Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa
File: EF98E11472E211EEB93A4F72C4F9AE02.roa (raw, json)
Hash identifier: irBKz5hDdDQSuzPo8HTBKaH+G3tFJbjs2+W0RwVXyv8=
Subject key identifier: 72:BA:AD:39:08:61:B4:5C:E9:D5:8B:C4:CB:CA:E9:0A:69:73:F0:1A
Certificate issuer: /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Certificate serial: 58
Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa
Signing time: Wed 03 Apr 2024 08:09:35 +0000
ROA not before: Wed 03 Apr 2024 08:09:35 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 140214
IP address blocks: 103.148.145.0/24 maxlen: 24
103.173.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Validity
Not Before: Apr 3 08:09:35 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660d0ebe-4251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:d6:4c:d8:59:a3:d6:c8:ba:78:1a:83:7d:
a2:67:d3:0d:dc:32:d6:99:6a:f6:db:14:74:c4:eb:
ae:22:b1:6c:97:34:47:9a:9d:d4:e8:4c:cd:ef:9a:
5c:92:dd:f2:80:ee:f0:4e:e5:5d:9b:d0:4d:9a:e3:
e0:28:9f:91:57:44:10:e7:13:b8:e3:d3:6c:a6:0b:
78:67:ec:be:01:2e:bc:07:ac:1b:57:7c:92:00:88:
83:82:3d:f7:31:8f:fd:bb:56:f9:7e:7e:af:71:fe:
b4:8c:af:c3:30:4e:74:0e:04:c4:44:f9:cc:36:23:
d3:8c:d5:47:fd:67:71:91:96:f1:05:da:dc:44:ca:
a2:88:85:fa:6a:f3:49:bf:80:73:85:cc:f0:be:6b:
f3:5a:59:2b:62:15:63:48:6a:4e:df:13:01:90:3a:
7a:0c:ee:7a:34:a6:d6:a8:c1:39:4f:b9:07:00:fd:
40:23:28:c5:69:ed:96:40:ca:a0:b4:72:35:30:a3:
17:7b:91:8d:b7:19:99:d2:5a:62:41:88:58:23:c2:
57:e8:53:22:f2:51:df:90:9a:f9:ac:9b:b3:29:18:
73:b7:ec:d7:45:fe:54:0e:f4:83:2a:53:29:d3:f8:
cd:fe:d5:37:c1:60:42:e2:b7:9a:2b:9e:f0:d5:a3:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BA:AD:39:08:61:B4:5C:E9:D5:8B:C4:CB:CA:E9:0A:69:73:F0:1A
X509v3 Authority Key Identifier:
keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/EF98E11472E211EEB93A4F72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.145.0/24
103.173.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:84:a4:1c:ed:45:bf:22:17:3d:22:bc:f4:00:fb:7e:00:18:
91:9d:64:6b:47:22:66:a0:88:92:04:0b:6c:df:e4:0a:5e:92:
43:92:98:a8:e1:73:8c:5b:e0:52:ec:1c:db:79:ae:56:8b:2d:
5c:20:51:87:8b:43:ed:d9:ec:14:8d:6c:cc:30:c6:b2:2a:f5:
91:58:14:2a:32:f3:75:2a:ed:4e:46:7a:21:bc:f7:d7:e3:80:
bc:d7:8b:a7:6b:71:90:e8:22:78:9c:3c:cb:e3:a3:b7:84:11:
81:aa:0c:3e:82:ec:fb:90:15:db:56:4e:06:ee:4d:28:7b:50:
54:30:b6:c5:97:2e:f2:22:47:b8:79:d8:20:f0:1f:8e:52:9b:
2b:3c:e1:04:1a:9d:97:60:ca:4e:e9:ba:f5:43:76:9a:79:02:
d6:03:7e:f8:88:1e:6f:0a:e6:7f:a2:68:cd:6d:aa:0d:26:d7:
5f:2d:d3:cd:87:dd:92:95:ff:60:31:09:54:58:f2:cc:c7:ff:
3e:f7:42:b9:79:13:62:8f:7a:3d:6f:e7:0b:f2:1b:a2:42:d2:
dd:f5:a7:49:38:72:a1:62:10:5f:09:c0:2b:cb:2e:55:9e:63:
37:14:b7:58:02:c2:0c:26:b3:75:01:28:32:62:67:d5:22:b0:
9f:fa:c8:88
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MjhFMjExMC8GA1UEBRMoQzg4QzJBQTk0QUFFNUVGOUY0RDQ5N0U4Mzg3QTM5REQx
QkNFOTM5RDAeFw0yNDA0MDMwODA5MzVaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2MGQwZWJlLTQyNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtH9ZM2Fmj1si6eBqDfaJn0w3cMtaZavbbFHTE664isWyXNEeandToTM3vmlyS
3fKA7vBO5V2b0E2a4+Aon5FXRBDnE7jj02ymC3hn7L4BLrwHrBtXfJIAiIOCPfcx
j/27Vvl+fq9x/rSMr8MwTnQOBMRE+cw2I9OM1Uf9Z3GRlvEF2txEyqKIhfpq80m/
gHOFzPC+a/NaWStiFWNIak7fEwGQOnoM7no0ptaowTlPuQcA/UAjKMVp7ZZAyqC0
cjUwoxd7kY23GZnSWmJBiFgjwlfoUyLyUd+Qmvmsm7MpGHO37NdF/lQO9IMqUynT
+M3+1TfBYELit5ornvDVo0UVAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUcrqtOQhh
tFzp1YvEy8rpCmlz8BowHwYDVR0jBBgwFoAUyIwqqUquXvn01JfoOHo53RvOk50w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyOEUyL0NFNTQwNkY2NzJF
MTExRUVCMDc4MTYxOUM0RjlBRTAyL3lJd3FxVXF1WHZuMDFKZm9PSG81M1J2T2s1
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveUl3cXFVcXVYdm4wMUpmb09IbzUzUnZPazUwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjhFMi9DRTU0MDZGNjcyRTExMUVFQjA3ODE2MTlDNEY5QUUwMi9FRjk4RTExNDcy
RTIxMUVFQjkzQTRGNzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAGeUkQMEAGetODANBgkqhkiG9w0BAQsFAAOCAQEAOoSkHO1F
vyIXPSK89AD7fgAYkZ1ka0ciZqCIkgQLbN/kCl6SQ5KYqOFzjFvgUuwc23muVost
XCBRh4tD7dnsFI1szDDGsir1kVgUKjLzdSrtTkZ6Ibz31+OAvNeLp2txkOgieJw8
y+Ojt4QRgaoMPoLs+5AV21ZOBu5NKHtQVDC2xZcu8iJHuHnYIPAfjlKbKzzhBBqd
l2DKTum69UN2mnkC1gN++Igebwrmf6JozW2qDSbXXy3TzYfdkpX/YDEJVFjyzMf/
PvdCuXkTYo96PW/nC/IbokLS3fWnSThyoWIQXwnAK8suVZ5jNxS3WALCDCazdQEo
MmJn1SKwn/rIiA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:24:31 2025 by rpki-client