Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/D3C965FA45F611EC9FB3BB49C4F9AE02.roa
File: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (raw, json)
Hash identifier: TOciMmg+YXh13dYfOrB14chWnhLKZ+JRHOQLiS8Jf5Y=
Subject key identifier: 4A:57:46:BA:E6:CF:99:DF:20:3A:0E:FC:D9:F0:04:6E:1B:18:18:ED
Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Certificate serial: 0435
Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/D3C965FA45F611EC9FB3BB49C4F9AE02.roa
Signing time: Wed 15 Jan 2025 00:03:00 +0000
ROA not before: Wed 15 Jan 2025 00:03:00 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 149015
IP address blocks: 103.176.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077 (0x435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9
Validity
Not Before: Jan 15 00:03:00 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6786fb33-2106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:ff:f1:9c:a6:bc:69:3e:8e:68:a4:cf:6b:
7d:87:cc:68:fb:f3:db:d9:36:04:fe:d1:15:42:b0:
1d:43:1a:f7:20:4e:1d:65:24:1e:19:c5:1f:8b:03:
b5:64:1a:e7:90:e1:52:89:f9:8c:03:a1:3e:bf:68:
55:b5:03:2d:ca:93:a3:06:19:5c:a2:18:2e:bf:72:
e5:89:47:cf:bd:ee:74:91:f6:11:c6:f3:49:47:eb:
02:10:cb:fb:80:99:d8:06:d6:7f:15:a5:12:ca:16:
1f:fe:09:9e:ce:ab:b9:ea:c8:d7:9f:2d:80:e0:6e:
53:e3:64:b4:74:b1:2d:9a:c1:d9:2e:be:d5:9a:83:
91:a4:22:c7:af:a5:05:e0:de:c6:cb:9f:a3:d3:c9:
38:db:8f:69:de:ed:67:a0:19:ea:6b:25:82:5f:d6:
bc:7f:ea:cb:34:49:35:d3:b6:86:86:8c:9e:f7:b0:
5c:e2:93:5b:45:02:c5:02:27:8e:3a:9f:cd:22:d3:
c4:0f:82:9f:fc:82:a7:c9:a4:fa:d2:6d:77:03:6c:
cf:d1:da:b4:be:1d:69:66:6b:99:0f:2f:b0:2a:ae:
55:2b:15:ac:b7:27:bf:c8:1b:86:d8:fa:ac:85:16:
06:6f:fc:36:3f:45:9b:04:df:04:4a:60:55:a9:68:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:57:46:BA:E6:CF:99:DF:20:3A:0E:FC:D9:F0:04:6E:1B:18:18:ED
X509v3 Authority Key Identifier:
keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/D3C965FA45F611EC9FB3BB49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.86.0/23
Signature Algorithm: sha256WithRSAEncryption
42:c5:40:e8:49:35:ec:f0:e3:36:07:4c:8f:10:74:0e:49:67:
5f:fd:64:06:35:dc:57:a9:44:c3:02:b5:8e:02:e5:b2:75:bf:
8b:87:b1:07:24:88:31:77:a6:39:72:ca:70:f8:e1:52:69:f8:
25:0e:b2:31:81:50:d5:cd:18:45:40:4e:9d:b4:6d:14:6a:7a:
4e:72:a8:77:02:a1:04:6f:76:71:52:df:7b:5d:a0:67:1f:1d:
b7:64:b2:1b:0e:4e:6a:a5:8f:0f:0a:b4:73:9e:83:51:62:6e:
f3:7e:78:78:4f:3d:2a:bd:53:0b:4a:f1:8f:dd:c9:bd:36:1a:
bc:41:54:ce:f8:dc:8c:34:5f:c7:63:00:85:f5:b8:6b:a2:f6:
ad:f2:37:e9:59:3e:31:ad:8d:07:b1:12:0b:44:10:76:c0:c7:
41:d3:76:e8:2c:8c:a9:e5:c8:ad:43:17:f1:c4:bb:3a:89:e5:
f7:a9:5d:36:d0:dc:9d:89:53:16:8d:70:e3:40:d7:f3:e6:dd:
9d:91:39:4c:79:79:58:15:b7:b1:e7:40:2b:be:fb:b1:5d:f9:
48:0c:6e:4d:cc:1b:6b:4c:57:c4:1a:39:f2:f3:c7:11:a0:3c:
d0:b7:22:9f:17:1d:40:46:cf:5e:d4:c0:07:00:32:79:23:b7:
a6:6e:ca:51
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE
NjZGMjRBRDkwHhcNMjUwMTE1MDAwMzAwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg2ZmIzMy0yMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3EX/8ZymvGk+jmikz2t9h8xo+/Pb2TYE/tEVQrAdQxr3IE4dZSQeGcUfiwO1
ZBrnkOFSifmMA6E+v2hVtQMtypOjBhlcohguv3LliUfPve50kfYRxvNJR+sCEMv7
gJnYBtZ/FaUSyhYf/gmezqu56sjXny2A4G5T42S0dLEtmsHZLr7VmoORpCLHr6UF
4N7Gy5+j08k4249p3u1noBnqayWCX9a8f+rLNEk107aGhoye97Bc4pNbRQLFAieO
Op/NItPED4Kf/IKnyaT60m13A2zP0dq0vh1pZmuZDy+wKq5VKxWstye/yBuG2Pqs
hRYGb/w2P0WbBN8ESmBVqWjkswIDAQABo4IClTCCApEwHQYDVR0OBBYEFEpXRrrm
z5nfIDoO/NnwBG4bGBjtMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1
REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT
dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkFFRDkvNkE3NjVBQUE0NURDMTFFQ0E4QTMxNDZEQzRGOUFFMDIvRDNDOTY1RkE0
NUY2MTFFQzlGQjNCQjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnsFYwDQYJKoZIhvcNAQELBQADggEBAELFQOhJNezw4zYH
TI8QdA5JZ1/9ZAY13FepRMMCtY4C5bJ1v4uHsQckiDF3pjlyynD44VJp+CUOsjGB
UNXNGEVATp20bRRqek5yqHcCoQRvdnFS33tdoGcfHbdkshsOTmqljw8KtHOeg1Fi
bvN+eHhPPSq9UwtK8Y/dyb02GrxBVM743Iw0X8djAIX1uGui9q3yN+lZPjGtjQex
EgtEEHbAx0HTdugsjKnlyK1DF/HEuzqJ5fepXTbQ3J2JUxaNcONA1/Pm3Z2ROUx5
eVgVt7HnQCu++7Fd+UgMbk3MG2tMV8QaOfLzxxGgPNC3Ip8XHUBGz17UwAcAMnkj
t6ZuylE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:49 2025 by rpki-client