Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa
File: 9E1721445CFB11EAA377D527C4F9AE02.roa (raw, json)
Hash identifier: DDWfC2SDa6mkLERH2fLjEnqKEWrtJ+AhIE6qZcqqt1o=
Subject key identifier: EB:31:3D:37:55:84:4B:95:BB:9D:76:F8:91:BE:D7:EA:7C:66:32:24
Certificate issuer: /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
Certificate serial: 0A01
Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa
Signing time: Wed 04 Sep 2024 20:38:43 +0000
ROA not before: Wed 04 Sep 2024 20:38:43 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 138025
IP address blocks: 103.120.69.0/24 maxlen: 24
103.146.75.0/24 maxlen: 24
2001:df6:d00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2561 (0xa01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
Validity
Not Before: Sep 4 20:38:43 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d8c553-75b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:e7:48:02:8a:98:78:08:a8:51:d3:7f:c9:
37:fa:c5:a8:3a:7b:2b:7c:ca:2b:75:ec:62:82:68:
f9:d3:12:5a:28:dd:3d:d3:b0:8d:d7:ff:dd:83:d5:
1a:ea:f7:eb:6a:df:1f:f0:8d:48:7e:bd:a1:d7:1a:
7d:b8:5f:29:58:13:ae:8f:f3:68:3d:fa:50:33:cd:
6b:8e:ff:5a:37:4e:b8:b1:46:d9:14:24:55:07:87:
ac:32:a7:cd:3b:14:70:3d:69:14:a4:e2:80:97:8a:
5d:ae:86:5e:cb:31:c1:dc:d5:7f:5e:b0:eb:e5:5b:
26:28:ee:c6:48:15:52:cb:1d:7a:b0:cd:a3:3c:45:
76:75:01:80:24:da:fe:4d:f4:e3:8a:6f:90:46:66:
9e:02:95:53:18:41:04:79:63:91:eb:d6:76:e2:8a:
24:9e:84:7a:43:f2:5a:21:3b:60:58:97:7f:f5:4e:
a3:28:e8:e6:6a:e6:fe:fe:f5:23:ef:98:b2:d6:cc:
ff:52:0c:d4:45:70:3f:32:4c:b6:63:e6:db:52:04:
7c:64:3c:91:4e:dc:cb:e3:3a:03:a7:93:67:69:6f:
06:7f:cb:ac:cf:e8:d5:7c:65:49:5a:47:ca:23:b9:
64:1b:40:c2:36:2d:b5:e5:23:a2:9f:11:8c:ab:20:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:31:3D:37:55:84:4B:95:BB:9D:76:F8:91:BE:D7:EA:7C:66:32:24
X509v3 Authority Key Identifier:
keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.69.0/24
103.146.75.0/24
IPv6:
2001:df6:d00::/48
Signature Algorithm: sha256WithRSAEncryption
3f:71:84:74:12:ca:79:c7:b1:a0:8c:de:db:a7:5e:1f:e6:28:
6d:89:d7:e5:26:53:d3:f7:e5:51:3e:d5:5c:54:16:28:36:88:
f6:cd:6d:6f:5e:8e:45:c0:d0:8d:f5:4d:f8:58:3f:c6:3c:db:
d1:0f:a3:d6:bc:2b:03:c1:89:ad:29:5e:b3:58:1f:7e:05:29:
7b:29:b0:6a:49:fa:70:42:30:5a:23:af:7d:4d:8a:b5:f0:37:
3b:72:3e:26:a9:eb:16:68:6a:e6:36:8c:6e:0d:3f:af:4f:78:
d5:25:a2:90:2e:01:ee:82:3c:d8:57:af:19:e3:51:d6:7c:26:
e3:f8:44:76:cd:cf:9f:10:54:bd:08:b3:3f:bd:9d:9b:49:1d:
83:08:6d:16:9f:91:b7:8f:93:f8:2d:fc:e8:1d:94:8a:bf:01:
dc:83:25:a6:56:93:c0:70:ef:e9:64:cd:47:b3:cc:02:7c:e9:
17:03:16:74:9d:b7:15:06:2d:b8:11:af:ad:b6:f0:ba:b0:c0:
81:b5:5b:aa:c6:dd:ea:a8:21:8e:b1:8c:65:1e:2e:7c:18:47:
26:f6:d3:5b:0a:fb:40:fb:0a:25:9d:1a:ec:cf:eb:fd:68:2f:
82:8a:17:2a:42:56:a9:db:e2:12:18:49:0c:5c:dd:1d:42:6c:
85:f8:e5:7f
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNBNEIxMTAvBgNVBAUTKEVGOUU1MkJGOUY0ODY1Q0FGODc4N0FEOTVDRTZERTRG
NjQ3Njg0MEQwHhcNMjQwOTA0MjAzODQzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ4YzU1My03NWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdDnSAKKmHgIqFHTf8k3+sWoOnsrfMordexigmj50xJaKN0907CN1//dg9Ua
6vfrat8f8I1Ifr2h1xp9uF8pWBOuj/NoPfpQM81rjv9aN064sUbZFCRVB4esMqfN
OxRwPWkUpOKAl4pdroZeyzHB3NV/XrDr5VsmKO7GSBVSyx16sM2jPEV2dQGAJNr+
TfTjim+QRmaeApVTGEEEeWOR69Z24ooknoR6Q/JaITtgWJd/9U6jKOjmaub+/vUj
75iy1sz/UgzURXA/Mky2Y+bbUgR8ZDyRTtzL4zoDp5NnaW8Gf8usz+jVfGVJWkfK
I7lkG0DCNi215SOinxGMqyDucwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOsxPTdV
hEuVu512+JG+1+p8ZjIkMB8GA1UdIwQYMBaAFO+eUr+fSGXK+Hh62Vzm3k9kdoQN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0E0Qi82RTY0QzQxMDVD
RUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpjcjRlSHJaWE9iZVQyUjJo
QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc1NVN2NTlJWmNyNGVIclpYT2JlVDJSMmhBMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkNBNEIvNkU2NEM0MTA1Q0VDMTFFQUE2QjZFODc4QzRGOUFFMDIvOUUxNzIxNDQ1
Q0ZCMTFFQUEzNzdENTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBABneEUDBABnkkswDwQCAAIwCQMHACABDfYNADANBgkqhkiG
9w0BAQsFAAOCAQEAP3GEdBLKecexoIze26deH+YobYnX5SZT0/flUT7VXFQWKDaI
9s1tb16ORcDQjfVN+Fg/xjzb0Q+j1rwrA8GJrSles1gffgUpeymwakn6cEIwWiOv
fU2KtfA3O3I+JqnrFmhq5jaMbg0/r0941SWikC4B7oI82FevGeNR1nwm4/hEds3P
nxBUvQizP72dm0kdgwhtFp+Rt4+T+C386B2Uir8B3IMlplaTwHDv6WTNR7PMAnzp
FwMWdJ23FQYtuBGvrbbwurDAgbVbqsbd6qghjrGMZR4ufBhHJvbTWwr7QPsKJZ0a
7M/r/WgvgooXKkJWqdviEhhJDFzdHUJshfjlfw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:23:52 2025 by rpki-client