Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa
File: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (raw, json)
Hash identifier: VdMfsAJk3V7QieqJhJSnIh1YzoUvum5VdjclyzxhM5o=
Subject key identifier: 77:D7:96:E3:3A:43:20:AB:2D:C0:71:1B:24:06:BF:E3:B3:BC:69:EF
Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Certificate serial: 0BB7
Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa
Signing time: Mon 24 Jun 2024 19:20:44 +0000
ROA not before: Mon 24 Jun 2024 19:20:44 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 40676
IP address blocks: 103.77.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2999 (0xbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Validity
Not Before: Jun 24 19:20:44 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6679c70c-9bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:ec:64:b1:62:d5:c3:04:3b:07:8b:4c:bc:
54:6c:2c:52:2b:fd:88:19:74:93:40:ab:bd:6c:fd:
30:3d:7d:b5:1c:4b:7b:c1:bf:e9:ae:44:ea:e3:31:
18:8d:0e:f0:19:a4:fd:17:73:96:f4:b7:0a:c4:a2:
ab:4b:24:7c:20:83:ed:9d:7f:9e:44:2f:3a:70:c8:
f4:22:ed:d9:a7:9a:a8:7c:22:64:4a:44:57:3f:8c:
76:99:19:29:c4:ce:ff:b0:38:f9:b8:19:91:01:7a:
c3:33:25:fd:d4:3a:77:f9:6d:0a:60:78:8c:5c:21:
f8:24:50:8c:28:92:3b:9c:54:73:c5:8e:97:45:40:
a0:96:53:b3:45:d2:50:cf:a3:a5:23:ea:10:93:9f:
cb:55:e7:9e:bf:fb:72:68:4a:9d:6c:4a:d1:90:56:
78:b8:9b:2c:90:33:8f:4c:bb:ac:9d:ef:6d:f3:65:
b2:c7:d6:2a:96:f3:6b:d6:a5:04:fe:71:1f:32:01:
5f:be:a1:26:3a:5b:31:0f:71:da:e5:43:e5:45:d8:
03:38:b8:85:51:b9:f0:5f:d1:d4:ac:a4:df:cd:0a:
6b:da:22:b5:b4:4a:1f:6b:33:e2:f9:7a:75:c8:fb:
75:ab:31:c4:35:21:02:18:20:5a:4b:b2:62:ef:cd:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D7:96:E3:3A:43:20:AB:2D:C0:71:1B:24:06:BF:E3:B3:BC:69:EF
X509v3 Authority Key Identifier:
keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/37FE0B120C0011EAA414FC4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.224.0/24
Signature Algorithm: sha256WithRSAEncryption
54:92:3c:87:d0:1c:ed:af:e8:ff:e8:92:92:99:36:55:ad:33:
0c:41:7b:5f:fc:b9:17:78:94:6d:bc:16:42:c6:24:28:ae:d4:
04:87:23:f1:af:be:66:6f:7d:53:4b:d3:53:f7:58:b0:c2:64:
54:83:73:0b:7f:41:b6:65:53:f9:48:ef:0d:2a:90:61:7d:55:
76:ee:51:17:bb:9b:33:b5:2b:ad:80:59:42:e5:74:23:99:8b:
35:fe:cb:5c:cb:2b:78:1d:94:d1:c6:97:00:95:51:77:1b:5a:
c8:63:a5:21:e4:2b:2b:92:6c:f5:9b:39:12:ec:82:38:9e:df:
7f:ef:62:fc:90:56:85:9c:51:ab:b4:01:85:b6:54:59:68:13:
db:99:92:a2:4c:ca:c2:f8:7f:1e:00:d7:71:fa:e5:be:8f:e4:
8f:92:fb:fa:ea:30:46:37:82:00:fd:29:60:ec:cf:85:e8:29:
d9:e8:be:83:05:8d:2e:38:9c:45:55:20:45:32:ec:f2:29:37:
c8:b7:aa:38:c3:9e:87:84:c5:e4:ca:3a:68:1f:8b:b5:e1:80:
69:6a:96:6d:17:09:4d:1a:9a:d7:f7:8b:5b:3a:04:32:22:62:
76:81:8b:1c:14:ca:1e:31:f3:82:0b:4c:a2:e9:9e:06:a7:4a:
e8:d6:6b:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFBQkQxMTAvBgNVBAUTKDJFOUM5MUY0RTM5NEE0QUZBOTc2RDZCQzNGNjVERjJE
OUYwNzlFQkQwHhcNMjQwNjI0MTkyMDQ0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njc5YzcwYy05YmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwSfsZLFi1cMEOweLTLxUbCxSK/2IGXSTQKu9bP0wPX21HEt7wb/prkTq4zEY
jQ7wGaT9F3OW9LcKxKKrSyR8IIPtnX+eRC86cMj0Iu3Zp5qofCJkSkRXP4x2mRkp
xM7/sDj5uBmRAXrDMyX91Dp3+W0KYHiMXCH4JFCMKJI7nFRzxY6XRUCgllOzRdJQ
z6OlI+oQk5/LVeeev/tyaEqdbErRkFZ4uJsskDOPTLusne9t82Wyx9YqlvNr1qUE
/nEfMgFfvqEmOlsxD3Ha5UPlRdgDOLiFUbnwX9HUrKTfzQpr2iK1tEofazPi+Xp1
yPt1qzHENSECGCBaS7Ji782vVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHfXluM6
QyCrLcBxGyQGv+OzvGnvMB8GA1UdIwQYMBaAFC6ckfTjlKSvqXbWvD9l3y2fB569
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCRC8yMEU4RjlBMDA0
RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBLLXBkdGE4UDJYZkxaOEhu
cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xweVI5T09VcEstcGR0YThQMlhmTFo4SG5yMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzFBQkQvMjBFOEY5QTAwNEU5MTFFQThEMjBFRTVGQzRGOUFFMDIvMzdGRTBCMTIw
QzAwMTFFQUE0MTRGQzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnTeAwDQYJKoZIhvcNAQELBQADggEBAFSSPIfQHO2v6P/o
kpKZNlWtMwxBe1/8uRd4lG28FkLGJCiu1ASHI/GvvmZvfVNL01P3WLDCZFSDcwt/
QbZlU/lI7w0qkGF9VXbuURe7mzO1K62AWULldCOZizX+y1zLK3gdlNHGlwCVUXcb
WshjpSHkKyuSbPWbORLsgjie33/vYvyQVoWcUau0AYW2VFloE9uZkqJMysL4fx4A
13H65b6P5I+S+/rqMEY3ggD9KWDsz4XoKdnovoMFjS44nEVVIEUy7PIpN8i3qjjD
noeExeTKOmgfi7XhgGlqlm0XCU0amtf3i1s6BDIiYnaBixwUyh4x84ILTKLpngan
SujWa88=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:40:20 2025 by rpki-client