Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa
File: EC7311FEE5C311EEBF217685C4F9AE02.roa (raw, json)
Hash identifier: qmFjn7wAfMqWkF24WNm8IekVR4ecxQdIio3RLzGcoHo=
Subject key identifier: F3:5E:05:0A:BB:4C:B4:60:93:45:8F:C5:DB:D2:00:49:66:7F:F7:FC
Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A
Certificate serial: 72
Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa
Signing time: Fri 25 Oct 2024 05:49:32 +0000
ROA not before: Fri 25 Oct 2024 05:49:32 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 133760
IP address blocks: 45.115.50.0/23 maxlen: 23
103.41.58.0/23 maxlen: 23
103.41.59.0/24 maxlen: 24
103.55.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A
Validity
Not Before: Oct 25 05:49:32 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671b316c-9a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:c5:33:98:0b:14:b1:58:da:5d:27:9a:9d:
b0:ec:1d:e7:55:be:d7:d2:40:08:12:60:e3:2d:b5:
cc:69:ef:12:c4:9b:d5:e2:39:96:ca:99:68:c6:c2:
8f:11:40:a6:dc:0d:3b:fb:42:c8:a9:cb:88:a0:57:
12:47:96:99:97:cc:26:32:50:78:27:e7:77:42:1c:
cf:ab:39:ac:6c:d1:42:fb:26:22:f6:26:a1:96:ae:
60:27:fb:f6:71:84:ed:52:7b:d1:e5:1b:e4:99:a5:
a4:4b:99:5c:62:05:40:3e:4b:a7:68:d4:53:9a:17:
0d:35:34:74:5d:c8:14:08:75:f1:df:dc:b9:8d:df:
48:4f:49:2d:42:42:96:84:87:2f:71:2b:33:b7:ec:
15:5a:44:36:ad:9b:3a:02:69:48:90:11:c4:f0:f2:
53:b2:77:16:75:34:2a:a5:cc:e2:8d:71:33:c1:32:
83:70:01:62:9c:81:9a:a0:53:d6:77:87:7f:ea:6d:
75:06:e5:b5:4a:63:4e:50:5b:d0:84:0e:03:5e:e8:
32:86:fc:06:5e:35:ed:49:50:5e:0d:35:13:1e:72:
39:53:06:f6:71:03:a2:3f:aa:58:d9:ea:8c:24:11:
32:95:c0:d8:87:00:53:6b:e7:26:95:9d:7f:9b:c1:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5E:05:0A:BB:4C:B4:60:93:45:8F:C5:DB:D2:00:49:66:7F:F7:FC
X509v3 Authority Key Identifier:
keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.50.0/23
103.41.58.0/23
103.55.54.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:91:61:69:b4:8e:35:c3:68:ff:03:1d:9c:12:26:0d:b3:f8:
6c:8d:8c:a7:e2:9f:bf:c4:53:fe:78:9f:c3:c8:68:08:c3:1d:
59:be:9f:e6:79:05:3f:18:0a:9b:60:74:40:d9:22:28:67:47:
be:35:31:2e:b2:7b:2f:a2:27:14:53:14:a2:d9:9b:f0:d8:46:
ce:b1:62:e6:77:e3:86:27:f9:ea:de:6a:92:70:63:ff:f1:54:
b4:cf:66:57:d0:d3:45:4f:7f:0d:9d:c3:2f:b4:5c:18:6d:b1:
f5:ff:50:60:65:fd:a4:4b:87:62:56:aa:9b:ce:3a:2f:e0:f9:
7c:a2:b4:00:9b:5b:98:1d:76:ee:00:6d:ee:c4:c9:c2:b6:6e:
a8:b2:b1:86:08:eb:08:47:45:ac:44:cb:5f:8a:66:8f:a8:32:
e3:fa:26:74:e1:76:da:60:0b:c1:b2:7f:14:02:6c:28:85:40:
03:a8:16:aa:6b:9c:6c:2b:98:6e:d0:2c:e6:61:bf:00:cf:22:
27:14:e5:c5:af:89:bf:a4:54:7f:1f:96:7a:0b:df:93:23:df:
15:a6:2c:28:37:42:47:12:d6:2b:76:8c:c9:91:b1:74:7a:ef:
4c:be:fe:a3:78:02:da:60:d7:aa:32:50:ba:17:5e:29:c2:77:
33:6c:3e:ec
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
REZGMjExMC8GA1UEBRMoRjgzREMzQTI0NkQxMjE1MUFDODdBNzcyQ0VDQTBFREQy
MTVGODYyQTAeFw0yNDEwMjUwNTQ5MzJaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MWIzMTZjLTlhNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDphsUzmAsUsVjaXSeanbDsHedVvtfSQAgSYOMttcxp7xLEm9XiOZbKmWjGwo8R
QKbcDTv7Qsipy4igVxJHlpmXzCYyUHgn53dCHM+rOaxs0UL7JiL2JqGWrmAn+/Zx
hO1Se9HlG+SZpaRLmVxiBUA+S6do1FOaFw01NHRdyBQIdfHf3LmN30hPSS1CQpaE
hy9xKzO37BVaRDatmzoCaUiQEcTw8lOydxZ1NCqlzOKNcTPBMoNwAWKcgZqgU9Z3
h3/qbXUG5bVKY05QW9CEDgNe6DKG/AZeNe1JUF4NNRMecjlTBvZxA6I/qljZ6owk
ETKVwNiHAFNr5yaVnX+bwTZNAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQU814FCrtM
tGCTRY/F29IASWZ/9/wwHwYDVR0jBBgwFoAU+D3DokbRIVGsh6dyzsoO3SFfhiow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURERkYyL0M5QUYyOTM0RTVD
MTExRUU5OERCRTk2MkM0RjlBRTAyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhp
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLUQzRG9rYlJJVkdzaDZkeXpzb08zU0ZmaGlvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
REZGMi9DOUFGMjkzNEU1QzExMUVFOThEQkU5NjJDNEY5QUUwMi9FQzczMTFGRUU1
QzMxMUVFQkYyMTc2ODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAS1zMgMEAWcpOgMEAWc3NjANBgkqhkiG9w0BAQsFAAOCAQEA
sZFhabSONcNo/wMdnBImDbP4bI2Mp+Kfv8RT/nifw8hoCMMdWb6f5nkFPxgKm2B0
QNkiKGdHvjUxLrJ7L6InFFMUotmb8NhGzrFi5nfjhif56t5qknBj//FUtM9mV9DT
RU9/DZ3DL7RcGG2x9f9QYGX9pEuHYlaqm846L+D5fKK0AJtbmB127gBt7sTJwrZu
qLKxhgjrCEdFrETLX4pmj6gy4/omdOF22mALwbJ/FAJsKIVAA6gWqmucbCuYbtAs
5mG/AM8iJxTlxa+Jv6RUfx+WegvfkyPfFaYsKDdCRxLWK3aMyZGxdHrvTL7+o3gC
2mDXqjJQuhdeKcJ3M2w+7A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:01 2025 by rpki-client