Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/1856F8E8CCC411EFBDE7CF74C4F9AE02.roa
File: 1856F8E8CCC411EFBDE7CF74C4F9AE02.roa (raw, json)
Hash identifier: Y01w5gm4XEkWiJJ++96hvfqzFt3ILa8sFuFGF5KXcKs=
Subject key identifier: 4C:52:B7:6D:C9:AB:E0:96:11:00:95:C7:8B:A3:C7:3A:1D:F2:3A:F0
Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial: 10C5
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/1856F8E8CCC411EFBDE7CF74C4F9AE02.roa
Signing time: Tue 07 Jan 2025 06:53:26 +0000
ROA not before: Tue 07 Jan 2025 06:53:26 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 136406
IP address blocks: 103.86.193.0/24 maxlen: 24
103.86.194.0/24 maxlen: 24
103.86.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4293 (0x10c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Validity
Not Before: Jan 7 06:53:26 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=677ccf66-04be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:b5:31:e7:a4:55:fa:6e:6f:6d:cd:97:ae:
a9:6d:6e:e2:27:b5:02:bf:84:0f:4a:02:89:53:b6:
3a:5f:45:56:2c:53:ff:22:2f:57:26:35:2c:9b:c7:
91:58:60:b4:a2:af:30:1a:2a:96:d3:0a:47:0f:ee:
31:40:0c:3e:af:e1:f1:3e:4e:f9:82:be:19:d0:c0:
fa:41:c3:64:91:9e:f2:f9:26:cc:17:8e:b5:7b:12:
8d:ba:dd:72:35:41:74:83:18:ac:f4:a6:57:35:50:
cf:b5:5e:22:80:4c:12:04:eb:ef:ed:03:31:d5:80:
98:9e:e2:84:1b:dd:45:7f:b8:47:9d:57:73:04:a6:
fc:40:9c:7f:16:89:38:0f:2a:74:fb:52:2a:5e:82:
9f:a8:ae:3b:72:07:00:0e:1c:61:30:c4:7f:a0:82:
e2:92:97:42:6c:40:25:b7:a9:c4:d0:dc:ea:4d:3a:
eb:7b:af:d4:9b:44:74:b2:7f:02:f8:f9:60:15:21:
0f:c5:1b:56:b5:78:fb:f9:94:92:ab:51:9c:f7:ca:
ba:3e:36:3e:07:ad:93:50:81:27:e9:de:1e:78:80:
8f:ad:fb:47:aa:54:7e:77:76:23:fe:a1:8e:a1:14:
c3:a0:36:67:4e:e5:48:87:f0:05:38:df:ca:d2:04:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:B7:6D:C9:AB:E0:96:11:00:95:C7:8B:A3:C7:3A:1D:F2:3A:F0
X509v3 Authority Key Identifier:
keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/1856F8E8CCC411EFBDE7CF74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.193.0-103.86.195.255
Signature Algorithm: sha256WithRSAEncryption
12:e3:b9:80:99:74:7a:35:87:20:14:a4:e6:61:19:55:76:9d:
74:8b:4e:b5:18:a9:b8:85:b9:dd:e4:cc:45:3b:72:c6:0c:74:
f8:33:af:c1:9b:c4:85:36:b6:3e:a2:89:57:96:51:9a:62:4e:
2e:2b:76:c5:eb:7d:67:e1:1e:79:cf:40:63:7d:55:4f:80:d4:
90:8c:8c:58:e3:72:54:8b:2f:ad:ca:ec:9f:77:5c:12:3d:08:
50:c8:e4:ff:c4:89:7d:e3:b8:25:4c:9d:d8:a6:b5:bf:91:f1:
a8:f3:37:00:f0:25:ec:9b:03:ff:b9:2c:ee:84:f8:6e:e5:fb:
43:63:8f:ec:a6:6b:ee:0a:93:eb:ba:1a:44:ce:16:05:1a:4e:
31:52:9c:bf:ae:4c:88:91:d6:83:42:0a:0d:9e:5f:4e:ec:99:
70:45:30:9a:ea:db:02:67:ee:90:d0:fa:ed:04:7d:35:22:87:
72:a9:a9:98:af:e8:25:82:ff:f6:3e:96:ee:0c:ca:1d:68:53:
2f:51:fd:48:18:8c:2c:a6:e6:df:fb:92:44:9a:82:38:59:19:
69:91:02:8d:36:8f:aa:c0:5f:d5:06:61:e8:4c:95:c4:dd:9f:
a6:93:03:b4:b9:0e:29:db:65:a4:a3:33:c0:32:99:33:0f:8c:
9d:c9:0b:b5
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICEMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0
RUVFMUI3NDIwHhcNMjUwMTA3MDY1MzI2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdjY2Y2Ni0wNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqeG1MeekVfpub23Nl66pbW7iJ7UCv4QPSgKJU7Y6X0VWLFP/Ii9XJjUsm8eR
WGC0oq8wGiqW0wpHD+4xQAw+r+HxPk75gr4Z0MD6QcNkkZ7y+SbMF461exKNut1y
NUF0gxis9KZXNVDPtV4igEwSBOvv7QMx1YCYnuKEG91Ff7hHnVdzBKb8QJx/Fok4
Dyp0+1IqXoKfqK47cgcADhxhMMR/oILikpdCbEAlt6nE0NzqTTrre6/Um0R0sn8C
+PlgFSEPxRtWtXj7+ZSSq1Gc98q6PjY+B62TUIEn6d4eeICPrftHqlR+d3Yj/qGO
oRTDoDZnTuVIh/AFON/K0gQ3rwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFExSt23J
q+CWEQCVx4ujxzod8jrwMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG
MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvMTg1NkY4RThD
Q0M0MTFFRkJERTdDRjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAGdWwQMEAmdWwDANBgkqhkiG9w0BAQsFAAOCAQEAEuO5
gJl0ejWHIBSk5mEZVXaddItOtRipuIW53eTMRTtyxgx0+DOvwZvEhTa2PqKJV5ZR
mmJOLit2xet9Z+Eeec9AY31VT4DUkIyMWONyVIsvrcrsn3dcEj0IUMjk/8SJfeO4
JUyd2Ka1v5HxqPM3APAl7JsD/7ks7oT4buX7Q2OP7KZr7gqT67oaRM4WBRpOMVKc
v65MiJHWg0IKDZ5fTuyZcEUwmurbAmfukND67QR9NSKHcqmpmK/oJYL/9j6W7gzK
HWhTL1H9SBiMLKbm3/uSRJqCOFkZaZECjTaPqsBf1QZh6EyVxN2fppMDtLkOKdtl
pKMzwDKZMw+MnckLtQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:10:04 2025 by rpki-client