Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/D9A63D2E9D0711EBB708700BC4F9AE02.roa
File: D9A63D2E9D0711EBB708700BC4F9AE02.roa (raw, json)
Hash identifier: 01f25j3R54MWvOTz10L2YoiOpP1/37rLlOmREDYrZ44=
Subject key identifier: 70:F3:2D:D4:B2:90:E3:FE:26:CF:2C:36:74:B5:85:1F:F9:08:AD:F7
Certificate issuer: /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
Certificate serial: 057B
Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/D9A63D2E9D0711EBB708700BC4F9AE02.roa
Signing time: Sat 13 Apr 2024 01:02:28 +0000
ROA not before: Sat 13 Apr 2024 01:02:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142014
IP address blocks: 103.164.224.0/23 maxlen: 23
103.164.224.0/24 maxlen: 24
103.164.225.0/24 maxlen: 24
2407:4340::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1403 (0x57b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
Validity
Not Before: Apr 13 01:02:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6619d9a3-53a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:55:e2:56:97:2d:9e:e9:4f:0c:2b:76:ef:
fa:58:e8:8b:8d:a4:05:fd:7a:91:db:fb:79:d2:49:
c9:6e:43:92:57:f7:ad:eb:89:e8:11:5d:e2:32:74:
1f:4d:cd:60:43:65:08:47:c3:40:67:43:c2:5f:cc:
e1:0a:78:47:e1:51:bd:97:03:1c:49:92:dc:60:a4:
e5:24:d9:b4:03:a5:a4:73:d3:fb:8a:2a:f9:bf:69:
71:5b:91:be:30:e8:ef:ce:93:d5:2d:9a:04:cc:5b:
21:43:39:39:8e:31:4f:82:68:0b:50:ff:34:ae:31:
b8:2e:a5:c7:7f:ea:18:6d:82:c0:47:24:70:7a:f8:
06:2b:42:aa:4f:87:7f:99:9a:a2:50:bc:42:07:03:
00:b3:48:6c:1e:97:38:07:78:97:d2:bb:ee:ef:4a:
cd:94:f4:45:a7:b1:ce:f1:a8:6d:7a:b0:56:cb:fd:
34:ac:7e:60:ba:fe:39:b7:73:00:77:3e:d3:a4:e0:
41:84:b7:29:85:1d:86:d3:d8:7c:1e:14:46:bf:0e:
e4:a2:a0:1d:08:c3:b6:e6:f0:ca:c6:6d:79:bd:a1:
7c:ee:a6:0a:e4:ee:cc:7e:53:09:00:21:44:5e:45:
34:4f:ab:37:54:4d:e3:20:53:2d:1f:13:5f:77:d2:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F3:2D:D4:B2:90:E3:FE:26:CF:2C:36:74:B5:85:1F:F9:08:AD:F7
X509v3 Authority Key Identifier:
keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/D9A63D2E9D0711EBB708700BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.164.224.0/23
IPv6:
2407:4340::/32
Signature Algorithm: sha256WithRSAEncryption
b8:d1:d3:ba:75:66:82:ba:1f:b6:91:30:c0:8f:c1:9d:4a:27:
85:96:38:77:96:4f:ed:24:c6:02:ac:be:f7:b0:de:07:16:d7:
bf:0c:bf:6d:90:93:67:a4:9f:9a:45:83:66:db:53:95:47:ed:
3b:fb:49:c7:15:2d:ef:3f:40:26:68:bd:55:a7:9d:7c:f9:dd:
57:03:ea:6f:ab:9f:d2:f5:e7:ee:bf:56:8c:ab:42:5c:e8:6d:
a6:df:8b:b9:86:96:2a:73:49:e3:32:59:7b:e4:29:a9:c8:db:
93:93:ba:f6:1f:12:b4:97:0b:4b:6c:d9:39:50:62:ec:f5:a3:
43:0d:17:dc:cf:69:65:4d:d7:62:41:e7:93:31:b1:84:d3:a8:
5d:23:da:41:50:71:93:05:64:3a:9d:8f:70:8c:0f:cc:81:cb:
3f:b6:da:df:e7:4c:90:0d:35:f1:fb:10:77:fe:fa:5e:bd:34:
db:49:7a:b8:e7:fb:03:6a:62:c4:df:f0:7b:6f:95:0a:df:70:
4f:66:c2:4f:f9:62:49:cf:ad:ad:3c:38:ff:65:12:4d:1f:74:
07:49:5d:59:63:1b:6e:51:fc:e9:98:d8:ab:df:f9:4e:0b:74:
db:01:dc:85:e9:6f:24:c8:fe:6c:23:78:4b:a8:b9:7b:0f:8b:
8c:52:a8:81
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjVBQUQxMTAvBgNVBAUTKDgzMjI0NEIzMDJEMTY1Q0Q3OEJEQzNBMjEyQjBCN0U2
RjkwQkZDNjAwHhcNMjQwNDEzMDEwMjI4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjE5ZDlhMy01M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArE1V4laXLZ7pTwwrdu/6WOiLjaQF/XqR2/t50knJbkOSV/et64noEV3iMnQf
Tc1gQ2UIR8NAZ0PCX8zhCnhH4VG9lwMcSZLcYKTlJNm0A6Wkc9P7iir5v2lxW5G+
MOjvzpPVLZoEzFshQzk5jjFPgmgLUP80rjG4LqXHf+oYbYLARyRwevgGK0KqT4d/
mZqiULxCBwMAs0hsHpc4B3iX0rvu70rNlPRFp7HO8ahterBWy/00rH5guv45t3MA
dz7TpOBBhLcphR2G09h8HhRGvw7koqAdCMO25vDKxm15vaF87qYK5O7MflMJACFE
XkU0T6s3VE3jIFMtHxNfd9JtBwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHDzLdSy
kOP+Js8sNnS1hR/5CK33MB8GA1UdIwQYMBaAFIMiRLMC0WXNeL3DohKwt+b5C/xg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBRC80QjY1MDY1ODhE
RTkxMUVCOTA1QzczMTVDNEY5QUUwMi9neUpFc3dMUlpjMTR2Y09pRXJDMzV2a0xf
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d5SkVzd0xSWmMxNHZjT2lFckMzNXZrTF9HQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjVBQUQvNEI2NTA2NTg4REU5MTFFQjkwNUM3MzE1QzRGOUFFMDIvRDlBNjNEMkU5
RDA3MTFFQkI3MDg3MDBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnpOAwDQQCAAIwBwMFACQHQ0AwDQYJKoZIhvcNAQELBQAD
ggEBALjR07p1ZoK6H7aRMMCPwZ1KJ4WWOHeWT+0kxgKsvvew3gcW178Mv22Qk2ek
n5pFg2bbU5VH7Tv7SccVLe8/QCZovVWnnXz53VcD6m+rn9L15+6/VoyrQlzobabf
i7mGlipzSeMyWXvkKanI25OTuvYfErSXC0ts2TlQYuz1o0MNF9zPaWVN12JB55Mx
sYTTqF0j2kFQcZMFZDqdj3CMD8yByz+22t/nTJANNfH7EHf++l69NNtJerjn+wNq
YsTf8HtvlQrfcE9mwk/5YknPra08OP9lEk0fdAdJXVljG25R/OmY2Kvf+U4LdNsB
3IXpbyTI/mwjeEuouXsPi4xSqIE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:36:06 2025 by rpki-client