Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa
File: 61DBE422A88B11EFAF507987C4F9AE02.roa (raw, json)
Hash identifier: STHjjsnIAoIPHR0TFAUlDiXLQCeT5pB31DsweaU0WWA=
Subject key identifier: 7C:8A:9F:0C:96:BE:2C:CB:9C:CC:A7:BE:C7:6C:24:3A:E2:DB:D8:07
Certificate issuer: /CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Certificate serial: 013D
Authority key identifier: B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa
Signing time: Fri 22 Nov 2024 04:36:47 +0000
ROA not before: Fri 22 Nov 2024 04:36:47 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 24316
IP address blocks: 203.30.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Validity
Not Before: Nov 22 04:36:47 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67400a5f-4222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:fe:b5:f0:e0:ae:12:64:9f:32:48:c9:43:
b7:e5:91:b4:1e:ad:af:11:2f:2e:ef:34:4a:2a:2f:
9c:cf:a1:77:1b:f7:05:a2:38:80:9c:45:36:62:75:
59:e3:d5:ba:45:0a:86:18:14:5c:9b:32:67:7f:c6:
61:8a:b0:aa:02:78:a6:57:d4:e1:4d:f5:a0:4c:59:
6c:5c:e1:6a:e8:a1:cb:12:d7:31:e9:51:9a:66:2e:
56:89:7b:ed:af:3d:72:9b:d6:59:00:10:6c:a0:4b:
59:ab:d6:e2:66:05:da:74:fd:fe:a5:ab:9e:c5:ad:
16:ed:16:41:e7:0e:16:25:62:ff:7a:7f:c9:97:99:
0a:2b:70:4a:57:a2:12:35:f9:cd:5c:3d:eb:7c:99:
ee:a6:5b:da:7d:e2:ac:75:c3:10:d6:dc:30:57:a0:
40:34:c6:c2:b1:e7:10:78:e1:a7:fe:8b:d2:28:77:
8e:88:c8:d1:b2:7e:eb:08:5a:34:9a:b0:b1:fe:af:
a9:f0:84:9f:b5:f5:dc:b6:76:61:b6:e6:38:a4:e3:
ad:b3:37:e6:b1:ab:0c:e5:5d:97:40:0b:71:2c:91:
ea:d1:e6:84:eb:0b:dd:e7:07:c5:23:dc:71:61:e0:
a0:68:c1:63:00:b2:c5:0f:66:15:33:14:50:c7:ec:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8A:9F:0C:96:BE:2C:CB:9C:CC:A7:BE:C7:6C:24:3A:E2:DB:D8:07
X509v3 Authority Key Identifier:
keyid:B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.30.100.0/22
Signature Algorithm: sha256WithRSAEncryption
32:da:f8:a0:07:26:e7:cc:10:89:e5:b1:52:3f:f5:a0:9a:ca:
46:93:d0:9b:6a:f5:58:06:80:eb:dc:ce:bc:2c:74:11:16:d6:
5b:74:4e:d8:91:e5:64:d4:1f:a4:7e:75:4c:41:a2:25:c8:a0:
c9:08:dd:c1:36:48:77:32:75:ec:fd:e9:84:ad:d9:20:24:d8:
ea:ea:31:d1:87:49:92:72:df:9c:c7:90:52:bd:f0:81:9d:d5:
0b:9d:7a:db:07:3b:90:48:d0:62:e1:11:f0:c3:7a:7d:77:45:
fd:91:cd:9b:f0:73:60:52:9d:76:5a:69:1d:43:11:1e:13:2c:
d3:e0:fc:60:0c:1d:3b:53:db:68:f3:aa:a9:7e:7f:82:a4:bd:
aa:c6:a3:55:19:a7:bd:95:21:8a:ff:28:40:dc:18:b0:d2:a4:
43:c3:8b:0c:e9:26:d7:25:9c:6d:bf:4a:6b:ce:ab:30:f2:41:
b4:f9:fa:19:7f:e6:a0:17:8a:15:8c:15:0f:94:e5:e5:36:fd:
e1:af:68:b4:fb:57:71:71:de:55:5f:41:32:de:b3:fe:a8:0f:
8b:71:0f:16:20:a5:e4:4b:fd:48:41:86:72:f0:9c:17:30:34:
c3:bf:4a:e1:a4:6e:8f:ec:bb:24:0b:4d:f1:2a:e0:81:ee:af:
50:0e:2a:69
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRBMTYxMTAvBgNVBAUTKEIxMzgzMkZDQTQ5MzQ0OTYyMzZBQzM4OTQ5OThDM0RE
NTEzRDdDMDkwHhcNMjQxMTIyMDQzNjQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQwMGE1Zi00MjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4R3+tfDgrhJknzJIyUO35ZG0Hq2vES8u7zRKKi+cz6F3G/cFojiAnEU2YnVZ
49W6RQqGGBRcmzJnf8ZhirCqAnimV9ThTfWgTFlsXOFq6KHLEtcx6VGaZi5WiXvt
rz1ym9ZZABBsoEtZq9biZgXadP3+pauexa0W7RZB5w4WJWL/en/Jl5kKK3BKV6IS
NfnNXD3rfJnuplvafeKsdcMQ1twwV6BANMbCsecQeOGn/ovSKHeOiMjRsn7rCFo0
mrCx/q+p8ISftfXctnZhtuY4pOOtszfmsasM5V2XQAtxLJHq0eaE6wvd5wfFI9xx
YeCgaMFjALLFD2YVMxRQx+wESQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHyKnwyW
vizLnMynvsdsJDri29gHMB8GA1UdIwQYMBaAFLE4Mvykk0SWI2rDiUmYw91RPXwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEExNi9CQUU3RUZGRUND
NTMxMUVEODFGNEM1MTVDNEY5QUUwMi9zVGd5X0tTVFJKWWphc09KU1pqRDNWRTlm
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NUZ3lfS1NUUkpZamFzT0pTWmpEM1ZFOWZBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDRBMTYvQkFFN0VGRkVDQzUzMTFFRDgxRjRDNTE1QzRGOUFFMDIvNjFEQkU0MjJB
ODhCMTFFRkFGNTA3OTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALLHmQwDQYJKoZIhvcNAQELBQADggEBADLa+KAHJufMEInl
sVI/9aCaykaT0Jtq9VgGgOvczrwsdBEW1lt0TtiR5WTUH6R+dUxBoiXIoMkI3cE2
SHcydez96YSt2SAk2OrqMdGHSZJy35zHkFK98IGd1QudetsHO5BI0GLhEfDDen13
Rf2RzZvwc2BSnXZaaR1DER4TLNPg/GAMHTtT22jzqql+f4KkvarGo1UZp72VIYr/
KEDcGLDSpEPDiwzpJtclnG2/SmvOqzDyQbT5+hl/5qAXihWMFQ+U5eU2/eGvaLT7
V3Fx3lVfQTLes/6oD4txDxYgpeRL/UhBhnLwnBcwNMO/SuGkbo/suyQLTfEq4IHu
r1AOKmk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:48 2025 by rpki-client