Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa
File: 64D427963D8B11EE80D1E96DC4F9AE02.roa (raw, json)
Hash identifier: fdlRqtNSwYBeTIqhoeb8XWzhK9Fv7Fkpx1Jd+sxZc0I=
Subject key identifier: 98:FC:5C:76:99:B8:87:65:A2:65:F5:73:39:4F:49:C3:34:F7:D4:A5
Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial: 013A
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa
Signing time: Sat 27 Jul 2024 04:46:42 +0000
ROA not before: Sat 27 Jul 2024 04:46:42 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 133534
IP address blocks: 103.234.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Validity
Not Before: Jul 27 04:46:42 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a47bb2-17a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:26:53:34:f0:d8:7e:26:68:7d:29:66:ad:
32:fd:d4:da:6e:58:fa:63:e6:50:21:df:22:3c:9a:
59:3c:b8:50:71:04:63:6d:54:05:0c:ed:ad:79:95:
bf:ed:0d:0b:d7:bf:b2:a7:bb:85:3c:2a:8b:c7:84:
59:d3:8e:bc:1a:a9:67:73:7d:d0:e8:30:af:2a:7d:
65:6a:0e:73:f5:8b:f7:ab:b9:28:6c:c7:5c:61:c8:
eb:9a:f5:d8:52:e6:ec:70:12:09:6e:8f:00:7c:a8:
15:7b:ad:40:36:97:56:e5:f0:17:69:c9:c2:a3:66:
4b:96:87:7b:29:00:4e:4c:e8:90:92:84:b8:88:01:
11:cf:bd:3a:f1:ce:57:d8:15:cc:45:76:df:f7:5c:
0d:f9:2c:98:a5:05:07:34:68:87:d5:12:57:fd:b4:
6f:6c:68:73:a0:a9:ab:14:29:fe:36:1a:c5:dc:bc:
fa:97:d7:e5:7e:5c:01:48:60:59:7f:c0:b5:41:c2:
ba:18:d8:40:32:4e:f6:d4:66:2a:db:9b:e8:ce:34:
6c:18:80:34:65:12:1e:6b:00:dd:ba:e8:30:1f:d3:
fa:28:4f:ed:c9:eb:d3:ac:f8:b5:6b:23:fc:95:b3:
51:92:5e:ea:57:d8:46:53:ba:8e:8f:74:ed:b0:cb:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FC:5C:76:99:B8:87:65:A2:65:F5:73:39:4F:49:C3:34:F7:D4:A5
X509v3 Authority Key Identifier:
keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/64D427963D8B11EE80D1E96DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.108.0/24
Signature Algorithm: sha256WithRSAEncryption
03:47:37:23:29:a6:1a:06:71:e5:44:2b:84:23:55:84:62:8e:
b8:0c:68:32:22:e0:1e:42:bb:05:60:3d:fe:26:1f:3a:16:0d:
d4:d8:d3:8d:df:45:95:f0:a8:2c:74:1c:1f:a9:75:2b:cc:f4:
5e:7f:0c:aa:01:40:76:1e:bf:fb:75:bc:7f:0b:dd:75:54:51:
5c:c7:9b:eb:f3:d7:04:76:d5:a3:b7:ae:42:7d:00:36:fc:cf:
91:6d:38:65:67:e4:29:29:3b:f0:6d:42:16:ab:d7:96:d6:9b:
8f:e9:74:5a:c6:09:e4:f8:c6:c3:53:43:f9:d1:0d:dd:d2:55:
02:f0:a2:d2:af:9f:44:4e:91:a4:1e:25:c5:1e:be:e0:3c:a4:
2a:6d:2f:cd:bd:b3:5f:7b:78:94:a1:13:49:9b:2a:95:7c:5b:
04:ac:43:0d:0b:fc:ad:a8:bd:e3:8b:5d:55:13:1e:f3:db:30:
41:19:f0:49:93:d1:59:68:25:ec:19:bc:71:f2:93:56:e7:7c:
bc:db:36:d6:d2:d5:25:3a:4a:a6:c2:c7:28:6e:ac:c2:44:b4:
40:c2:af:ab:7c:87:43:2f:0e:03:70:ec:f1:e4:ca:b0:6a:58:
68:8f:a5:a6:0c:04:ae:fe:6c:f9:13:1b:cb:b8:52:2e:1f:43:
8f:bc:25:c2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4
MjU0Nzc2QUEwHhcNMjQwNzI3MDQ0NjQyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE0N2JiMi0xN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BUmUzTw2H4maH0pZq0y/dTablj6Y+ZQId8iPJpZPLhQcQRjbVQFDO2teZW/
7Q0L17+yp7uFPCqLx4RZ0468Gqlnc33Q6DCvKn1lag5z9Yv3q7kobMdcYcjrmvXY
UubscBIJbo8AfKgVe61ANpdW5fAXacnCo2ZLlod7KQBOTOiQkoS4iAERz7068c5X
2BXMRXbf91wN+SyYpQUHNGiH1RJX/bRvbGhzoKmrFCn+NhrF3Lz6l9flflwBSGBZ
f8C1QcK6GNhAMk721GYq25vozjRsGIA0ZRIeawDduugwH9P6KE/tyevTrPi1ayP8
lbNRkl7qV9hGU7qOj3TtsMvBPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJj8XHaZ
uIdlomX1czlPScM099SlMB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB
ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk
cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjdFOTkvMEFDRTE5QjA3QTg1MTFFREFENjkyODg3QzRGOUFFMDIvNjRENDI3OTYz
RDhCMTFFRTgwRDFFOTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn6mwwDQYJKoZIhvcNAQELBQADggEBAANHNyMpphoGceVE
K4QjVYRijrgMaDIi4B5CuwVgPf4mHzoWDdTY043fRZXwqCx0HB+pdSvM9F5/DKoB
QHYev/t1vH8L3XVUUVzHm+vz1wR21aO3rkJ9ADb8z5FtOGVn5CkpO/BtQhar15bW
m4/pdFrGCeT4xsNTQ/nRDd3SVQLwotKvn0ROkaQeJcUevuA8pCptL829s197eJSh
E0mbKpV8WwSsQw0L/K2oveOLXVUTHvPbMEEZ8EmT0VloJewZvHHyk1bnfLzbNtbS
1SU6SqbCxyhurMJEtEDCr6t8h0MvDgNw7PHkyrBqWGiPpaYMBK7+bPkTG8u4Ui4f
Q4+8JcI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:49 2025 by rpki-client