Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa
File: 1E7F6B9603C211EEB2272068C4F9AE02.roa (raw, json)
Hash identifier: T4SsvxhOJ8NmSlYF5F0QyIn0S5EcCqMNYfFfIGZadlw=
Subject key identifier: A7:88:BE:4C:24:4F:B0:C8:93:15:CE:64:4B:EB:A6:9D:CF:93:95:E8
Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
Certificate serial: 0129
Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa
Signing time: Mon 09 Dec 2024 03:06:34 +0000
ROA not before: Mon 09 Dec 2024 03:06:34 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137420
IP address blocks: 103.197.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
Validity
Not Before: Dec 9 03:06:34 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67565eb9-9b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:52:fb:2f:c1:9a:ad:79:09:dc:02:c7:75:
3b:fe:86:64:85:01:b3:c3:4e:de:9a:6b:de:51:5c:
ec:76:f1:0e:dc:9f:21:71:9f:ff:b0:e6:8e:74:f1:
46:ee:37:31:3f:b9:bb:8c:56:6f:d4:7b:96:53:b4:
11:0f:11:a8:53:6f:5a:77:c6:47:4d:2d:6c:8c:74:
b2:b1:8c:5c:69:46:e7:48:2d:50:9c:20:1a:0d:1a:
24:f7:ac:84:a1:a4:41:88:e9:b0:e3:6b:19:3c:5a:
6e:36:6f:39:97:82:f7:16:f2:93:65:c2:f6:1a:e4:
8c:e6:46:f4:71:0e:08:f2:ec:20:32:b3:b6:ce:58:
3a:db:e5:12:15:19:56:08:14:fb:f2:d6:d2:19:db:
43:1d:48:ee:a2:69:cd:fe:10:d6:ac:9a:15:97:6f:
4b:4e:73:3a:e4:00:2b:a9:d5:4e:bc:9f:13:78:fb:
97:b7:4b:89:c1:79:be:43:2a:48:aa:7f:54:0a:df:
d7:f6:9d:ce:89:9b:ce:b9:36:1e:65:c3:57:e6:22:
31:47:51:58:1b:b8:7f:32:da:46:b8:30:62:39:53:
f6:54:94:e7:65:f0:50:ed:3e:fa:c6:24:93:63:7a:
0f:56:fa:69:c2:fb:1a:fa:a1:39:ac:97:c3:00:4f:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:88:BE:4C:24:4F:B0:C8:93:15:CE:64:4B:EB:A6:9D:CF:93:95:E8
X509v3 Authority Key Identifier:
keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1E7F6B9603C211EEB2272068C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.202.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:85:24:f7:fc:be:5b:24:27:8d:93:32:aa:dc:3b:4b:9f:b0:
1f:7a:02:1f:6d:38:e5:cf:ea:10:a1:64:3e:30:b1:09:51:ef:
7c:4d:7a:a7:75:76:89:64:de:c9:5a:21:0a:bd:16:ee:29:68:
31:22:fe:ba:b1:e4:30:21:88:16:6d:67:ff:dd:31:88:7d:a9:
61:ed:d1:5b:14:41:c3:7d:a0:ab:f9:16:4f:28:9b:d2:12:34:
2e:61:15:1b:b6:95:2c:b1:8a:50:fd:9f:54:36:1d:5d:d1:53:
10:71:c9:fd:07:23:3a:7c:ea:44:18:47:40:06:27:71:9a:32:
a6:c9:a5:35:fe:42:3f:0b:85:71:ac:6b:b8:1c:b0:e4:d3:22:
4e:52:18:f7:97:ae:7f:81:9b:df:e6:46:53:e7:de:dd:40:b9:
10:94:30:42:26:39:2a:5b:03:8f:58:6f:ec:5a:7c:cb:f7:92:
04:2f:90:b7:b6:d5:60:00:76:17:b0:71:bd:fc:82:e9:6b:d0:
6f:d3:b3:3c:0a:b4:a7:49:13:da:ef:97:a8:06:ae:9f:d7:dc:
d2:08:da:f4:9f:52:e5:3c:93:c5:65:e3:f4:16:85:ad:4a:eb:
63:49:d3:43:24:c3:fa:99:95:dd:c4:68:95:bd:27:e5:26:e7:
df:c9:f1:3f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC
NTdDNUMxMzEwHhcNMjQxMjA5MDMwNjM0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzU2NWViOS05YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpJS+y/Bmq15CdwCx3U7/oZkhQGzw07emmveUVzsdvEO3J8hcZ//sOaOdPFG
7jcxP7m7jFZv1HuWU7QRDxGoU29ad8ZHTS1sjHSysYxcaUbnSC1QnCAaDRok96yE
oaRBiOmw42sZPFpuNm85l4L3FvKTZcL2GuSM5kb0cQ4I8uwgMrO2zlg62+USFRlW
CBT78tbSGdtDHUjuomnN/hDWrJoVl29LTnM65AArqdVOvJ8TePuXt0uJwXm+QypI
qn9UCt/X9p3OiZvOuTYeZcNX5iIxR1FYG7h/MtpGuDBiOVP2VJTnZfBQ7T76xiST
Y3oPVvppwvsa+qE5rJfDAE8xiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKeIvkwk
T7DIkxXOZEvrpp3Pk5XoMB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG
N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUE2QTEvMzE1QjdFMDhGRjdCMTFFREE2MkRGMTBFQzRGOUFFMDIvMUU3RjZCOTYw
M0MyMTFFRUIyMjcyMDY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnxcowDQYJKoZIhvcNAQELBQADggEBAF6FJPf8vlskJ42T
MqrcO0ufsB96Ah9tOOXP6hChZD4wsQlR73xNeqd1dolk3slaIQq9Fu4paDEi/rqx
5DAhiBZtZ//dMYh9qWHt0VsUQcN9oKv5Fk8om9ISNC5hFRu2lSyxilD9n1Q2HV3R
UxBxyf0HIzp86kQYR0AGJ3GaMqbJpTX+Qj8LhXGsa7gcsOTTIk5SGPeXrn+Bm9/m
RlPn3t1AuRCUMEImOSpbA49Yb+xafMv3kgQvkLe21WAAdhewcb38gulr0G/TszwK
tKdJE9rvl6gGrp/X3NII2vSfUuU8k8Vl4/QWha1K62NJ00Mkw/qZld3EaJW9J+Um
59/J8T8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:43 2025 by rpki-client