Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/F7D11060619811ED9437B344C4F9AE02.roa
File: F7D11060619811ED9437B344C4F9AE02.roa (raw, json)
Hash identifier: tQVarPDsnubq8g+aCXyJraP6hX3o+kW42rbkeVgdzkE=
Subject key identifier: B2:C1:65:D9:2B:64:2B:29:7C:23:AA:32:4E:5E:B2:09:36:59:FE:27
Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Certificate serial: 019C
Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/F7D11060619811ED9437B344C4F9AE02.roa
Signing time: Thu 05 Dec 2024 02:16:51 +0000
ROA not before: Thu 05 Dec 2024 02:16:51 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134840
IP address blocks: 103.57.204.0/24 maxlen: 24
103.57.205.0/24 maxlen: 24
103.57.206.0/24 maxlen: 24
103.57.207.0/24 maxlen: 24
103.203.132.0/24 maxlen: 24
103.203.133.0/24 maxlen: 24
103.203.134.0/24 maxlen: 24
103.203.135.0/24 maxlen: 24
116.206.192.0/24 maxlen: 24
116.206.193.0/24 maxlen: 24
116.206.194.0/24 maxlen: 24
116.206.195.0/24 maxlen: 24
121.46.71.0/24 maxlen: 24
180.235.116.0/24 maxlen: 24
180.235.117.0/24 maxlen: 24
180.235.118.0/24 maxlen: 24
180.235.119.0/24 maxlen: 24
2403:c280::/32 maxlen: 32
2403:c280::/48 maxlen: 48
2403:c280:1::/48 maxlen: 48
2403:c280:2::/48 maxlen: 48
2403:c280:3::/48 maxlen: 48
2403:c280:4::/48 maxlen: 48
2403:c280:5::/48 maxlen: 48
2403:c280:6::/48 maxlen: 48
2403:c280:7::/48 maxlen: 48
2403:c280:8::/48 maxlen: 48
2403:c280:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Validity
Not Before: Dec 5 02:16:51 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67510d13-5773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:89:cd:e0:dd:54:5c:01:cd:23:2a:90:9c:
a2:3d:da:1d:14:25:85:82:50:8a:8e:12:a0:2b:9f:
e3:1a:f7:6f:6e:92:c4:cc:02:5a:c8:19:d8:5a:00:
1b:c3:de:8c:5c:cb:95:56:79:40:60:67:ca:55:8a:
d3:70:2c:3a:cb:8a:3d:ca:48:87:98:0b:3c:fd:5a:
16:af:72:e3:34:1f:36:1b:86:9e:73:2e:93:48:f7:
87:0e:a6:7f:75:31:b6:8b:d6:5c:42:ce:da:e0:99:
76:8e:24:2b:20:19:29:09:9e:39:ef:94:18:cd:9f:
6b:de:8d:cf:be:15:29:09:f2:7f:9f:28:fd:79:73:
1a:10:af:d0:42:2a:15:37:1c:b1:88:40:a8:77:7d:
8d:13:42:9b:54:f0:cd:fa:c4:65:ef:63:fc:cd:92:
3e:1d:fa:d0:37:61:be:63:8e:a6:71:67:9f:52:c3:
7c:f4:0e:95:45:03:a4:c6:36:5e:65:4b:a9:28:3d:
76:f2:2a:87:09:e4:f5:99:e2:ed:e4:ac:f3:07:2d:
82:f0:0b:ec:77:cf:fa:c1:ce:5f:4f:75:6f:6a:94:
ce:5e:6c:94:65:e0:d9:fa:3d:08:e7:68:9e:67:91:
61:93:9c:62:2e:57:f6:a0:46:b2:83:be:1e:b0:f6:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C1:65:D9:2B:64:2B:29:7C:23:AA:32:4E:5E:B2:09:36:59:FE:27
X509v3 Authority Key Identifier:
keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/F7D11060619811ED9437B344C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.57.204.0/22
103.203.132.0/22
116.206.192.0/22
121.46.71.0/24
180.235.116.0/22
IPv6:
2403:c280::/32
Signature Algorithm: sha256WithRSAEncryption
b7:80:9d:6e:26:e1:99:cf:ee:8b:01:12:16:4f:42:15:8c:31:
54:0e:cd:a5:08:18:25:12:50:c9:51:c4:e5:f0:88:fe:41:79:
18:21:5c:f5:90:1c:5e:e1:a4:87:eb:fe:e2:ab:f4:69:a6:14:
15:e9:11:c2:b8:9c:39:7b:e3:43:ac:f6:64:ae:92:3c:0b:ae:
21:be:2f:2c:04:f0:6d:a6:98:31:f4:ac:c0:29:65:14:4c:01:
81:de:5e:8a:91:12:62:dd:67:39:76:37:0b:72:14:3c:cd:4a:
2e:4e:78:b4:4a:01:b7:a9:f3:a9:6e:fc:95:fc:6e:c8:7a:9d:
67:a5:ce:6c:f9:86:c3:4d:6e:3a:63:b6:31:8f:e9:f1:dd:9c:
04:c1:93:f8:a8:d1:23:d8:18:d3:9c:94:0c:69:33:ae:ad:55:
fb:89:64:7f:8f:6f:ee:55:16:9f:58:db:b3:82:34:08:71:48:
e6:6e:98:5d:f9:70:fb:38:e0:0e:c0:7e:4d:08:bd:d6:60:f7:
33:86:19:15:28:75:f6:f3:14:f7:4a:e9:2f:4c:c8:ff:59:f6:
05:f4:83:22:0d:fc:8e:11:8b:a9:df:7a:be:0a:fe:ad:60:9e:
52:92:ae:a3:2a:e8:47:cf:b8:e0:7d:ac:bc:fa:03:a9:7d:5d:
62:66:fd:d8
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0
NTk4OTMyOTIwHhcNMjQxMjA1MDIxNjUxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUxMGQxMy01NzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtLSJzeDdVFwBzSMqkJyiPdodFCWFglCKjhKgK5/jGvdvbpLEzAJayBnYWgAb
w96MXMuVVnlAYGfKVYrTcCw6y4o9ykiHmAs8/VoWr3LjNB82G4aecy6TSPeHDqZ/
dTG2i9ZcQs7a4Jl2jiQrIBkpCZ4575QYzZ9r3o3PvhUpCfJ/nyj9eXMaEK/QQioV
NxyxiECod32NE0KbVPDN+sRl72P8zZI+HfrQN2G+Y46mcWefUsN89A6VRQOkxjZe
ZUupKD128iqHCeT1meLt5KzzBy2C8Avsd8/6wc5fT3VvapTOXmyUZeDZ+j0I52ie
Z5Fhk5xiLlf2oEayg74esPYF0wIDAQABo4ICvDCCArgwHQYDVR0OBBYEFLLBZdkr
ZCspfCOqMk5esgk2Wf4nMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx
OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQ2NzkvRjVCNzhBODg2MTk0MTFFRDhDREJBMjNFQzRGOUFFMDIvRjdEMTEwNjA2
MTk4MTFFRDk0MzdCMzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAJnOcwDBAJny4QDBAJ0zsADBAB5LkcDBAK063QwDQQCAAIw
BwMFACQDwoAwDQYJKoZIhvcNAQELBQADggEBALeAnW4m4ZnP7osBEhZPQhWMMVQO
zaUIGCUSUMlRxOXwiP5BeRghXPWQHF7hpIfr/uKr9GmmFBXpEcK4nDl740Os9mSu
kjwLriG+LywE8G2mmDH0rMApZRRMAYHeXoqREmLdZzl2NwtyFDzNSi5OeLRKAbep
86lu/JX8bsh6nWelzmz5hsNNbjpjtjGP6fHdnATBk/io0SPYGNOclAxpM66tVfuJ
ZH+Pb+5VFp9Y27OCNAhxSOZumF35cPs44A7Afk0IvdZg9zOGGRUodfbzFPdK6S9M
yP9Z9gX0gyIN/I4Ri6nfer4K/q1gnlKSrqMq6EfPuOB9rLz6A6l9XWJm/dg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:30:54 2025 by rpki-client