Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0B3B85D63A1B11EDAE662B14C4F9AE02.roa
File: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (raw, json)
Hash identifier: GQNwSDUwzmX4l5wsYUCHS1XYZfJoT7fdlpD23IsAxJ8=
Subject key identifier: 2F:63:50:93:02:D5:55:0A:D0:7A:A1:06:0C:33:6E:26:38:25:98:82
Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Certificate serial: 0139
Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0B3B85D63A1B11EDAE662B14C4F9AE02.roa
Signing time: Wed 03 Apr 2024 05:37:42 +0000
ROA not before: Wed 03 Apr 2024 05:37:42 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 18119
IP address blocks: 103.5.156.0/22 maxlen: 22
202.49.144.0/24 maxlen: 24
202.126.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Validity
Not Before: Apr 3 05:37:42 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660ceb26-e160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:80:5a:a4:2d:be:96:ac:56:4e:9b:8f:3a:56:
c9:a6:6b:69:fb:de:e6:af:f7:c7:14:19:35:1e:ec:
09:ea:45:4d:6f:ee:b3:ce:d7:4a:d4:a7:15:60:4e:
4f:ba:06:37:15:dd:23:f5:bc:b9:fb:cf:e3:4a:4c:
41:9c:a5:8d:be:d5:77:da:ec:93:80:86:46:15:9d:
b0:a2:83:b3:73:c4:c8:30:e0:30:98:69:4f:23:e4:
85:29:52:22:a3:52:6b:6a:a7:29:a3:27:6c:12:38:
64:de:0a:35:ff:ea:70:2a:af:a5:94:00:2e:c0:27:
d7:1d:19:9e:a3:12:3a:3b:4b:00:16:0a:09:86:4f:
1e:e6:82:e1:fc:60:56:44:9e:08:f2:1a:63:06:cf:
e5:d7:92:f7:ed:b3:0f:d5:36:ca:ea:eb:07:b9:80:
cc:d6:dd:f5:24:6a:61:48:c9:06:51:57:b7:e0:8a:
71:d1:52:36:ce:a4:75:d4:58:16:1a:84:fc:6e:6b:
85:2e:0b:a4:33:08:7d:60:f7:68:c9:1b:de:20:c1:
5e:e4:af:af:6d:f5:a1:02:bf:21:8c:8f:d2:58:9c:
d8:98:26:75:00:0f:fb:d7:17:28:83:ed:cc:47:01:
7e:ac:40:39:17:be:18:52:1e:7f:c9:d0:a1:ee:43:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:63:50:93:02:D5:55:0A:D0:7A:A1:06:0C:33:6E:26:38:25:98:82
X509v3 Authority Key Identifier:
keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0B3B85D63A1B11EDAE662B14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.156.0/22
202.49.144.0/24
202.126.80.0/21
Signature Algorithm: sha256WithRSAEncryption
58:02:09:06:bc:59:17:db:ac:14:84:c5:53:2d:7e:7b:34:dd:
bb:f6:fd:44:85:ac:4f:b4:2d:f7:92:32:da:32:2b:a8:93:74:
af:ea:cc:49:b3:7d:ac:3e:f4:c5:f4:6d:e1:d9:00:92:94:a0:
e6:ed:46:a7:f5:db:6e:2e:56:53:80:be:6b:79:26:de:18:8c:
40:19:1b:dc:db:6b:92:7a:d7:cd:14:7a:f2:bf:50:08:d0:e5:
e6:28:70:80:90:db:22:27:d9:ec:68:bb:0d:1e:4c:b9:f6:f6:
c5:fc:d9:ca:bc:03:91:ee:ef:ea:e8:89:c1:9a:06:58:32:71:
9c:4b:71:bc:2b:15:7f:2c:5c:cd:a7:9f:07:c9:bd:f8:38:a1:
f7:ab:4a:79:82:1e:b5:23:41:ad:96:e9:0e:ff:8f:cd:b6:ff:
ba:e4:a6:a0:62:c9:33:f6:14:9d:d4:3a:d7:8c:93:6f:61:53:
52:54:ab:75:fe:cc:5e:fd:f7:43:d6:39:d9:52:f6:f3:9a:95:
ce:99:ee:b5:ae:9c:b5:1c:76:fe:b3:40:f5:01:38:40:1a:c4:
dc:89:56:6e:ba:87:8a:3e:57:90:b5:9f:04:09:63:36:d8:fa:
ef:4a:da:ba:31:95:77:3e:ae:86:4f:4a:83:d2:c5:80:f6:92:
32:8a:33:d3
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB
MTk3QjlEN0MwHhcNMjQwNDAzMDUzNzQyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBjZWIyNi1lMTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA54BapC2+lqxWTpuPOlbJpmtp+97mr/fHFBk1HuwJ6kVNb+6zztdK1KcVYE5P
ugY3Fd0j9by5+8/jSkxBnKWNvtV32uyTgIZGFZ2wooOzc8TIMOAwmGlPI+SFKVIi
o1JraqcpoydsEjhk3go1/+pwKq+llAAuwCfXHRmeoxI6O0sAFgoJhk8e5oLh/GBW
RJ4I8hpjBs/l15L37bMP1TbK6usHuYDM1t31JGphSMkGUVe34Ipx0VI2zqR11FgW
GoT8bmuFLgukMwh9YPdoyRveIMFe5K+vbfWhAr8hjI/SWJzYmCZ1AA/71xcog+3M
RwF+rEA5F74YUh5/ydCh7kNjZwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFC9jUJMC
1VUK0HqhBgwzbiY4JZiCMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB
MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkIwM0EvREZDNjhENjQzQTE2MTFFRDkxNTJCRjBFQzRGOUFFMDIvMEIzQjg1RDYz
QTFCMTFFREFFNjYyQjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAJnBZwDBADKMZADBAPKflAwDQYJKoZIhvcNAQELBQADggEB
AFgCCQa8WRfbrBSExVMtfns03bv2/USFrE+0LfeSMtoyK6iTdK/qzEmzfaw+9MX0
beHZAJKUoObtRqf1224uVlOAvmt5Jt4YjEAZG9zba5J6180UevK/UAjQ5eYocICQ
2yIn2exouw0eTLn29sX82cq8A5Hu7+roicGaBlgycZxLcbwrFX8sXM2nnwfJvfg4
oferSnmCHrUjQa2W6Q7/j822/7rkpqBiyTP2FJ3UOteMk29hU1JUq3X+zF7990PW
OdlS9vOalc6Z7rWunLUcdv6zQPUBOEAaxNyJVm66h4o+V5C1nwQJYzbY+u9K2rox
lXc+roZPSoPSxYD2kjKKM9M=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:30:16 2025 by rpki-client