Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/168BE8747EEE11ECAB036C59C4F9AE02.roa
File: 168BE8747EEE11ECAB036C59C4F9AE02.roa (raw, json)
Hash identifier: TppD7q+u0sPAuA1rQvYwssRFX3TfXUVSrYK0z7MZYzY=
Subject key identifier: 9D:8B:F8:45:28:07:A2:47:DA:4E:E9:AD:89:0C:88:31:62:B5:29:5B
Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial: 03DE
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/168BE8747EEE11ECAB036C59C4F9AE02.roa
Signing time: Sat 04 Jan 2025 14:05:06 +0000
ROA not before: Sat 04 Jan 2025 14:05:06 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 149440
IP address blocks: 103.179.142.0/24 maxlen: 24
103.179.143.0/24 maxlen: 24
223.165.6.0/24 maxlen: 24
2400:8d60:1::/48 maxlen: 48
2400:8d60:2::/48 maxlen: 48
2400:8d60:3::/48 maxlen: 48
2400:8d60:4::/48 maxlen: 48
2400:8d60:5::/48 maxlen: 48
2400:8d60:6::/48 maxlen: 48
2400:8d60:7::/48 maxlen: 48
2400:8d60:8::/48 maxlen: 48
2400:8d60:9::/48 maxlen: 48
2400:8d60:10::/48 maxlen: 48
2400:8d60:11::/48 maxlen: 48
2400:8d60:12::/48 maxlen: 48
2400:8d60:13::/48 maxlen: 48
2400:8d60:14::/48 maxlen: 48
2400:8d60:15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Validity
Not Before: Jan 4 14:05:06 2025 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67794012-29c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:26:b4:e2:92:27:dc:67:4b:0d:c7:8c:98:
95:d4:d5:89:ad:95:14:d8:ef:11:f3:7f:9f:2a:a5:
df:8a:d5:a2:d4:71:0a:2a:93:03:6b:80:43:dd:9f:
d1:ea:9b:98:84:64:49:24:19:e6:ab:96:06:19:ac:
f3:5f:2e:5d:f5:89:78:5e:ee:33:b6:71:b7:d8:58:
9f:e1:92:0a:20:90:f6:0e:33:19:b4:78:0e:4a:4d:
78:f8:24:75:55:18:36:c3:22:e2:51:90:c1:d3:44:
0f:6a:aa:2c:99:82:a9:98:99:0a:81:6e:58:47:bb:
1e:e4:59:4b:93:ce:c3:5c:fa:06:c9:69:3b:19:32:
ae:24:19:62:04:61:f8:48:98:a2:94:5d:34:d9:db:
f8:b4:2e:7e:c5:d7:18:e8:2d:62:21:ed:ea:b7:a1:
83:f4:9a:65:32:24:61:92:54:c2:df:ce:99:1a:b2:
e9:6a:11:f0:c1:2f:d7:06:28:36:29:11:e8:d4:4f:
02:9a:2e:91:e5:7f:e2:7f:25:0c:67:de:b8:51:0b:
a2:ca:36:df:ec:84:44:34:7a:65:9b:e0:75:26:68:
b1:b6:8d:c3:9a:0f:84:92:ec:fb:3b:d3:23:a4:e8:
b3:35:a7:dc:38:96:65:c3:00:07:c8:94:d5:29:d9:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8B:F8:45:28:07:A2:47:DA:4E:E9:AD:89:0C:88:31:62:B5:29:5B
X509v3 Authority Key Identifier:
keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/168BE8747EEE11ECAB036C59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.142.0/23
223.165.6.0/24
IPv6:
2400:8d60:1::-2400:8d60:9:ffff:ffff:ffff:ffff:ffff
2400:8d60:10::-2400:8d60:15:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9c:ee:36:26:6a:04:47:1a:7c:45:05:15:9d:18:7c:3d:20:52:
05:93:c7:0e:a0:5c:6b:f3:e9:68:dc:9f:3a:e2:2a:f2:36:6e:
63:b9:05:c0:99:61:2a:2d:c8:8a:b2:4b:64:f4:cc:e2:94:00:
76:ef:db:68:a1:a7:91:59:0a:97:d7:8c:3c:54:45:5d:9e:a6:
41:ca:8a:aa:fe:e7:33:8a:c5:18:00:d4:4a:45:6a:0e:a0:d5:
91:9f:0d:7a:96:0f:2f:5b:db:53:13:9a:9f:68:f5:c6:63:a5:
6e:cb:d5:e1:e4:6c:b6:b7:67:ac:c6:fe:49:82:ec:c5:b8:35:
93:b3:ef:4d:83:77:ec:64:00:fd:71:5a:d9:57:c5:c8:63:08:
ad:a2:e6:28:54:27:d3:e9:8d:ef:fb:ec:5c:ec:10:06:62:16:
58:1b:07:8c:8c:82:39:d9:bf:a3:11:5d:b1:2f:ac:e2:de:9b:
24:fa:4e:04:0e:3c:fd:15:15:1f:d2:06:79:79:08:c4:59:4d:
8b:d2:48:44:df:1c:23:6f:8e:40:23:65:5a:41:16:b6:b4:b0:
7f:0a:d1:bf:73:c1:27:42:2b:88:75:46:36:1d:35:c3:e3:40:
f9:3e:8d:3c:1e:1b:1a:de:36:05:63:b1:35:01:9e:6b:13:6f:
b1:97:ee:9c
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2
NjkzNDZBMEUwHhcNMjUwMTA0MTQwNTA2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc5NDAxMi0yOWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyIwmtOKSJ9xnSw3HjJiV1NWJrZUU2O8R83+fKqXfitWi1HEKKpMDa4BD3Z/R
6puYhGRJJBnmq5YGGazzXy5d9Yl4Xu4ztnG32Fif4ZIKIJD2DjMZtHgOSk14+CR1
VRg2wyLiUZDB00QPaqosmYKpmJkKgW5YR7se5FlLk87DXPoGyWk7GTKuJBliBGH4
SJiilF002dv4tC5+xdcY6C1iIe3qt6GD9JplMiRhklTC386ZGrLpahHwwS/XBig2
KRHo1E8Cmi6R5X/ifyUMZ964UQuiyjbf7IRENHplm+B1Jmixto3Dmg+Ekuz7O9Mj
pOizNafcOJZlwwAHyJTVKdkppwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFJ2L+EUo
B6JH2k7prYkMiDFitSlbMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3
QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkRBRDQvQzQyMzE4MzA3N0I1MTFFQ0E1QkNFMDVGQzRGOUFFMDIvMTY4QkU4NzQ3
RUVFMTFFQ0FCMDM2QzU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E
RjBEMBIEAgABMAwDBAFns44DBADfpQYwLgQCAAIwKDASAwcAJACNYAABAwcBJACN
YAAIMBIDBwQkAI1gABADBwEkAI1gABQwDQYJKoZIhvcNAQELBQADggEBAJzuNiZq
BEcafEUFFZ0YfD0gUgWTxw6gXGvz6WjcnzriKvI2bmO5BcCZYSotyIqyS2T0zOKU
AHbv22ihp5FZCpfXjDxURV2epkHKiqr+5zOKxRgA1EpFag6g1ZGfDXqWDy9b21MT
mp9o9cZjpW7L1eHkbLa3Z6zG/kmC7MW4NZOz702Dd+xkAP1xWtlXxchjCK2i5ihU
J9Ppje/77FzsEAZiFlgbB4yMgjnZv6MRXbEvrOLemyT6TgQOPP0VFR/SBnl5CMRZ
TYvSSETfHCNvjkAjZVpBFra0sH8K0b9zwSdCK4h1RjYdNcPjQPk+jTweGxreNgVj
sTUBnmsTb7GX7pw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:44:33 2025 by rpki-client