Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa
File: 67A55414D56911EFB3E08134C4F9AE02.roa (raw, json)
Hash identifier: 6JpjDff62wDTfk1naPEndRnRsudFZskUVlbVd/hGOl8=
Subject key identifier: CB:D3:8E:74:4A:CD:CE:93:AD:1A:F8:B3:F5:B7:F7:E9:8A:7B:60:E5
Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial: 02F2
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa
Signing time: Sat 18 Jan 2025 06:56:56 +0000
ROA not before: Sat 18 Jan 2025 06:56:56 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 153494
IP address blocks: 45.121.56.0/22 maxlen: 24
103.61.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 754 (0x2f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Validity
Not Before: Jan 18 06:56:56 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=678b50b8-9137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:c5:f7:75:07:b0:b1:d9:0f:5e:61:32:fe:
70:f8:6d:8c:86:73:a1:e2:ba:b6:d6:e5:45:52:d0:
81:93:ad:f5:42:7b:d1:01:ca:6b:f6:7d:97:53:54:
1c:7d:6a:fe:f3:9f:c1:9c:44:16:74:ab:cd:91:98:
96:4e:a8:b2:ff:19:34:ac:bd:c9:05:a2:81:d9:14:
2c:cb:fa:74:1a:73:f3:ab:1f:fb:c5:5a:db:10:d6:
a3:3a:64:db:cf:8b:3b:9d:e6:48:a0:a3:59:80:f3:
de:89:d0:ff:0d:9a:26:6e:3e:c2:ac:b8:fe:c8:11:
a4:55:1a:8b:04:7a:b7:3b:fc:5a:b8:5c:cf:28:c6:
fe:ce:46:ec:88:e9:80:7e:56:82:72:79:ab:94:6f:
ee:aa:0b:b0:4f:c4:fe:e1:e2:47:cc:47:6d:9f:16:
b7:48:c0:50:81:c4:d9:94:7e:f8:7e:b6:bf:af:d7:
b0:9d:c8:4f:c9:6c:d5:bc:ae:c1:69:be:59:d8:a3:
d7:25:59:55:e7:11:6a:7a:8c:b5:8d:fe:18:d6:76:
78:d3:d8:fc:88:d2:05:b2:c4:9d:a0:4a:53:20:45:
ba:29:10:7f:e3:86:66:b5:0a:98:55:9f:3f:2c:39:
a3:00:05:fb:71:d7:4d:6c:3a:33:f6:87:c2:6d:ad:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D3:8E:74:4A:CD:CE:93:AD:1A:F8:B3:F5:B7:F7:E9:8A:7B:60:E5
X509v3 Authority Key Identifier:
keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.121.56.0/22
103.61.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:da:a5:bd:b9:a5:a8:97:01:15:3d:4d:b1:c3:8f:10:5b:b8:
5f:87:d7:f0:a5:75:f3:3d:7d:c2:ad:45:d7:0a:eb:1c:95:f0:
9e:44:20:74:6a:ba:3d:c1:f6:33:16:80:7a:68:70:d6:82:48:
6f:cd:46:97:77:da:a1:ab:bd:14:83:5d:61:4c:15:08:15:b9:
4d:b4:8e:05:f7:ca:7c:59:79:83:b7:86:58:3d:6e:97:c8:10:
26:4b:48:78:c2:6c:78:bb:06:74:17:7d:85:d8:6a:4d:6e:53:
52:fd:35:74:10:e9:91:25:43:67:b5:ec:5b:99:fa:ba:da:15:
08:b0:94:e6:76:d3:fe:10:af:f8:10:02:07:6b:d8:e1:ce:88:
59:87:30:ef:51:0b:4f:14:7d:4b:fb:fb:58:c3:e9:76:f8:d8:
1b:70:09:e3:69:5d:08:e6:6f:d9:f9:71:e0:54:1a:45:c3:74:
74:69:c6:fc:aa:eb:11:d8:c8:16:31:d1:a6:ab:4c:d0:9f:66:
2d:65:3d:a9:56:1a:0f:95:e5:7e:d4:0c:f8:74:69:64:e7:1f:
85:a4:2e:1e:9f:5f:19:bb:bd:df:a3:22:21:5a:b6:46:68:8f:
1d:ef:4a:9f:90:bf:4c:4f:18:69:db:2a:c6:ad:80:4c:bf:f5:
78:20:cd:dd
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0
NTlEQkZDRTUwHhcNMjUwMTE4MDY1NjU2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzhiNTBiOC05MTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAve7F93UHsLHZD15hMv5w+G2MhnOh4rq21uVFUtCBk631QnvRAcpr9n2XU1Qc
fWr+85/BnEQWdKvNkZiWTqiy/xk0rL3JBaKB2RQsy/p0GnPzqx/7xVrbENajOmTb
z4s7neZIoKNZgPPeidD/DZombj7CrLj+yBGkVRqLBHq3O/xauFzPKMb+zkbsiOmA
flaCcnmrlG/uqguwT8T+4eJHzEdtnxa3SMBQgcTZlH74fra/r9ewnchPyWzVvK7B
ab5Z2KPXJVlV5xFqeoy1jf4Y1nZ409j8iNIFssSdoEpTIEW6KRB/44ZmtQqYVZ8/
LDmjAAX7cddNbDoz9ofCba16ewIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMvTjnRK
zc6TrRr4s/W39+mKe2DlMB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2
MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTZEQjMvNTNBQTFCRDRDNjA4MTFFQzlCMzE0NDZEQzRGOUFFMDIvNjdBNTU0MTRE
NTY5MTFFRkIzRTA4MTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIteTgDBAJnPZAwDQYJKoZIhvcNAQELBQADggEBAKnapb25
paiXARU9TbHDjxBbuF+H1/CldfM9fcKtRdcK6xyV8J5EIHRquj3B9jMWgHpocNaC
SG/NRpd32qGrvRSDXWFMFQgVuU20jgX3ynxZeYO3hlg9bpfIECZLSHjCbHi7BnQX
fYXYak1uU1L9NXQQ6ZElQ2e17FuZ+rraFQiwlOZ20/4Qr/gQAgdr2OHOiFmHMO9R
C08UfUv7+1jD6Xb42BtwCeNpXQjmb9n5ceBUGkXDdHRpxvyq6xHYyBYx0aarTNCf
Zi1lPalWGg+V5X7UDPh0aWTnH4WkLh6fXxm7vd+jIiFatkZojx3vSp+Qv0xPGGnb
KsatgEy/9Xggzd0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:07 2025 by rpki-client