Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/0F440AB26E7711EFAA4A1C1AC4F9AE02.roa
File: 0F440AB26E7711EFAA4A1C1AC4F9AE02.roa (raw, json)
Hash identifier: O1np95hbIM7tMbwqTYjzC3DrWBrLxkB/hTITnk5MJww=
Subject key identifier: D7:77:43:EF:E6:71:78:3F:8C:13:BE:53:84:FA:A2:7D:BD:57:63:19
Certificate issuer: /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
Certificate serial: EA
Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/0F440AB26E7711EFAA4A1C1AC4F9AE02.roa
Signing time: Wed 29 Jan 2025 04:17:39 +0000
ROA not before: Wed 29 Jan 2025 04:17:39 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152138
IP address blocks: 210.87.68.0/24 maxlen: 24
2001:df3:3dc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
Validity
Not Before: Jan 29 04:17:39 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6799abe3-2a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:6d:69:02:94:97:06:2a:72:b8:b3:3e:12:
3f:7b:d0:b3:5b:6d:12:af:89:ac:b6:7d:5e:7b:81:
de:e7:d5:e5:19:01:60:64:1f:17:73:c6:8b:20:5a:
e1:eb:29:2d:04:52:45:33:9e:35:fb:03:3d:8e:0c:
31:c8:34:47:0b:16:3a:a8:24:4d:f7:44:c0:9b:94:
ff:c6:5c:ed:79:6e:f7:d8:4e:48:b2:95:72:c9:f0:
22:46:95:b4:55:8e:89:af:35:6c:53:f0:ea:26:c4:
ba:cc:4c:36:17:f9:1f:11:d4:0d:13:97:bb:58:79:
b5:5f:b8:48:73:a9:56:87:0f:b9:66:72:56:9d:03:
af:5b:31:5b:f7:22:76:ec:f1:c4:9f:c2:12:a5:64:
fb:57:4b:17:5e:32:61:0c:b1:76:02:64:56:04:50:
8e:50:32:c8:43:b0:4b:b6:87:a6:50:51:67:da:ee:
c1:32:e6:2f:3e:88:da:96:b5:b9:29:68:b9:52:1f:
75:9b:e0:b9:db:35:8b:1c:5e:3f:9e:3a:d3:43:da:
2e:e5:a8:01:2e:d8:05:13:51:c8:84:e0:fd:8a:5d:
9b:74:5d:a1:7d:6b:01:a0:83:e4:c4:29:c2:f9:5a:
b2:ef:6f:07:5d:6d:f2:b6:2d:c7:35:dd:31:4f:90:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:43:EF:E6:71:78:3F:8C:13:BE:53:84:FA:A2:7D:BD:57:63:19
X509v3 Authority Key Identifier:
keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/0F440AB26E7711EFAA4A1C1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.87.68.0/24
IPv6:
2001:df3:3dc0::/48
Signature Algorithm: sha256WithRSAEncryption
56:4e:a5:86:7f:85:a5:63:67:00:70:78:25:3d:58:bf:f0:42:
74:ca:86:ee:0c:4c:13:7a:c4:08:c8:b3:76:69:96:a5:7b:7a:
47:1c:2b:d6:1c:6c:03:ec:0c:5e:46:d1:2b:38:07:4b:f5:48:
65:b7:ee:9c:48:5c:bd:b0:5d:ec:c0:04:3d:2c:83:84:db:cc:
15:b5:ea:e6:2a:1b:37:9c:9d:7a:e2:3e:2a:f6:03:bd:26:36:
4f:ea:85:4f:da:d5:bf:2b:5a:4a:38:3a:ce:b7:6d:4f:31:90:
40:3f:75:6b:26:95:ff:c3:ad:b8:b1:47:3a:60:c9:1e:79:ec:
02:74:a2:60:23:e2:f6:64:18:2d:4e:f1:4b:23:57:69:74:80:
90:7e:52:38:ad:18:eb:31:e0:af:7e:2e:bb:66:9f:5e:18:ab:
fe:2f:3f:c8:7e:10:5a:ec:ec:87:93:9d:02:6e:76:1b:60:fa:
cf:f6:f4:cc:bf:c5:f1:55:5e:ee:d2:d7:6c:3d:8f:c8:83:c2:
bb:c5:69:f6:27:b7:07:2a:5f:ec:ad:0f:7a:58:20:16:b8:40:
b8:f0:30:b0:0c:ff:ff:a6:88:8b:fc:92:48:8f:10:4b:eb:b0:
6d:1f:5b:6f:b3:67:20:35:5e:bc:07:e0:df:4d:03:63:65:98:
79:c4:01:86
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIxMDMxMTAvBgNVBAUTKDU0NUM0N0MwRTQzMTMzMzhEQzlCNDQwMkMxMkJBRENC
NEU5ODU3QzEwHhcNMjUwMTI5MDQxNzM5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk5YWJlMy0yYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5nJtaQKUlwYqcrizPhI/e9CzW20Sr4mstn1ee4He59XlGQFgZB8Xc8aLIFrh
6yktBFJFM541+wM9jgwxyDRHCxY6qCRN90TAm5T/xlzteW732E5IspVyyfAiRpW0
VY6JrzVsU/DqJsS6zEw2F/kfEdQNE5e7WHm1X7hIc6lWhw+5ZnJWnQOvWzFb9yJ2
7PHEn8ISpWT7V0sXXjJhDLF2AmRWBFCOUDLIQ7BLtoemUFFn2u7BMuYvPojalrW5
KWi5Uh91m+C52zWLHF4/njrTQ9ou5agBLtgFE1HIhOD9il2bdF2hfWsBoIPkxCnC
+Vqy728HXW3yti3HNd0xT5AdWQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNd3Q+/m
cXg/jBO+U4T6on29V2MZMB8GA1UdIwQYMBaAFFRcR8DkMTM43JtEAsErrctOmFfB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjEwMy8yRkI5ODUwODkz
RkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16amNtMFFDd1N1dHkwNllW
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZGeEh3T1F4TXpqY20wUUN3U3V0eTA2WVY4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkIxMDMvMkZCOTg1MDg5M0ZCMTFFRTk2OEVFNDQyQzRGOUFFMDIvMEY0NDBBQjI2
RTc3MTFFRkFBNEExQzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBADSV0QwDwQCAAIwCQMHACABDfM9wDANBgkqhkiG9w0BAQsF
AAOCAQEAVk6lhn+FpWNnAHB4JT1Yv/BCdMqG7gxME3rECMizdmmWpXt6Rxwr1hxs
A+wMXkbRKzgHS/VIZbfunEhcvbBd7MAEPSyDhNvMFbXq5iobN5ydeuI+KvYDvSY2
T+qFT9rVvytaSjg6zrdtTzGQQD91ayaV/8OtuLFHOmDJHnnsAnSiYCPi9mQYLU7x
SyNXaXSAkH5SOK0Y6zHgr34uu2afXhir/i8/yH4QWuzsh5OdAm52G2D6z/b0zL/F
8VVe7tLXbD2PyIPCu8Vp9ie3Bypf7K0PelggFrhAuPAwsAz//6aIi/ySSI8QS+uw
bR9bb7NnIDVevAfg300DY2WYecQBhg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 04:13:21 2025 by rpki-client