Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa
File: 8698CD28A42211EB91621734C4F9AE02.roa (raw, json)
Hash identifier: liguL5yWelfphfIz9rHVaKh3TqmzzrhEVoBWguDMI9M=
Subject key identifier: C7:70:CC:FD:9C:86:D4:B6:64:3B:40:EF:27:D7:0C:19:EF:FB:0C:3D
Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68
Certificate serial: 088E
Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa
Signing time: Wed 04 Dec 2024 20:29:10 +0000
ROA not before: Wed 04 Dec 2024 20:29:10 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137990
IP address blocks: 103.104.100.0/22 maxlen: 22
103.104.100.0/24 maxlen: 24
103.104.101.0/24 maxlen: 24
103.104.102.0/24 maxlen: 24
103.104.103.0/24 maxlen: 24
202.43.224.0/24 maxlen: 24
2402:940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190 (0x88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68
Validity
Not Before: Dec 4 20:29:10 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6750bb96-3f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:d2:d4:32:5c:e9:ed:ee:74:a0:71:58:36:
9f:5a:43:e4:66:9b:80:52:ab:59:7f:ff:ce:18:93:
e9:bc:27:86:f4:a2:2e:de:1d:6a:dc:b2:ae:f6:c9:
6a:56:12:ae:e1:b4:46:5d:c9:3d:7d:8b:b7:f3:b0:
9a:0f:1c:6e:52:c5:5c:17:15:35:e5:b9:74:f9:1d:
a3:5a:aa:0f:7d:fa:10:9f:92:4f:11:de:df:b6:97:
59:e6:af:c7:64:ee:45:ef:cb:7b:6c:ac:eb:bd:bf:
02:e3:3f:7c:95:a7:f2:17:ce:fa:2e:01:01:9c:bc:
90:54:e6:22:1a:7b:c2:f8:e4:1b:6d:57:5b:2c:1d:
33:91:c1:83:41:0a:58:0c:0f:7a:f5:ba:d7:bb:01:
0e:38:e1:8c:8e:91:8b:5c:bf:7d:6f:c7:3c:5b:b2:
49:be:ed:2e:70:cc:a1:47:6f:75:1f:a7:03:34:05:
99:02:77:69:21:ec:d9:58:af:30:a4:f3:39:6d:dc:
62:df:07:12:2a:a9:68:24:3b:c2:22:c6:ec:44:82:
b2:58:f5:da:96:a2:ed:62:13:a4:26:6c:21:4d:a9:
16:f2:1b:87:11:9a:93:9b:00:7b:84:2a:5d:f6:f0:
06:9c:20:45:d4:f7:f4:28:a8:73:87:59:96:bc:0b:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:70:CC:FD:9C:86:D4:B6:64:3B:40:EF:27:D7:0C:19:EF:FB:0C:3D
X509v3 Authority Key Identifier:
keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.100.0/22
202.43.224.0/24
IPv6:
2402:940::/32
Signature Algorithm: sha256WithRSAEncryption
2c:04:63:e4:ee:82:b5:16:90:ac:02:b2:9a:a5:a2:ba:2f:de:
ec:00:48:c8:57:67:0d:ef:75:ce:2b:37:67:63:38:28:42:f1:
8f:c2:dc:83:21:9e:51:66:6e:6f:41:f7:f1:ba:e4:2a:44:a4:
3e:6b:ba:dd:de:dc:92:e5:d9:f2:a5:7f:7a:a6:40:bb:57:68:
8e:41:34:84:14:65:f3:31:03:ba:4a:d9:3c:59:3c:0d:29:f1:
65:1d:cb:b7:7b:b9:26:d6:32:09:f9:44:c3:2a:3d:00:41:5f:
6a:ee:24:90:94:6f:b3:3b:2b:b8:79:e4:a8:99:a6:11:73:c8:
81:df:bd:de:08:dc:5f:ed:16:f3:25:ef:5c:7a:7c:77:2e:50:
f0:57:05:92:2e:09:88:0c:52:37:86:4b:4c:4b:5e:3d:89:1d:
a4:8f:39:d7:9d:d9:d8:d3:21:c4:8b:52:5e:ca:91:48:c5:8f:
85:e9:7e:aa:24:ad:ea:d0:9f:b6:f7:f9:5a:4d:ba:4f:df:fd:
51:76:97:3c:4e:2d:5a:b5:1a:e9:51:00:f5:c8:17:65:15:6d:
4c:40:48:91:70:8d:8c:9b:7a:26:26:3a:ad:41:87:f4:af:6e:
ff:4a:af:a7:c7:ae:1d:d3:8d:71:cd:60:06:33:80:ba:20:1e:
7b:93:a0:9b
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3
NUMzRDVDNjgwHhcNMjQxMjA0MjAyOTEwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUwYmI5Ni0zZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQDS1DJc6e3udKBxWDafWkPkZpuAUqtZf//OGJPpvCeG9KIu3h1q3LKu9slq
VhKu4bRGXck9fYu387CaDxxuUsVcFxU15bl0+R2jWqoPffoQn5JPEd7ftpdZ5q/H
ZO5F78t7bKzrvb8C4z98lafyF876LgEBnLyQVOYiGnvC+OQbbVdbLB0zkcGDQQpY
DA969brXuwEOOOGMjpGLXL99b8c8W7JJvu0ucMyhR291H6cDNAWZAndpIezZWK8w
pPM5bdxi3wcSKqloJDvCIsbsRIKyWPXalqLtYhOkJmwhTakW8huHEZqTmwB7hCpd
9vAGnCBF1Pf0KKhzh1mWvAuo4wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMdwzP2c
htS2ZDtA7yfXDBnv+ww9MB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw
NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY
R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTg5Q0QvM0MwRDRBMTZCMDU1MTFFQUEwNDVCODBFQzRGOUFFMDIvODY5OENEMjhB
NDIyMTFFQjkxNjIxNzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJnaGQDBADKK+AwDQQCAAIwBwMFACQCCUAwDQYJKoZIhvcN
AQELBQADggEBACwEY+TugrUWkKwCspqlorov3uwASMhXZw3vdc4rN2djOChC8Y/C
3IMhnlFmbm9B9/G65CpEpD5rut3e3JLl2fKlf3qmQLtXaI5BNIQUZfMxA7pK2TxZ
PA0p8WUdy7d7uSbWMgn5RMMqPQBBX2ruJJCUb7M7K7h55KiZphFzyIHfvd4I3F/t
FvMl71x6fHcuUPBXBZIuCYgMUjeGS0xLXj2JHaSPOded2djTIcSLUl7KkUjFj4Xp
fqokrerQn7b3+VpNuk/f/VF2lzxOLVq1GulRAPXIF2UVbUxASJFwjYybeiYmOq1B
h/Svbv9Kr6fHrh3TjXHNYAYzgLogHnuToJs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:36:52 2025 by rpki-client