Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/AC7FAD34756D11EF8E0AC450C4F9AE02.roa
File: AC7FAD34756D11EF8E0AC450C4F9AE02.roa (raw, json)
Hash identifier: Zm4qbPETvWslp8RznHoUL+bcAgC3x8SPRlNir3l6sYs=
Subject key identifier: E5:0C:D8:58:B8:C6:75:D1:56:57:99:44:EE:5E:FE:7A:D0:A3:50:B7
Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial: 0480
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/AC7FAD34756D11EF8E0AC450C4F9AE02.roa
Signing time: Thu 19 Sep 2024 00:03:48 +0000
ROA not before: Thu 19 Sep 2024 00:03:48 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 4788
IP address blocks: 103.168.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Validity
Not Before: Sep 19 00:03:48 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66eb6a64-ec3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:14:3b:19:83:15:b8:ad:c3:5c:c6:bd:d5:
4f:de:99:07:c0:bb:e1:e7:ed:dd:c8:e8:8f:2b:b3:
62:12:27:73:29:67:52:b1:d5:9a:66:4d:56:53:e6:
43:fe:fb:b2:e1:2d:39:b5:5c:4f:b3:7d:ab:ad:36:
c1:48:bc:4b:49:e3:cc:40:47:7f:8b:f5:a9:fa:16:
a4:1e:f4:32:c4:4f:0f:56:24:e4:06:d4:40:42:8e:
ba:63:56:1c:5e:e9:9a:b0:83:ba:e2:cd:06:0a:18:
88:38:77:df:a4:85:81:03:37:1d:a5:5a:ab:9e:35:
81:c4:c0:bd:91:6b:a4:f0:0b:77:bf:0d:fe:1f:4a:
b4:f1:ee:f0:7f:dd:5b:d3:09:61:8e:ca:d4:f1:08:
7c:1a:88:c1:68:dd:9e:35:b5:0c:7a:ee:bd:9f:7e:
61:89:2a:3a:43:f3:24:f3:91:a0:09:36:e6:bd:ca:
49:dd:02:8c:fa:20:03:4a:05:58:3a:d7:35:06:8b:
3f:4d:4d:4c:79:5d:e7:1a:c8:a0:c2:51:ad:5f:76:
4c:a7:5a:59:03:24:69:e4:4b:ea:e9:6c:f1:79:f5:
b9:7b:f5:71:01:83:bc:b5:68:86:fe:2e:9e:d7:17:
51:0d:a2:8d:ec:63:6f:fd:bf:8b:ab:dd:63:e6:99:
0b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:D8:58:B8:C6:75:D1:56:57:99:44:EE:5E:FE:7A:D0:A3:50:B7
X509v3 Authority Key Identifier:
keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/AC7FAD34756D11EF8E0AC450C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d7:8d:5e:b2:25:f9:f7:c1:87:a8:86:42:f8:dd:f2:92:4f:
c4:4d:2a:f5:b9:d2:16:da:00:3c:2b:90:55:dd:9b:31:4c:9c:
46:fd:17:03:07:0e:38:ab:9f:12:ae:e9:47:26:a6:3f:27:1c:
35:e8:43:e7:82:85:ba:08:79:02:fa:48:04:4f:34:3c:00:76:
67:d9:44:2e:6c:0a:a9:54:46:9c:48:9a:62:09:c7:e0:5b:75:
60:6e:8e:14:a7:40:43:29:67:82:dc:7f:ec:60:3e:82:66:03:
31:69:ea:47:3e:08:f8:88:60:da:6d:c3:db:8f:df:75:ff:dc:
0e:c5:72:5b:a3:e6:6d:c1:d8:40:39:e6:91:39:49:f6:63:08:
80:b8:4a:77:de:47:f4:f3:1e:45:59:bd:7d:8c:ff:78:06:5b:
85:48:cf:3d:09:fd:95:f6:ab:74:1d:47:65:a3:d5:48:1c:28:
15:0c:05:2b:8b:85:2a:d7:4e:bf:b6:32:19:e2:9c:e0:80:d5:
e8:50:89:9d:c3:21:cd:63:70:21:72:6c:ec:0c:58:56:a7:c4:
39:a6:3c:69:c8:5d:ab:bb:8a:32:cf:b0:14:09:da:ce:46:4e:
17:5c:d4:81:43:a6:cf:70:4e:65:ca:ce:59:9a:5f:96:76:60:
c0:7e:b0:77
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5
QTUzOUFDRTEwHhcNMjQwOTE5MDAwMzQ4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmViNmE2NC1lYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAup4UOxmDFbitw1zGvdVP3pkHwLvh5+3dyOiPK7NiEidzKWdSsdWaZk1WU+ZD
/vuy4S05tVxPs32rrTbBSLxLSePMQEd/i/Wp+hakHvQyxE8PViTkBtRAQo66Y1Yc
XumasIO64s0GChiIOHffpIWBAzcdpVqrnjWBxMC9kWuk8At3vw3+H0q08e7wf91b
0wlhjsrU8Qh8GojBaN2eNbUMeu69n35hiSo6Q/Mk85GgCTbmvcpJ3QKM+iADSgVY
Otc1Bos/TU1MeV3nGsigwlGtX3ZMp1pZAyRp5Evq6WzxefW5e/VxAYO8tWiG/i6e
1xdRDaKN7GNv/b+Lq91j5pkLWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOUM2Fi4
xnXRVleZRO5e/nrQo1C3MB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx
N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkQ5QkUvQjA5QzNDRTIxMTdCMTFFQzgwRTQyMTQzQzRGOUFFMDIvQUM3RkFEMzQ3
NTZEMTFFRjhFMEFDNDUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnqGgwDQYJKoZIhvcNAQELBQADggEBAKjXjV6yJfn3wYeo
hkL43fKST8RNKvW50hbaADwrkFXdmzFMnEb9FwMHDjirnxKu6Ucmpj8nHDXoQ+eC
hboIeQL6SARPNDwAdmfZRC5sCqlURpxImmIJx+BbdWBujhSnQEMpZ4Lcf+xgPoJm
AzFp6kc+CPiIYNptw9uP33X/3A7Fcluj5m3B2EA55pE5SfZjCIC4SnfeR/TzHkVZ
vX2M/3gGW4VIzz0J/ZX2q3QdR2Wj1UgcKBUMBSuLhSrXTr+2MhninOCA1ehQiZ3D
Ic1jcCFybOwMWFanxDmmPGnIXau7ijLPsBQJ2s5GThdc1IFDps9wTmXKzlmaX5Z2
YMB+sHc=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:50:05 2025 by rpki-client