Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa
File: 8732232CCBA011E887F87451C4F9AE02.roa (raw, json)
Hash identifier: d4g6nOFA6rT76ss8TIfPVoSl8yk4nYFL3JBknIEAxA8=
Subject key identifier: F7:E5:DD:D7:EB:61:1F:8B:07:12:48:57:93:25:F4:56:24:D0:6B:3B
Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Certificate serial: 18A7
Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa
Signing time: Mon 18 Nov 2024 16:34:19 +0000
ROA not before: Mon 18 Nov 2024 16:34:19 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 38719
IP address blocks: 103.20.200.0/22 maxlen: 22
103.28.48.0/22 maxlen: 22
122.201.64.0/19 maxlen: 19
122.201.96.0/19 maxlen: 19
202.146.208.0/21 maxlen: 24
2402:af00::/32 maxlen: 32
2405:3f00::/32 maxlen: 32
2405:3f01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6311 (0x18a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Validity
Not Before: Nov 18 16:34:19 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=673b6c8b-fbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6e:6d:4a:04:01:53:aa:51:dd:20:40:49:e6:
e1:e2:f8:26:b0:90:b1:6d:df:0a:e9:3d:79:80:07:
fd:56:ba:d0:46:4d:53:5d:1c:9f:27:6d:b1:47:a2:
8b:17:6e:f6:4d:83:e8:ca:99:b6:e6:8c:7f:2a:28:
52:69:13:8a:cd:f8:09:33:31:ea:a3:c5:6f:a2:e5:
82:5a:ae:90:e9:d8:ab:05:02:90:b2:92:e6:d9:af:
86:1d:f4:18:fc:ca:77:06:1b:5b:3e:eb:0a:e8:a5:
60:59:92:8a:c5:f9:33:55:c2:8d:5d:16:e1:0d:2b:
50:f5:94:0e:91:b0:1f:19:e9:4b:63:b5:7f:7c:3c:
f1:1f:ce:09:af:88:e9:a7:57:28:a9:dd:67:47:11:
73:a9:f1:fe:86:de:a6:be:c6:6d:e0:9f:90:d6:dd:
b0:63:35:48:23:09:8b:99:2e:b6:d1:3f:18:10:a0:
10:52:3c:10:da:ff:f4:8d:ab:61:60:99:16:5e:75:
f9:98:3a:65:99:94:ea:ae:c7:46:cb:cf:aa:fa:c2:
fc:6f:2e:cb:29:38:fb:a1:b0:47:c7:f7:25:a7:b9:
8f:26:f7:78:37:65:d5:f4:19:11:0d:ca:a5:ff:36:
6f:1c:5a:ba:31:82:14:65:87:c2:8a:6f:fb:5f:9c:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E5:DD:D7:EB:61:1F:8B:07:12:48:57:93:25:F4:56:24:D0:6B:3B
X509v3 Authority Key Identifier:
keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/8732232CCBA011E887F87451C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.200.0/22
103.28.48.0/22
122.201.64.0/18
202.146.208.0/21
IPv6:
2402:af00::/32
2405:3f00::/31
Signature Algorithm: sha256WithRSAEncryption
36:3a:2c:67:a7:db:3e:24:cb:14:bb:58:ea:d1:c5:a1:d0:4e:
db:e4:a8:2b:c9:d0:11:09:41:52:a3:40:42:98:4b:bc:02:b3:
8a:a6:d9:ae:f4:75:0b:36:94:f6:2e:f7:0c:21:76:bf:c1:21:
69:cf:53:60:08:00:1e:9a:9b:16:c2:36:5b:36:8c:14:e8:84:
7e:4c:a7:10:2f:21:36:b5:a9:a9:2c:d3:b9:34:75:58:bd:2c:
73:d7:e6:b5:2c:a9:1d:45:81:1e:d4:bc:02:95:ae:69:e1:44:
9c:54:22:80:18:f3:4d:6f:78:b7:00:d1:22:63:79:8b:38:1d:
f4:91:e3:14:be:cd:1e:0d:21:ad:9b:c3:4f:da:1a:1f:14:1b:
e8:05:97:81:60:c5:79:73:57:38:18:8e:3c:a5:9e:69:3c:47:
c6:0f:57:ed:69:e0:ef:22:6b:de:02:f0:ab:4f:57:08:a7:c5:
68:fd:77:01:01:d0:ca:b3:c2:63:73:3e:6f:c8:0f:62:37:0f:
d8:34:f5:03:af:17:a5:33:46:5d:80:bc:0d:f2:cb:ea:ee:ee:
69:b2:6b:0b:67:39:db:81:cb:91:b6:94:d0:e4:56:46:fb:76:
4f:d1:8e:14:0c:7c:0e:d9:7a:9f:a8:4f:dc:5f:20:c9:94:20:
a9:0c:e2:04
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgICGKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY5RkIxMTAvBgNVBAUTKEJGRkRCN0VCRjQ1RDdDNjFCRjlEMjM5MDhBOUYzOEMz
MzI5ODU5NzAwHhcNMjQxMTE4MTYzNDE5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzNiNmM4Yi1mYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3W5tSgQBU6pR3SBASebh4vgmsJCxbd8K6T15gAf9VrrQRk1TXRyfJ22xR6KL
F272TYPoypm25ox/KihSaROKzfgJMzHqo8VvouWCWq6Q6dirBQKQspLm2a+GHfQY
/Mp3BhtbPusK6KVgWZKKxfkzVcKNXRbhDStQ9ZQOkbAfGelLY7V/fDzxH84Jr4jp
p1coqd1nRxFzqfH+ht6mvsZt4J+Q1t2wYzVIIwmLmS620T8YEKAQUjwQ2v/0jath
YJkWXnX5mDplmZTqrsdGy8+q+sL8by7LKTj7obBHx/clp7mPJvd4N2XV9BkRDcql
/zZvHFq6MYIUZYfCim/7X5woewIDAQABo4ICvTCCArkwHQYDVR0OBBYEFPfl3dfr
YR+LBxJIV5Ml9FYk0Gs7MB8GA1UdIwQYMBaAFL/9t+v0XXxhv50jkIqfOMMymFlw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjlGQi9BRjAwOThEMDg5
NkYxMUU3OEE4MUM4M0NDNEY5QUUwMi92XzIzNl9SZGZHR19uU09RaXA4NHd6S1lX
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZfMjM2X1JkZkdHX25TT1FpcDg0d3pLWVdYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY5RkIvQUYwMDk4RDA4OTZGMTFFNzhBODFDODNDQzRGOUFFMDIvODczMjIzMkND
QkEwMTFFODg3Rjg3NDUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E
ODA2MB4EAgABMBgDBAJnFMgDBAJnHDADBAZ6yUADBAPKktAwFAQCAAIwDgMFACQC
rwADBQEkBT8AMA0GCSqGSIb3DQEBCwUAA4IBAQA2Oixnp9s+JMsUu1jq0cWh0E7b
5KgrydARCUFSo0BCmEu8ArOKptmu9HULNpT2LvcMIXa/wSFpz1NgCAAempsWwjZb
NowU6IR+TKcQLyE2tampLNO5NHVYvSxz1+a1LKkdRYEe1LwCla5p4UScVCKAGPNN
b3i3ANEiY3mLOB30keMUvs0eDSGtm8NP2hofFBvoBZeBYMV5c1c4GI48pZ5pPEfG
D1ftaeDvImveAvCrT1cIp8Vo/XcBAdDKs8Jjcz5vyA9iNw/YNPUDrxelM0ZdgLwN
8svq7u5psmsLZznbgcuRtpTQ5FZG+3ZP0Y4UDHwO2XqfqE/cXyDJlCCpDOIE
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:28 2025 by rpki-client