Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/1F8D757623B811E9971D8168C4F9AE02.roa
File: 1F8D757623B811E9971D8168C4F9AE02.roa (raw, json)
Hash identifier: T/B/35CfwwdqXePoF3h1HVhAJX4x/EEmRiwOM5XJuNE=
Subject key identifier: BC:65:F1:C3:DF:11:BF:38:60:42:16:8A:D0:7D:6A:17:51:7C:D0:ED
Certificate issuer: /CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
Certificate serial: 0FDF
Authority key identifier: 60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/1F8D757623B811E9971D8168C4F9AE02.roa
Signing time: Thu 22 Feb 2024 18:25:57 +0000
ROA not before: Thu 22 Feb 2024 18:25:57 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138549
IP address blocks: 103.132.220.0/22 maxlen: 22
103.132.220.0/23 maxlen: 23
103.132.220.0/24 maxlen: 24
103.132.221.0/24 maxlen: 24
103.132.222.0/23 maxlen: 23
103.132.222.0/24 maxlen: 24
103.132.223.0/24 maxlen: 24
2404:40c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4063 (0xfdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131D31/serialNumber=60D13183D39DE6956560231E7E0317E69CBC6C0F
Validity
Not Before: Feb 22 18:25:57 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d791b5-423f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:76:28:8c:25:01:0e:5d:63:82:8d:a3:99:
32:87:b6:83:d8:42:1c:2a:d1:fd:c4:c9:a3:4d:3d:
18:b6:ce:25:d7:99:d7:e9:b0:a8:66:04:2e:c2:34:
60:4f:e8:41:67:2f:e8:6e:4c:f0:54:2e:e6:ed:ac:
6e:32:4b:f4:46:9c:02:e8:17:df:e2:ef:cd:79:63:
4d:3e:bf:79:bc:2b:33:c3:42:44:d9:ef:58:16:54:
f1:81:3f:2a:60:f6:24:4c:a9:e0:18:df:ab:ad:6d:
6e:1f:ac:fd:6f:ae:30:03:fa:38:87:28:e1:8c:a6:
01:56:92:44:09:17:81:38:dc:80:b4:2d:cd:72:c3:
9b:20:a2:ae:75:89:97:32:34:7a:34:f5:8b:65:3f:
ec:c6:d7:26:ad:2f:ee:25:24:9b:a7:88:28:d4:86:
07:3d:75:8a:39:e9:1c:34:87:7c:7b:1b:55:d6:48:
6a:43:27:ff:e4:b9:72:21:4a:0d:1d:26:0f:d8:83:
1e:ed:4c:5c:3a:a0:bb:92:a7:d9:fa:1a:70:ef:21:
d0:08:2d:10:17:46:06:39:4f:84:7d:7a:78:d3:2a:
1f:74:67:ca:69:05:57:5f:ec:61:69:72:c6:6f:24:
2b:14:54:6e:5e:18:65:64:e3:3a:69:23:15:ec:84:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:65:F1:C3:DF:11:BF:38:60:42:16:8A:D0:7D:6A:17:51:7C:D0:ED
X509v3 Authority Key Identifier:
keyid:60:D1:31:83:D3:9D:E6:95:65:60:23:1E:7E:03:17:E6:9C:BC:6C:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/YNExg9Od5pVlYCMefgMX5py8bA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNExg9Od5pVlYCMefgMX5py8bA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D31/65EF296A231311E9A29BB174C4F9AE02/1F8D757623B811E9971D8168C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.220.0/22
IPv6:
2404:40c0::/32
Signature Algorithm: sha256WithRSAEncryption
32:ca:d5:fe:a6:40:84:db:90:1b:d7:ac:ed:aa:1a:03:74:0f:
2a:b2:6c:d5:7f:f8:45:ba:6f:b5:7c:9c:ec:67:93:56:2b:67:
ca:a1:16:5f:c1:9f:0c:cf:3f:1b:3f:16:a2:6e:f4:b5:07:33:
2e:ed:66:9f:85:38:14:7f:06:b4:55:86:b4:78:70:1c:0f:87:
f3:cb:1b:9a:a4:24:05:7d:f9:dc:c5:f2:15:67:46:af:58:f2:
ed:f8:0d:d4:14:af:72:6d:dd:09:57:dd:d8:b0:8e:a7:df:f6:
9e:e1:7d:f7:97:76:04:aa:a4:dd:68:47:69:8f:57:47:48:8c:
fe:64:1c:6d:8f:87:60:08:b2:9c:08:e6:53:28:fa:6c:50:93:
f8:39:92:76:66:d6:0f:94:30:de:b3:0c:33:8d:dd:ed:42:b5:
63:b7:5b:ec:be:99:22:da:d1:bf:1a:fc:dc:5f:7e:58:d2:aa:
58:a6:01:c6:62:a7:da:fb:15:e4:77:5e:71:f0:11:3c:15:bb:
d6:02:71:9e:f3:d7:84:6f:31:64:87:f7:54:59:be:d2:b7:49:
46:ea:3c:89:9a:b4:99:92:fd:53:2c:b8:f9:55:ed:87:f6:9d:
2b:89:b3:b1:c8:c9:5d:e5:43:c9:c8:c4:5d:2d:40:cf:fc:b8:
72:e3:a5:c6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICD98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFEMzExMTAvBgNVBAUTKDYwRDEzMTgzRDM5REU2OTU2NTYwMjMxRTdFMDMxN0U2
OUNCQzZDMEYwHhcNMjQwMjIyMTgyNTU3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQ3OTFiNS00MjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvpl2KIwlAQ5dY4KNo5kyh7aD2EIcKtH9xMmjTT0Yts4l15nX6bCoZgQuwjRg
T+hBZy/obkzwVC7m7axuMkv0RpwC6Bff4u/NeWNNPr95vCszw0JE2e9YFlTxgT8q
YPYkTKngGN+rrW1uH6z9b64wA/o4hyjhjKYBVpJECReBONyAtC3NcsObIKKudYmX
MjR6NPWLZT/sxtcmrS/uJSSbp4go1IYHPXWKOekcNId8extV1khqQyf/5LlyIUoN
HSYP2IMe7UxcOqC7kqfZ+hpw7yHQCC0QF0YGOU+EfXp40yofdGfKaQVXX+xhaXLG
byQrFFRuXhhlZOM6aSMV7IQOFwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLxl8cPf
Eb84YEIWitB9ahdRfNDtMB8GA1UdIwQYMBaAFGDRMYPTneaVZWAjHn4DF+acvGwP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQzMS82NUVGMjk2QTIz
MTMxMUU5QTI5QkIxNzRDNEY5QUUwMi9ZTkV4ZzlPZDVwVmxZQ01lZmdNWDVweThi
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lORXhnOU9kNXBWbFlDTWVmZ01YNXB5OGJBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzFEMzEvNjVFRjI5NkEyMzEzMTFFOUEyOUJCMTc0QzRGOUFFMDIvMUY4RDc1NzYy
M0I4MTFFOTk3MUQ4MTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnhNwwDQQCAAIwBwMFACQEQMAwDQYJKoZIhvcNAQELBQAD
ggEBADLK1f6mQITbkBvXrO2qGgN0DyqybNV/+EW6b7V8nOxnk1YrZ8qhFl/BnwzP
Pxs/FqJu9LUHMy7tZp+FOBR/BrRVhrR4cBwPh/PLG5qkJAV9+dzF8hVnRq9Y8u34
DdQUr3Jt3QlX3diwjqff9p7hffeXdgSqpN1oR2mPV0dIjP5kHG2Ph2AIspwI5lMo
+mxQk/g5knZm1g+UMN6zDDON3e1CtWO3W+y+mSLa0b8a/NxffljSqlimAcZip9r7
FeR3XnHwETwVu9YCcZ7z14RvMWSH91RZvtK3SUbqPImatJmS/VMsuPlV7Yf2nSuJ
s7HIyV3lQ8nIxF0tQM/8uHLjpcY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:57 2025 by rpki-client