Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/511EBFFE3E7E11EB979F564CC4F9AE02.roa
File: 511EBFFE3E7E11EB979F564CC4F9AE02.roa (raw, json)
Hash identifier: JGwVae5vWzz6HBXwCoXlrwSkJWV/SPa800j6qUmmqIM=
Subject key identifier: 98:48:5D:E5:BE:57:A4:5A:A5:B6:24:7D:DD:1A:D4:89:69:33:A4:20
Certificate issuer: /CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Certificate serial: 065C
Authority key identifier: 0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/511EBFFE3E7E11EB979F564CC4F9AE02.roa
Signing time: Sun 09 Jun 2024 00:43:31 +0000
ROA not before: Sun 09 Jun 2024 00:43:31 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 136585
IP address blocks: 103.93.108.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4
Validity
Not Before: Jun 9 00:43:31 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6664fab2-b824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:f0:56:e2:95:80:7f:0f:db:6e:e5:25:70:
40:5c:f7:67:33:47:fe:a5:46:d2:a5:bf:7a:5d:4f:
c5:65:09:24:89:89:46:94:0b:72:96:10:10:8e:37:
a6:3b:ee:b3:64:ad:ef:c7:1f:83:09:9a:7e:0f:1e:
1f:9b:f2:fe:54:5c:eb:8b:09:58:bf:98:3d:3b:2b:
5a:a8:d1:f5:75:5d:9c:85:49:22:37:ba:8d:ed:30:
3f:61:80:1c:03:6d:50:26:99:70:b3:cd:77:4b:5b:
0d:42:43:20:e1:bc:92:32:fd:e8:4a:56:fd:72:8a:
11:a2:87:1d:ec:f7:35:ba:a5:ed:15:2e:40:e5:57:
ed:a6:2c:eb:f8:92:2e:f1:c9:43:48:89:4b:33:04:
e2:b0:a0:09:86:c1:f4:06:3c:05:79:6f:e1:48:63:
2c:6e:cf:14:90:cf:88:77:b8:2a:eb:13:18:1c:76:
f0:9e:f1:0c:02:16:50:65:b8:2a:49:e3:1c:e2:45:
8f:20:79:75:57:45:12:18:d0:2d:e8:48:32:60:9a:
06:b4:55:99:64:07:21:29:33:82:6a:27:80:bb:27:
fa:1a:5c:8c:a0:d3:f3:06:47:8c:ea:37:8a:db:f7:
60:07:55:ff:90:17:e1:63:a3:97:5f:65:30:e3:f8:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:5D:E5:BE:57:A4:5A:A5:B6:24:7D:DD:1A:D4:89:69:33:A4:20
X509v3 Authority Key Identifier:
keyid:0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/511EBFFE3E7E11EB979F564CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.93.108.0/22
Signature Algorithm: sha256WithRSAEncryption
99:01:2f:8d:f1:6b:38:77:0a:15:9d:ab:9c:e2:6b:d0:03:7f:
c4:2f:22:23:1f:fc:7c:8b:13:cd:e1:d9:28:0f:5e:cb:0d:fc:
1f:d5:12:7c:ae:38:d1:0e:8b:12:c2:75:f7:fd:8e:fc:98:1b:
43:43:2f:7c:f6:c4:d9:37:0c:12:5f:52:34:0b:c2:48:6c:e4:
76:66:cd:51:7f:04:62:55:b3:76:05:e3:8b:14:cb:0c:13:3a:
86:a6:3c:cb:87:a4:b5:50:37:92:2b:e9:41:f6:4c:81:4c:6c:
ff:e1:97:34:a3:28:e1:26:57:2f:ff:18:a7:aa:4f:6b:9b:65:
6f:34:2e:75:b2:08:a4:c7:8d:15:a2:4f:fb:2a:79:fe:07:3a:
33:c9:cd:4a:04:56:b2:5b:12:f4:b5:25:d8:ca:43:31:ef:33:
f6:59:c5:31:0b:21:a0:c7:bf:3d:4a:0d:cb:83:4c:e7:2a:65:
03:69:d9:45:c9:78:44:d7:87:af:42:d6:c9:32:1b:4a:27:85:
30:3c:61:f8:a9:4d:27:25:24:f7:c3:55:0e:54:b2:ed:53:6e:
5a:73:22:c9:e6:4a:e0:01:c0:5f:6b:28:24:a8:fe:ed:b3:4d:
a6:c0:77:c1:32:61:bf:17:62:6f:9a:c9:3a:af:42:24:79:36:
24:6c:35:6f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJCREUxMTAvBgNVBAUTKDBEMDM0NkM4QTI2NkJFNkFEQ0U0QjdFODM5NTBBRjVG
RTFFQkU1QzQwHhcNMjQwNjA5MDA0MzMxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjY0ZmFiMi1iODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsyrwVuKVgH8P227lJXBAXPdnM0f+pUbSpb96XU/FZQkkiYlGlAtylhAQjjem
O+6zZK3vxx+DCZp+Dx4fm/L+VFzriwlYv5g9OytaqNH1dV2chUkiN7qN7TA/YYAc
A21QJplws813S1sNQkMg4bySMv3oSlb9cooRoocd7Pc1uqXtFS5A5Vftpizr+JIu
8clDSIlLMwTisKAJhsH0BjwFeW/hSGMsbs8UkM+Id7gq6xMYHHbwnvEMAhZQZbgq
SeMc4kWPIHl1V0USGNAt6EgyYJoGtFWZZAchKTOCaieAuyf6GlyMoNPzBkeM6jeK
2/dgB1X/kBfhY6OXX2Uw4/hKkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJhIXeW+
V6RapbYkfd0a1IlpM6QgMB8GA1UdIwQYMBaAFA0DRsiiZr5q3OS36DlQr1/h6+XE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkJERS81RTEyOEZGQzNF
N0QxMUVCQkJFRjI3NENDNEY5QUUwMi9EUU5HeUtKbXZtcmM1TGZvT1ZDdlgtSHI1
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RRTkd5S0ptdm1yYzVMZm9PVkN2WC1IcjVjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTJCREUvNUUxMjhGRkMzRTdEMTFFQkJCRUYyNzRDQzRGOUFFMDIvNTExRUJGRkUz
RTdFMTFFQjk3OUY1NjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnXWwwDQYJKoZIhvcNAQELBQADggEBAJkBL43xazh3ChWd
q5zia9ADf8QvIiMf/HyLE83h2SgPXssN/B/VEnyuONEOixLCdff9jvyYG0NDL3z2
xNk3DBJfUjQLwkhs5HZmzVF/BGJVs3YF44sUywwTOoamPMuHpLVQN5Ir6UH2TIFM
bP/hlzSjKOEmVy//GKeqT2ubZW80LnWyCKTHjRWiT/sqef4HOjPJzUoEVrJbEvS1
JdjKQzHvM/ZZxTELIaDHvz1KDcuDTOcqZQNp2UXJeETXh69C1skyG0onhTA8Yfip
TSclJPfDVQ5Usu1TblpzIsnmSuABwF9rKCSo/u2zTabAd8EyYb8XYm+ayTqvQiR5
NiRsNW8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:44 2025 by rpki-client