Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa
File: AA5E96065B9F11EF9F1B175DC4F9AE02.roa (raw, json)
Hash identifier: /YYAM/ja0JhV/6iA5BWq6W3oPILiMBn35Hx66aO0FaI=
Subject key identifier: 19:C0:68:56:ED:76:30:BD:B2:75:8E:B7:E3:EF:8B:D9:E7:77:8C:A8
Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial: 02
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa
Signing time: Fri 16 Aug 2024 07:17:59 +0000
ROA not before: Fri 16 Aug 2024 07:17:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26658
IP address blocks: 103.212.72.0/22 maxlen: 22
139.5.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Validity
Not Before: Aug 16 07:17:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66befd27-a138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:c0:99:8e:ee:1c:8f:f8:47:c7:18:e1:ee:
95:2a:cd:e4:cf:99:9c:e2:53:25:ef:87:c4:07:ed:
13:41:27:b1:12:7b:88:0f:61:fc:7c:40:9f:6a:60:
81:23:36:a2:f5:f2:c8:9d:1e:34:3f:25:be:87:d4:
5b:0a:ad:63:1a:6d:31:7d:86:83:70:6d:d6:b8:5d:
78:03:62:19:a2:9b:f3:79:30:aa:b9:1f:70:c3:07:
c2:46:a1:1e:16:84:3e:57:af:d9:e4:96:0a:27:bd:
f8:f3:45:2a:8b:b9:6b:c0:52:d9:73:ab:46:7d:fd:
a2:e9:a1:6f:de:68:79:de:ac:7a:39:38:cc:e9:27:
22:2a:0e:c6:a7:91:47:40:40:bc:c5:45:2a:e8:df:
70:74:56:5d:66:4f:56:5e:63:05:0a:2e:67:6f:a5:
11:22:d1:b6:02:2e:b7:e2:1a:a8:55:0c:d9:26:fe:
28:ed:5d:76:8e:5c:bd:2e:c8:f0:ed:69:0e:db:e4:
69:59:98:f3:7c:e4:f8:5c:46:33:88:76:b8:fb:bf:
0e:91:d1:48:e0:48:8e:e3:7f:e5:b9:af:e8:b3:11:
0a:40:07:40:55:7f:9d:e8:8b:16:e7:b9:a6:57:c4:
70:51:41:74:f0:24:b9:c7:f4:8e:7e:65:ee:e9:c9:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C0:68:56:ED:76:30:BD:B2:75:8E:B7:E3:EF:8B:D9:E7:77:8C:A8
X509v3 Authority Key Identifier:
keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.212.72.0/22
139.5.180.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:e9:3c:9a:b1:1e:d4:e6:93:45:90:30:ab:94:38:b9:81:92:
34:0f:d1:ce:12:72:e9:5f:e0:30:74:d7:1a:d9:e0:fc:7b:09:
54:16:bb:e6:11:30:42:2f:9b:21:ac:a6:04:4b:3f:16:89:f4:
8c:cf:9c:00:3b:f9:72:7f:2b:24:e4:0a:52:57:3d:84:c1:4a:
16:56:ee:02:5a:03:9f:3d:cc:4f:e0:c0:f4:11:4f:53:15:9c:
da:fd:5b:f1:08:da:90:fd:4f:b8:1b:27:6f:c1:80:18:d1:1d:
4c:d0:f4:6f:ba:e2:4b:b1:d9:d3:79:ac:64:a5:de:e6:7c:50:
5c:d4:f0:b5:0c:75:37:9e:c6:6e:eb:ce:d5:1a:a1:b2:4b:d2:
00:83:70:3d:6a:9a:99:e9:45:61:19:15:5a:3d:fe:ae:2c:36:
b8:c2:b4:df:94:1a:80:b6:21:85:15:aa:d7:9c:51:76:a8:97:
5c:05:18:b4:be:25:0d:1e:8a:f0:35:a5:08:1c:3e:56:47:92:
aa:71:d1:2c:79:0b:b4:e5:ff:b1:6e:34:97:bc:42:f1:80:72:
f3:96:40:b1:9e:eb:fc:4a:e9:e7:75:55:1d:20:87:ba:ca:30:
74:b9:08:fd:80:e0:14:1f:06:b5:c9:bb:4f:5f:72:1d:97:6a:
c9:a1:d8:ee
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MjJCMzExMC8GA1UEBRMoMjNDMEIyRDdBQ0UxMDlEM0RGRTgzQUVCRUYyRUEzMTQ5
QzVDQUMxNzAeFw0yNDA4MTYwNzE3NTlaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2YmVmZDI3LWExMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCs+MCZju4cj/hHxxjh7pUqzeTPmZziUyXvh8QH7RNBJ7ESe4gPYfx8QJ9qYIEj
NqL18sidHjQ/Jb6H1FsKrWMabTF9hoNwbda4XXgDYhmim/N5MKq5H3DDB8JGoR4W
hD5Xr9nklgonvfjzRSqLuWvAUtlzq0Z9/aLpoW/eaHnerHo5OMzpJyIqDsankUdA
QLzFRSro33B0Vl1mT1ZeYwUKLmdvpREi0bYCLrfiGqhVDNkm/ijtXXaOXL0uyPDt
aQ7b5GlZmPN85PhcRjOIdrj7vw6R0UjgSI7jf+W5r+izEQpAB0BVf53oixbnuaZX
xHBRQXTwJLnH9I5+Ze7pyVaZAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUGcBoVu12
ML2ydY634++L2ed3jKgwHwYDVR0jBBgwFoAUI8Cy16zhCdPf6Drr7y6jFJxcrBcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyMkIzLzVFNEQ0NzYyNUI5
RjExRUZBMTRCQkI1Q0M0RjlBRTAyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JC
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSThDeTE2emhDZFBmNkRycjd5NmpGSnhjckJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9BQTVFOTYwNjVC
OUYxMUVGOUYxQjE3NURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAmfUSAMEAosFtDANBgkqhkiG9w0BAQsFAAOCAQEAuek8mrEe
1OaTRZAwq5Q4uYGSNA/RzhJy6V/gMHTXGtng/HsJVBa75hEwQi+bIaymBEs/Fon0
jM+cADv5cn8rJOQKUlc9hMFKFlbuAloDnz3MT+DA9BFPUxWc2v1b8QjakP1PuBsn
b8GAGNEdTND0b7riS7HZ03msZKXe5nxQXNTwtQx1N57GbuvO1RqhskvSAINwPWqa
melFYRkVWj3+riw2uMK035QagLYhhRWq15xRdqiXXAUYtL4lDR6K8DWlCBw+VkeS
qnHRLHkLtOX/sW40l7xC8YBy85ZAsZ7r/Erp53VVHSCHusowdLkI/YDgFB8Gtcm7
T19yHZdqyaHY7g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:16:37 2025 by rpki-client