Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/6084E4F217E811EC8A22700DC4F9AE02.roa
File: 6084E4F217E811EC8A22700DC4F9AE02.roa (raw, json)
Hash identifier: /RmAWe3bm7uFqeMNb4uaNurOTOXrUZgieKkDs6gSDuQ=
Subject key identifier: ED:54:E9:09:7B:F3:18:C0:5F:DA:ED:A8:E1:B5:17:DE:0D:DA:1D:E5
Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
Certificate serial: 0480
Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/6084E4F217E811EC8A22700DC4F9AE02.roa
Signing time: Fri 25 Oct 2024 00:15:00 +0000
ROA not before: Fri 25 Oct 2024 00:15:00 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 56264
IP address blocks: 103.173.100.0/24 maxlen: 24
103.173.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
Validity
Not Before: Oct 25 00:15:00 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671ae304-4548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:a9:a3:1b:29:e0:29:b8:c5:17:e0:e2:ef:
70:b2:95:19:ad:d6:2f:ee:54:b7:d4:b9:f9:4b:de:
a9:95:30:4f:98:59:1c:b7:7a:62:bf:cb:b5:8b:4a:
0a:f3:9c:85:9f:51:55:5d:a8:41:6e:f1:78:1e:0b:
eb:a9:db:f0:b4:11:10:19:5c:27:09:11:8a:dc:b5:
df:20:14:21:62:1e:1c:dd:53:4c:b6:01:14:02:c6:
ba:0a:3b:14:bd:29:97:ef:9a:f9:ad:e2:fe:ba:7e:
7b:ea:73:58:da:63:b7:3d:6b:30:59:f6:92:9a:9e:
9c:a1:01:ee:2f:6b:35:9b:1d:57:d0:37:cd:e1:b8:
9a:74:9e:af:be:86:e3:0e:22:d4:9f:b7:69:d4:6f:
24:f3:7c:e2:03:bd:58:59:e3:e0:98:c5:e4:d6:09:
5e:04:c3:82:27:5b:3a:23:a1:7d:fe:47:b4:1c:06:
4f:b3:c2:8c:d0:29:0a:37:38:32:c6:70:cd:cc:2f:
61:96:78:07:6c:bf:e1:9a:75:6d:f3:2c:00:c8:e3:
f9:78:d9:fa:97:93:ce:75:41:cc:af:4c:2c:1d:01:
87:30:5e:a5:5f:89:70:35:c2:49:4d:1d:6a:b4:9f:
88:23:b4:bb:55:5b:09:57:66:2f:4e:a1:28:d3:7d:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:E9:09:7B:F3:18:C0:5F:DA:ED:A8:E1:B5:17:DE:0D:DA:1D:E5
X509v3 Authority Key Identifier:
keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/6084E4F217E811EC8A22700DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.100.0/23
Signature Algorithm: sha256WithRSAEncryption
24:d7:2b:b7:a5:50:bd:b3:d5:0a:f9:93:17:a8:ff:5a:97:f8:
eb:80:43:9f:a1:45:e2:91:12:fe:d5:db:35:50:d4:92:23:e9:
81:4c:c1:8c:f1:f5:e0:3c:07:50:b7:99:7f:b9:68:37:69:64:
2a:db:96:b2:f3:87:90:eb:d1:50:85:11:0b:de:80:58:c0:aa:
7f:f0:ac:ef:94:3c:21:b1:e9:6b:99:89:84:b3:fa:4c:9b:9b:
39:3f:27:eb:68:93:4c:ad:9a:3d:2b:19:81:dc:c6:3d:af:1b:
6b:eb:95:1f:d1:6f:2b:d7:a1:a9:67:0c:48:1d:f1:65:bb:97:
44:86:b8:1f:16:c4:95:72:16:9f:49:93:f5:9d:47:0d:36:4e:
64:50:f6:cf:cf:4d:3b:47:17:ea:70:4b:95:7e:fd:f6:57:ef:
74:3d:eb:67:2f:9d:6e:bf:72:2c:c2:00:d9:d9:cc:c4:14:16:
97:0d:93:57:01:4b:5d:54:39:6a:74:8f:73:df:f5:5e:48:0c:
b7:27:91:38:a6:76:ae:e2:ca:c4:11:b9:df:84:e7:95:03:1b:
97:32:df:b9:15:93:d3:0d:19:f1:28:25:c2:cd:b9:cf:63:3d:
c6:84:1c:84:b4:0d:19:f9:72:5e:c7:c5:ed:7d:ee:ec:91:0d:
e3:4b:cc:88
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF
RDA3QjQxMDcwHhcNMjQxMDI1MDAxNTAwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFhZTMwNC00NTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoPSpoxsp4Cm4xRfg4u9wspUZrdYv7lS31Ln5S96plTBPmFkct3piv8u1i0oK
85yFn1FVXahBbvF4HgvrqdvwtBEQGVwnCRGK3LXfIBQhYh4c3VNMtgEUAsa6CjsU
vSmX75r5reL+un576nNY2mO3PWswWfaSmp6coQHuL2s1mx1X0DfN4biadJ6vvobj
DiLUn7dp1G8k83ziA71YWePgmMXk1gleBMOCJ1s6I6F9/ke0HAZPs8KM0CkKNzgy
xnDNzC9hlngHbL/hmnVt8ywAyOP5eNn6l5POdUHMr0wsHQGHMF6lX4lwNcJJTR1q
tJ+II7S7VVsJV2YvTqEo0335WwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO1U6Ql7
8xjAX9rtqOG1F94N2h3lMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3
RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThCNDQvRjNCMTY0QUMxN0U0MTFFQzlCODg0Njg1QzRGOUFFMDIvNjA4NEU0RjIx
N0U4MTFFQzhBMjI3MDBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrWQwDQYJKoZIhvcNAQELBQADggEBACTXK7elUL2z1Qr5
kxeo/1qX+OuAQ5+hReKREv7V2zVQ1JIj6YFMwYzx9eA8B1C3mX+5aDdpZCrblrLz
h5Dr0VCFEQvegFjAqn/wrO+UPCGx6WuZiYSz+kybmzk/J+tok0ytmj0rGYHcxj2v
G2vrlR/RbyvXoalnDEgd8WW7l0SGuB8WxJVyFp9Jk/WdRw02TmRQ9s/PTTtHF+pw
S5V+/fZX73Q962cvnW6/cizCANnZzMQUFpcNk1cBS11UOWp0j3Pf9V5IDLcnkTim
dq7iysQRud+E55UDG5cy37kVk9MNGfEoJcLNuc9jPcaEHIS0DRn5cl7Hxe197uyR
DeNLzIg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:35:21 2025 by rpki-client