Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa
File: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (raw, json)
Hash identifier: wiUyotEbzoedB/Q0gb7W+sDI78aGSUuE5BSMkTbJBXA=
Subject key identifier: 10:60:6E:33:C6:B6:CB:FC:17:37:C5:EA:F3:45:34:2C:B9:35:93:43
Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
Certificate serial: 09E7
Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa
Signing time: Thu 22 Feb 2024 20:58:35 +0000
ROA not before: Thu 22 Feb 2024 20:58:35 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 10204
IP address blocks: 103.51.50.0/23 maxlen: 23
103.51.50.0/24 maxlen: 24
103.51.51.0/24 maxlen: 24
202.6.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2535 (0x9e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
Validity
Not Before: Feb 22 20:58:35 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d7b57b-acdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:e0:4d:28:0d:2d:20:13:1e:70:4c:c0:31:
35:1b:21:85:53:0f:b5:b2:bb:92:04:4c:3e:88:a3:
04:e8:38:e5:95:4c:85:b4:e5:29:47:3b:54:c0:f8:
39:f7:06:4e:f6:a7:00:16:5a:6b:d2:b9:d8:95:a6:
44:fb:a2:4e:85:02:f9:0f:8f:f0:2e:9a:95:1b:7e:
1c:df:66:56:79:19:ef:26:b4:5f:e3:88:b6:a3:39:
5e:75:56:ff:45:4a:46:89:08:e6:fa:98:08:f5:8b:
25:9b:a5:1d:a2:53:d3:e5:03:1c:a7:f2:ca:4c:df:
b0:1a:a3:f9:48:d5:81:53:8d:94:f8:98:9e:a5:0d:
1e:17:8c:f8:88:33:93:51:67:7b:40:1b:d6:52:15:
0a:89:56:ef:6a:80:45:cc:96:66:b1:de:e5:97:41:
67:5a:e6:e3:99:a1:6d:fb:03:52:4d:cc:5f:af:5d:
39:9b:7c:79:15:cc:21:17:9d:fb:71:1e:1c:4d:da:
a0:53:33:e1:43:20:e5:96:2e:fa:c8:7e:77:9d:f8:
58:cd:08:1d:c4:53:30:75:02:b2:da:82:4c:2e:39:
c4:23:35:fd:64:81:ea:6e:38:22:9f:57:da:94:a0:
e2:7b:32:1b:72:88:79:93:a5:f9:9b:22:5f:5d:a3:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:60:6E:33:C6:B6:CB:FC:17:37:C5:EA:F3:45:34:2C:B9:35:93:43
X509v3 Authority Key Identifier:
keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.50.0/23
202.6.248.0/22
Signature Algorithm: sha256WithRSAEncryption
85:bd:11:c1:8f:44:0e:4f:e9:a9:23:73:86:41:65:92:a6:bc:
be:32:4c:de:bd:e3:5e:bd:3f:82:5e:60:fc:1a:ef:b5:3e:66:
54:bb:81:fd:cf:7e:b6:53:e3:92:05:0b:9c:05:9a:42:05:de:
04:e9:e8:78:3a:a9:4f:4c:e8:fd:a9:62:38:96:a6:41:8d:fb:
38:6c:23:09:29:11:bb:72:d2:ab:f9:68:d9:40:95:88:af:61:
79:b9:a3:4a:64:76:fd:a1:0e:1f:11:b4:80:fe:9b:7a:e8:ba:
a2:b2:da:e5:59:7d:5b:b6:af:ad:84:11:22:e0:47:2e:52:8f:
c6:67:a8:7a:ab:48:c5:e8:b8:96:63:3e:64:35:cb:0b:f7:8b:
ed:c6:e5:5e:b5:67:7b:97:d6:2b:1f:5d:37:b7:4d:a8:48:da:
64:1f:f7:49:eb:89:2b:5a:5f:4c:e7:77:56:ee:bc:6e:24:77:
b6:63:c4:33:1e:ed:98:31:e5:94:67:e8:16:51:e7:9d:9a:d4:
f8:19:58:56:a6:09:5a:59:6c:47:77:ff:0c:6b:ce:3a:ff:4d:
c6:3e:7d:e7:37:c5:14:be:07:51:93:e3:b1:a3:42:53:b9:64:
cc:32:07:fd:4b:74:db:73:46:e7:cd:69:17:19:40:6a:55:04:
53:98:8c:d0
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy
M0Y1NUNDOEQwHhcNMjQwMjIyMjA1ODM1WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQ3YjU3Yi1hY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyTTgTSgNLSATHnBMwDE1GyGFUw+1sruSBEw+iKME6DjllUyFtOUpRztUwPg5
9wZO9qcAFlpr0rnYlaZE+6JOhQL5D4/wLpqVG34c32ZWeRnvJrRf44i2ozledVb/
RUpGiQjm+pgI9Yslm6UdolPT5QMcp/LKTN+wGqP5SNWBU42U+JiepQ0eF4z4iDOT
UWd7QBvWUhUKiVbvaoBFzJZmsd7ll0FnWubjmaFt+wNSTcxfr105m3x5FcwhF537
cR4cTdqgUzPhQyDlli76yH53nfhYzQgdxFMwdQKy2oJMLjnEIzX9ZIHqbjgin1fa
lKDiezIbcoh5k6X5myJfXaMGfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBBgbjPG
tsv8FzfF6vNFNCy5NZNDMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5
MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTA4NzUvNkQ5MUFBQkM1OTMxMTFFQUFBMzFCNDBBQzRGOUFFMDIvRjFGQzc0REU3
REUxMTFFRUIxQkZENjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAFnMzIDBALKBvgwDQYJKoZIhvcNAQELBQADggEBAIW9EcGP
RA5P6akjc4ZBZZKmvL4yTN694169P4JeYPwa77U+ZlS7gf3PfrZT45IFC5wFmkIF
3gTp6Hg6qU9M6P2pYjiWpkGN+zhsIwkpEbty0qv5aNlAlYivYXm5o0pkdv2hDh8R
tID+m3rouqKy2uVZfVu2r62EESLgRy5Sj8ZnqHqrSMXouJZjPmQ1ywv3i+3G5V61
Z3uX1isfXTe3TahI2mQf90nriStaX0znd1buvG4kd7ZjxDMe7Zgx5ZRn6BZR552a
1PgZWFamCVpZbEd3/wxrzjr/TcY+fec3xRS+B1GT47GjQlO5ZMwyB/1LdNtzRufN
aRcZQGpVBFOYjNA=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:58:35 2025 by rpki-client