Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/AB3040224C0211EF84B00D1EC4F9AE02.roa
File: AB3040224C0211EF84B00D1EC4F9AE02.roa (raw, json)
Hash identifier: noVdM6ngikXxZBW4pTHIBoQSLKize1jndamJhpeixzc=
Subject key identifier: 82:E0:9C:51:56:D6:5D:35:A8:05:D7:B4:33:58:C6:A4:35:38:DA:4D
Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Certificate serial: 071F
Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/AB3040224C0211EF84B00D1EC4F9AE02.roa
Signing time: Thu 03 Oct 2024 18:14:01 +0000
ROA not before: Thu 03 Oct 2024 18:14:01 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 136815
IP address blocks: 103.97.160.0/23 maxlen: 23
103.97.160.0/24 maxlen: 24
103.97.161.0/24 maxlen: 24
103.97.162.0/24 maxlen: 24
103.97.163.0/24 maxlen: 24
2401:91c0::/32 maxlen: 32
2401:91c0::/33 maxlen: 33
2401:91c0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823 (0x71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Validity
Not Before: Oct 3 18:14:01 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66fedee9-a30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:d4:72:ad:69:01:9f:7f:c0:b9:ef:64:07:
1b:1f:b2:02:14:4d:cf:46:86:c5:5c:13:9d:1b:5e:
21:de:8d:08:05:67:f1:23:98:44:99:86:95:b6:48:
58:9a:18:c5:8d:fc:70:de:c9:d6:68:8b:7c:9f:c0:
b4:b0:ec:91:17:f4:89:da:a3:ae:f5:52:db:e6:80:
4c:4d:f5:20:2d:14:27:f8:03:a3:6c:f3:c8:19:07:
3e:3d:34:77:35:b9:4a:d8:2c:6b:51:2e:c5:17:dc:
b0:6a:30:16:05:69:a1:42:ad:c8:e5:1a:3a:ac:d9:
7a:30:37:25:7f:ee:71:05:13:79:7b:52:30:10:21:
83:a4:52:1a:a9:85:20:03:f7:e5:22:e1:75:35:89:
60:86:bf:b4:0c:ea:52:3c:a6:52:9e:4f:da:79:30:
a8:72:83:9d:ba:49:b2:50:6a:54:8b:87:d5:c7:39:
6d:17:46:5f:ab:aa:77:b1:dd:d8:f0:88:bf:00:3f:
b9:18:e4:4f:d4:c3:14:16:cd:f5:93:ef:58:79:ac:
c7:67:16:8c:f8:02:4c:02:cd:3f:db:a0:4d:5b:45:
1b:ca:81:a8:35:53:21:82:65:93:02:e4:c6:cf:ee:
c0:00:cb:ce:1e:93:d7:17:28:19:14:9d:cd:d7:38:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E0:9C:51:56:D6:5D:35:A8:05:D7:B4:33:58:C6:A4:35:38:DA:4D
X509v3 Authority Key Identifier:
keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/AB3040224C0211EF84B00D1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.160.0/22
IPv6:
2401:91c0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:63:56:df:06:82:39:6b:72:e2:01:12:e2:c7:96:56:5e:bf:
34:18:f5:2f:67:1b:a2:a0:30:ce:67:b0:b0:ae:f9:7d:6c:0a:
4f:78:4a:05:51:c2:d0:e9:31:ef:6e:ab:1e:d0:6a:b3:4b:81:
ed:e3:40:ea:9f:b4:5c:32:09:4a:49:41:da:af:9e:fa:fa:f9:
45:b6:c8:a5:67:0f:ba:ed:89:2d:5c:92:1a:f4:ca:5e:55:80:
a1:33:ca:87:7e:38:73:ef:b3:80:8b:45:88:14:cb:c9:32:40:
ed:98:b2:8f:1c:a9:c1:0b:71:bd:58:30:68:67:f3:fa:dd:8e:
99:f5:f8:7b:aa:43:5c:ea:37:2d:e1:b6:b0:0e:db:92:c0:47:
fc:1c:0a:6e:ee:47:39:1d:e4:31:92:28:9e:e0:87:86:6c:0b:
98:97:e6:a3:22:e7:4b:7e:15:94:f4:2f:9d:7e:34:32:97:f2:
6e:5e:08:55:36:fa:94:9a:75:03:1b:95:56:3d:1b:7e:0f:bd:
dc:8f:8c:66:69:5b:9b:72:97:a3:55:27:19:f1:8d:a4:d9:c4:
68:1f:3b:4e:05:c9:67:19:19:3a:66:37:c1:f8:5d:99:66:c8:
c9:18:cf:06:c5:3d:be:9d:ca:c9:c2:2a:3c:3c:a4:57:14:20:
81:3a:ea:7c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz
RDg2NEZGMDEwHhcNMjQxMDAzMTgxNDAxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZlZGVlOS1hMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0NLUcq1pAZ9/wLnvZAcbH7ICFE3PRobFXBOdG14h3o0IBWfxI5hEmYaVtkhY
mhjFjfxw3snWaIt8n8C0sOyRF/SJ2qOu9VLb5oBMTfUgLRQn+AOjbPPIGQc+PTR3
NblK2CxrUS7FF9ywajAWBWmhQq3I5Ro6rNl6MDclf+5xBRN5e1IwECGDpFIaqYUg
A/flIuF1NYlghr+0DOpSPKZSnk/aeTCocoOdukmyUGpUi4fVxzltF0Zfq6p3sd3Y
8Ii/AD+5GORP1MMUFs31k+9YeazHZxaM+AJMAs0/26BNW0UbyoGoNVMhgmWTAuTG
z+7AAMvOHpPXFygZFJ3N1zikHQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFILgnFFW
1l01qAXXtDNYxqQ1ONpNMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0
RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf
d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTI4MDQvMzZFQ0RBNTRGNEZBMTFFOTk5MTg0MzNEQzRGOUFFMDIvQUIzMDQwMjI0
QzAyMTFFRjg0QjAwRDFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnYaAwDQQCAAIwBwMFACQBkcAwDQYJKoZIhvcNAQELBQAD
ggEBAH1jVt8GgjlrcuIBEuLHllZevzQY9S9nG6KgMM5nsLCu+X1sCk94SgVRwtDp
Me9uqx7QarNLge3jQOqftFwyCUpJQdqvnvr6+UW2yKVnD7rtiS1ckhr0yl5VgKEz
yod+OHPvs4CLRYgUy8kyQO2Yso8cqcELcb1YMGhn8/rdjpn1+HuqQ1zqNy3htrAO
25LAR/wcCm7uRzkd5DGSKJ7gh4ZsC5iX5qMi50t+FZT0L51+NDKX8m5eCFU2+pSa
dQMblVY9G34PvdyPjGZpW5tyl6NVJxnxjaTZxGgfO04FyWcZGTpmN8H4XZlmyMkY
zwbFPb6dysnCKjw8pFcUIIE66nw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:39 2025 by rpki-client