Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa
File: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (raw, json)
Hash identifier: NomuIY8Tv9X/mYInZROxbO2w9blxvzJn6kYiUIriBwQ=
Subject key identifier: 30:54:BC:2E:E4:C3:2F:0D:AC:A5:FF:E5:78:84:EC:9F:32:D3:03:1A
Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial: 02B3
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa
Signing time: Wed 04 Dec 2024 10:00:29 +0000
ROA not before: Wed 04 Dec 2024 10:00:29 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 134715
IP address blocks: 103.179.206.0/23 maxlen: 24
2400:4e60::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Validity
Not Before: Dec 4 10:00:29 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6750283d-55cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:a6:e6:d7:12:42:f5:01:72:b3:e4:68:7e:
10:90:6c:1b:78:8a:25:8c:94:7a:2b:d9:14:41:81:
81:f9:21:7b:02:73:7d:83:30:a7:fe:0f:2d:32:19:
96:9c:8c:c6:77:53:b5:35:5f:79:54:fd:4a:3f:78:
22:65:3e:c3:3c:e8:be:98:30:fc:70:0b:56:e2:d4:
fe:1c:4d:42:e7:3c:78:26:29:33:3a:31:cc:38:4f:
4b:65:09:e3:b7:a5:b1:4d:43:9d:c2:88:88:2b:d7:
3a:50:d2:d5:29:86:0f:e9:0f:59:35:bb:b7:1d:47:
a1:a0:c0:91:0c:bd:c3:0a:47:d4:6a:3b:08:20:6d:
34:15:e3:6a:ba:e0:4f:cf:02:41:0f:a3:17:92:0d:
30:3e:d5:a3:74:f7:33:bd:e5:63:e7:84:0d:53:6b:
06:b8:45:95:5c:b1:84:db:5e:83:f8:b3:16:85:3e:
14:5b:c6:cf:a9:56:d9:a2:8a:e4:15:5b:f3:fb:3b:
28:3e:56:39:48:da:6b:95:6c:05:f1:8d:25:43:60:
00:0a:e8:ba:dc:e0:b1:70:a0:e3:41:25:3a:20:da:
24:30:e3:1b:b7:37:0d:1e:1d:1a:05:a8:44:ca:69:
7b:8a:65:3a:33:69:41:96:8f:b3:38:8d:63:ea:58:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:54:BC:2E:E4:C3:2F:0D:AC:A5:FF:E5:78:84:EC:9F:32:D3:03:1A
X509v3 Authority Key Identifier:
keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.206.0/23
IPv6:
2400:4e60::/32
Signature Algorithm: sha256WithRSAEncryption
4f:42:3a:d4:56:1b:ea:84:9a:2a:d7:5d:93:bf:e2:e0:64:34:
9c:7a:f3:7c:42:ed:c2:dd:67:8e:b1:c2:47:52:be:85:62:75:
0e:ed:b8:1b:33:b0:74:a1:72:9f:f2:2f:09:ce:bd:69:ce:3c:
5f:ed:79:8c:2e:2e:0f:87:fd:a1:e0:9e:f4:8b:e0:0b:65:40:
71:73:a9:28:9d:02:0c:f6:d8:59:60:23:fa:a5:58:03:43:82:
42:85:a2:bd:cd:e9:7e:9a:0b:3d:51:6f:0d:b4:7b:6a:78:a7:
cc:30:8c:3e:48:e6:de:71:5d:8b:ab:aa:ae:63:05:3c:84:6a:
ff:2e:b4:18:cc:28:9e:68:1a:43:1f:2b:99:7b:1a:af:a7:43:
aa:af:cc:cc:a8:9d:f8:28:f0:32:b9:e1:04:07:9e:2a:2b:d3:
55:c1:a1:47:98:e3:36:81:af:02:b1:dc:7f:3e:26:e8:11:2e:
79:ef:16:78:0c:2a:57:c4:7a:af:cb:2e:54:56:f9:b5:53:57:
a2:22:b9:a2:c9:57:6f:51:59:e3:d1:28:5c:59:0d:23:48:f0:
3e:7d:3d:b6:dc:9a:02:f7:8c:84:a5:7c:54:b6:73:39:f6:98:
1e:5a:c0:18:75:c2:36:a4:e6:54:d6:dd:34:fd:a4:04:8b:dd:
67:d4:f1:78
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG
RjFEQjY2NzUwHhcNMjQxMjA0MTAwMDI5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUwMjgzZC01NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Fqm5tcSQvUBcrPkaH4QkGwbeIoljJR6K9kUQYGB+SF7AnN9gzCn/g8tMhmW
nIzGd1O1NV95VP1KP3giZT7DPOi+mDD8cAtW4tT+HE1C5zx4JikzOjHMOE9LZQnj
t6WxTUOdwoiIK9c6UNLVKYYP6Q9ZNbu3HUehoMCRDL3DCkfUajsIIG00FeNquuBP
zwJBD6MXkg0wPtWjdPczveVj54QNU2sGuEWVXLGE216D+LMWhT4UW8bPqVbZoork
FVvz+zsoPlY5SNprlWwF8Y0lQ2AACui63OCxcKDjQSU6INokMOMbtzcNHh0aBahE
yml7imU6M2lBlo+zOI1j6liXFwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDBUvC7k
wy8NrKX/5XiE7J8y0wMaMB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0
RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa
blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjJCNTQvNzI3Mzc1QjRENEY1MTFFQzhFMTNGRTRFQzRGOUFFMDIvRjJDOTFGNTY3
OEJFMTFFRkJCM0ZDNzZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFns84wDQQCAAIwBwMFACQATmAwDQYJKoZIhvcNAQELBQAD
ggEBAE9COtRWG+qEmirXXZO/4uBkNJx683xC7cLdZ46xwkdSvoVidQ7tuBszsHSh
cp/yLwnOvWnOPF/teYwuLg+H/aHgnvSL4AtlQHFzqSidAgz22FlgI/qlWANDgkKF
or3N6X6aCz1Rbw20e2p4p8wwjD5I5t5xXYurqq5jBTyEav8utBjMKJ5oGkMfK5l7
Gq+nQ6qvzMyonfgo8DK54QQHnior01XBoUeY4zaBrwKx3H8+JugRLnnvFngMKlfE
eq/LLlRW+bVTV6IiuaLJV29RWePRKFxZDSNI8D59PbbcmgL3jISlfFS2czn2mB5a
wBh1wjak5lTW3TT9pASL3WfU8Xg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:56:20 2025 by rpki-client