoJpNkthCR8pkl4TsDWbuszmt
kRNXApdJbNYoBSRj0ClcHjD8vg6TtNNwf8XZoYGLaLTVapJiRLD/+vP+r5suGtTm
PfKUTmUAWPnfa7YV+rr87XAsiywKGxijDSp+k49VRQHjwHDsnaaWnRf2snMhL7Qk
dz9PXxqVk/cxIgfyg+/DodWtzq6t5ShclWexqft2cQwJIjBSPDJXiXURJy/Mmwtf
uP9FHDHGaRuYPU4IkX1gKE79awIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFENrbZ1X
6jxu2UT046ZXiER/MODKMB8GA1UdIwQYMBaAFMlFt3cszCdBOGWpLLiS39J8qp93
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2Ri8xMkYzMDIxMkU3
MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUowRTRaYWtzdUpMZjBueXFu
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lVVzNkeXpNSjBFNFpha3N1SkxmMG55cW4zYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0IwNkYvMTJGMzAyMTJFNzM4MTFFQzg4RjExNjQxQzRGOUFFMDIvNUZDODUzOEFF
N0Q4MTFFQ0IzRTA1MzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnvUIwDwQCAAIwCQMHACABDfDMwDANBgkqhkiG9w0BAQsF
AAOCAQEABm4OZa+A0MR7jl/MqkW5rWUTiKs2AjiOyizI0xOQSYLpsn3Ng4W5y1B7
GFoQIE1PgrHtkR2hSpX4xEO8GBneIpUbGiHLzLpN3rd+VHReUkPGAksuQwbTubSW
QG87Galw7MqwuQoVGxq4NACMpbc5s0yxXg2kA2aeEOwt7d2yVdKcRlg/R1KY9DF1
8SuyjQjhWY8kTdMJZ1YqZhH1lsEeqCagykinfg4j+bXDhjNt3x7KbkNJYnE+4jCm
00JZcJvq1CP53rivVH0j4YiE/ugVLNZqkEav6f3SXNtnMC6THeDfgN4FwAz23iM+
dvAbUQ1RRi9UZ2gezf2c09AIcnDacQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:46 2025 by rpki-client