Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa
File: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (raw, json)
Hash identifier: Ccp5i/dm7+8eXzkZNFr+8Fkp38efiWixun6YhIXlQUA=
Subject key identifier: B2:59:99:28:F2:D6:94:C7:9D:BC:9C:D4:DA:16:53:7F:3B:69:D9:D4
Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
Certificate serial: 05D9
Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa
Signing time: Thu 10 Oct 2024 23:02:28 +0000
ROA not before: Thu 10 Oct 2024 23:02:28 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 9723
IP address blocks: 103.72.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1497 (0x5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
Validity
Not Before: Oct 10 23:02:28 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67085d04-78b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:b3:20:bf:2b:21:ed:6e:cc:1f:0a:dc:3d:
a3:bd:b3:0e:0e:89:ad:f7:4c:8a:f2:62:a4:fc:66:
f1:e4:2f:21:dc:39:67:2a:63:c4:e3:b5:27:a8:96:
3b:fb:6d:0b:41:ac:71:b0:69:de:a9:e3:a2:5f:9d:
4f:b2:9c:07:79:78:eb:34:c0:91:66:39:e7:d6:30:
74:5a:c6:ca:5d:37:35:92:2a:01:3a:b0:59:a0:a6:
e3:e2:82:e5:90:42:6a:a6:6d:90:bc:06:31:c3:52:
7b:df:9b:b7:04:7b:f2:f5:1a:46:23:fe:0a:f4:59:
f4:c8:7d:60:01:5d:76:19:58:ae:9f:c9:9e:03:9c:
9c:b5:41:5e:9a:38:bd:ab:7f:56:5b:98:19:eb:24:
4e:5d:08:8b:f6:f5:62:f3:5d:bd:56:95:20:4e:ac:
13:87:43:f1:e0:b0:42:ae:18:23:7a:f0:8a:7b:47:
b3:a4:e1:75:4d:25:ce:ec:6e:f3:17:d2:7e:26:e9:
79:87:a3:8c:2d:bd:01:94:f6:7e:80:f4:fe:ca:3f:
a7:a3:bf:5c:26:cb:c2:87:b9:50:28:22:8e:72:52:
a1:27:2b:f1:bc:a4:16:a5:72:26:25:f2:19:76:4c:
70:74:1f:3f:6e:56:a1:5e:6b:bd:ab:1f:73:9b:c9:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:99:28:F2:D6:94:C7:9D:BC:9C:D4:DA:16:53:7F:3B:69:D9:D4
X509v3 Authority Key Identifier:
keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.202.0/23
Signature Algorithm: sha256WithRSAEncryption
45:24:58:36:4c:2c:66:9d:83:7e:f4:3c:bf:51:f5:72:c2:3d:
fe:99:c8:f8:e7:64:ee:2c:59:5e:0b:fc:95:6d:55:a5:38:5c:
9e:54:09:92:a8:d5:2e:38:de:f8:65:7b:00:8b:f4:87:aa:97:
25:69:3e:d9:a7:7f:5f:8d:ca:17:c9:6c:cf:78:1d:50:57:33:
89:c3:12:2d:68:fc:7c:cf:c5:79:78:4b:28:00:7f:22:47:8c:
19:1e:fa:7e:7d:ae:18:13:4c:54:ea:3a:75:4c:13:24:ad:7c:
5e:5e:d3:a8:cf:f5:60:fc:61:64:e7:4c:08:06:8c:4b:cb:cb:
87:c9:f8:1a:a1:36:7b:0d:31:a6:33:77:44:b5:dc:b7:da:22:
16:e7:48:7e:ed:9d:4b:85:a8:d8:4c:eb:5f:3e:e9:61:1a:66:
63:a1:2c:0c:06:37:72:cd:e3:f1:7d:d0:11:ec:71:2a:f0:b1:
12:6f:4c:58:d1:8a:cd:3d:d8:a7:e6:e4:64:44:38:d2:4e:2e:
df:6e:bf:99:ea:90:9a:14:b6:92:77:8e:60:35:36:4b:60:16:
be:0f:16:6f:bc:a9:68:c0:a4:94:3e:44:ca:d9:52:6b:58:b7:
28:34:7b:2d:1b:d6:6b:86:56:2b:dd:16:c8:9d:f0:17:a0:82:
0c:a5:bc:26
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC
QkNENjYwODQwHhcNMjQxMDEwMjMwMjI4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzA4NWQwNC03OGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4KzIL8rIe1uzB8K3D2jvbMODomt90yK8mKk/Gbx5C8h3DlnKmPE47UnqJY7
+20LQaxxsGneqeOiX51PspwHeXjrNMCRZjnn1jB0WsbKXTc1kioBOrBZoKbj4oLl
kEJqpm2QvAYxw1J735u3BHvy9RpGI/4K9Fn0yH1gAV12GViun8meA5yctUFemji9
q39WW5gZ6yROXQiL9vVi8129VpUgTqwTh0Px4LBCrhgjevCKe0ezpOF1TSXO7G7z
F9J+Jul5h6OMLb0BlPZ+gPT+yj+no79cJsvCh7lQKCKOclKhJyvxvKQWpXImJfIZ
dkxwdB8/blahXmu9qx9zm8ktWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLJZmSjy
1pTHnbyc1NoWU387adnUMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw
NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTI0MDcvOTAwREZGNUU5MDU5MTFFQjhGMUVFRTEwQzRGOUFFMDIvM0RGMkEyRUMz
QUIzMTFFQzk3N0E1RDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnSMowDQYJKoZIhvcNAQELBQADggEBAEUkWDZMLGadg370
PL9R9XLCPf6ZyPjnZO4sWV4L/JVtVaU4XJ5UCZKo1S443vhlewCL9IeqlyVpPtmn
f1+NyhfJbM94HVBXM4nDEi1o/HzPxXl4SygAfyJHjBke+n59rhgTTFTqOnVMEySt
fF5e06jP9WD8YWTnTAgGjEvLy4fJ+BqhNnsNMaYzd0S13LfaIhbnSH7tnUuFqNhM
618+6WEaZmOhLAwGN3LN4/F90BHscSrwsRJvTFjRis092Kfm5GREONJOLt9uv5nq
kJoUtpJ3jmA1NktgFr4PFm+8qWjApJQ+RMrZUmtYtyg0ey0b1muGVivdFsid8Beg
ggylvCY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:47 2025 by rpki-client