Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
File: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (raw, json)
Hash identifier: TzEFfXnFIJI/HiCD7F67qAjR58Zm862BeDJrXas4ZdM=
Subject key identifier: 23:35:AB:F3:7B:49:5F:5B:B0:02:91:F3:56:71:CB:47:52:EF:8F:1F
Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial: 03A8
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
Signing time: Sun 01 Dec 2024 01:03:30 +0000
ROA not before: Sun 01 Dec 2024 01:03:29 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 140900
IP address blocks: 103.179.246.0/24 maxlen: 24
103.179.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Validity
Not Before: Dec 1 01:03:29 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=674bb5e1-5490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:e5:7e:0d:1a:a6:c4:12:cb:cb:0f:39:9b:
d3:35:8a:ea:8b:06:37:f4:67:ea:89:a3:73:8a:4b:
d0:b3:1d:9b:41:9a:4d:ff:2e:e2:97:cc:8a:59:da:
4b:73:3d:85:af:df:82:ee:98:82:c0:a7:1f:2b:ed:
ac:30:cf:1e:6e:35:48:0d:65:3c:28:96:4c:e5:e4:
ff:98:0c:a2:53:19:06:cd:44:14:22:02:0f:a7:bf:
83:91:10:c0:dc:50:da:60:b2:a9:cb:aa:e8:0e:04:
4c:44:bb:ab:58:81:03:51:9c:14:90:ee:dc:d5:b7:
a0:14:2d:60:ba:96:17:63:e3:35:9e:e2:c2:fe:a9:
e3:cb:e3:ec:91:49:c9:0a:29:4a:9d:62:6b:0a:88:
a0:c0:52:ae:b6:3a:b1:1a:e1:83:26:72:c1:f5:18:
6e:9e:58:95:d0:61:90:14:db:56:08:c2:90:4e:d4:
a6:c0:d2:89:9a:9f:05:b5:e4:ea:de:f0:cf:22:f2:
fd:f8:57:9a:54:55:fb:e4:d4:fe:d3:00:de:fa:41:
38:2a:e8:da:ec:a9:f7:7f:2a:f4:fa:92:f4:90:dd:
93:01:de:e3:f4:72:42:80:11:3a:43:0c:08:04:20:
97:e2:1b:2b:b2:48:d5:fd:57:2f:dd:b2:60:ea:f3:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:35:AB:F3:7B:49:5F:5B:B0:02:91:F3:56:71:CB:47:52:EF:8F:1F
X509v3 Authority Key Identifier:
keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.246.0/23
Signature Algorithm: sha256WithRSAEncryption
14:98:4b:ce:6e:3c:9b:90:1b:df:e7:8c:ea:73:f3:72:d9:8f:
74:34:98:32:8e:6d:2b:25:ee:b9:91:c7:eb:c4:f1:d0:4a:60:
bd:fa:05:f8:b4:9f:80:cc:4d:a5:7b:90:b1:ca:55:2f:e8:a3:
e9:3e:48:26:a9:49:86:79:ac:a2:4d:b7:52:3a:3a:50:10:89:
d2:6e:83:aa:33:d7:7a:45:12:d1:12:54:ac:53:12:f7:53:0c:
d5:38:1a:38:0f:2e:72:1d:c6:24:1b:85:7e:52:a0:06:1e:9c:
3f:ff:fb:af:cc:4e:86:f9:c4:ad:a4:a9:34:a5:71:2c:e1:24:
1d:ab:8a:4c:2b:7e:86:72:4a:c9:7b:b7:d7:4c:e0:95:3c:dc:
db:ca:e4:fb:6a:ba:99:e4:ef:4c:9c:13:87:3c:55:5f:a6:7c:
fa:07:02:1c:ba:11:0a:6d:1e:c5:91:78:87:16:8e:bc:18:a6:
d0:20:e1:d8:7f:e4:66:e6:2b:d7:a6:1d:85:d4:2e:6d:15:da:
25:05:f7:a2:20:71:02:b5:94:91:0d:b1:13:12:21:2b:3e:7f:
9e:20:c9:60:d3:7d:19:95:47:e8:fa:43:ee:b8:ee:88:c9:c1:
48:e3:20:91:53:e2:16:fd:57:b1:3d:a8:97:1e:cc:39:ac:9d:
47:1d:e3:c2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBBQUQxMTAvBgNVBAUTKDAwMTczNDdEQTNGMzVCNzUzOTUxQkRGNEIxQjA3Rjc2
MUUzRDlFQkYwHhcNMjQxMjAxMDEwMzI5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRiYjVlMS01NDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyNHlfg0apsQSy8sPOZvTNYrqiwY39GfqiaNzikvQsx2bQZpN/y7il8yKWdpL
cz2Fr9+C7piCwKcfK+2sMM8ebjVIDWU8KJZM5eT/mAyiUxkGzUQUIgIPp7+DkRDA
3FDaYLKpy6roDgRMRLurWIEDUZwUkO7c1begFC1gupYXY+M1nuLC/qnjy+PskUnJ
CilKnWJrCoigwFKutjqxGuGDJnLB9RhunliV0GGQFNtWCMKQTtSmwNKJmp8FteTq
3vDPIvL9+FeaVFX75NT+0wDe+kE4Kuja7Kn3fyr0+pL0kN2TAd7j9HJCgBE6QwwI
BCCX4hsrskjV/Vcv3bJg6vOcSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCM1q/N7
SV9bsAKR81Zxy0dS748fMB8GA1UdIwQYMBaAFAAXNH2j81t1OVG99LGwf3YePZ6/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEFBRC8wREU1QjQwRTc5
RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelczVTVVYjMwc2JCX2RoNDlu
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCYzBmYVB6VzNVNVViMzBzYkJfZGg0OW5yOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTBBQUQvMERFNUI0MEU3OUUyMTFFQ0I1MDEzMTQ4QzRGOUFFMDIvMEJFNkYzOUU3
OUU2MTFFQzk5REExQjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFns/YwDQYJKoZIhvcNAQELBQADggEBABSYS85uPJuQG9/n
jOpz83LZj3Q0mDKObSsl7rmRx+vE8dBKYL36Bfi0n4DMTaV7kLHKVS/oo+k+SCap
SYZ5rKJNt1I6OlAQidJug6oz13pFEtESVKxTEvdTDNU4GjgPLnIdxiQbhX5SoAYe
nD//+6/MTob5xK2kqTSlcSzhJB2rikwrfoZySsl7t9dM4JU83NvK5Ptqupnk70yc
E4c8VV+mfPoHAhy6EQptHsWReIcWjrwYptAg4dh/5GbmK9emHYXULm0V2iUF96Ig
cQK1lJENsRMSISs+f54gyWDTfRmVR+j6Q+647ojJwUjjIJFT4hb9V7E9qJcezDms
nUcd48I=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:57:11 2025 by rpki-client