Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/B394CFAA3B1C11EE9AEE717AC4F9AE02.roa
File: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (raw, json)
Hash identifier: VQgzjbt+yUKlk0a3cKkNbYjoYrGC1Q3yZRt8dWoxZtQ=
Subject key identifier: 2A:04:88:A1:D8:5A:A7:A9:4F:46:22:FA:69:55:C5:10:B6:63:CF:04
Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052
Certificate serial: 0994
Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/B394CFAA3B1C11EE9AEE717AC4F9AE02.roa
Signing time: Tue 20 Feb 2024 20:49:16 +0000
ROA not before: Tue 20 Feb 2024 20:49:16 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 54600
IP address blocks: 103.149.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052
Validity
Not Before: Feb 20 20:49:16 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d5104b-3d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:d3:7d:08:b1:c2:6e:87:c6:9e:5b:1f:a2:
10:02:c5:af:27:a0:ef:38:04:7f:2c:02:a5:c4:91:
dd:3a:17:59:56:f5:4b:5c:0d:a1:52:9d:f3:c7:fc:
34:5b:1e:fe:43:15:a0:18:f8:06:09:d0:84:8c:f7:
c6:18:6a:3b:f4:64:b4:11:8b:4b:44:e7:3b:3e:41:
ad:18:0d:78:58:cf:8f:3a:76:1e:5c:3b:77:1c:31:
02:70:b6:79:47:06:5c:14:23:c7:61:52:ac:6d:51:
dd:f2:e6:8b:ed:53:ed:44:68:b7:d0:71:cd:bb:d7:
10:33:06:f1:a8:f7:81:52:84:23:4e:5b:aa:fd:4a:
c3:08:19:6e:77:66:67:6a:b2:17:b8:06:66:38:51:
9d:82:4b:9a:dc:b5:c4:1a:6c:4b:33:44:43:3b:b9:
eb:d8:71:26:84:a1:c9:4e:31:37:51:8e:3e:43:20:
f3:06:67:fe:81:dd:d2:c4:80:77:7d:9c:ed:a3:b4:
cf:c0:dc:4d:6f:9e:7a:98:38:c1:20:b1:10:e8:06:
f0:0b:68:0c:04:da:48:41:e3:44:ae:9a:a4:a8:76:
d2:7a:1a:ec:ad:05:73:1a:60:cc:e3:ea:85:c7:d4:
94:e0:f9:96:7a:26:80:10:13:5f:c9:de:c1:22:80:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:04:88:A1:D8:5A:A7:A9:4F:46:22:FA:69:55:C5:10:B6:63:CF:04
X509v3 Authority Key Identifier:
keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/B394CFAA3B1C11EE9AEE717AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.40.0/23
Signature Algorithm: sha256WithRSAEncryption
f1:0d:61:c1:0a:fb:66:ce:64:e6:f7:89:bc:63:70:8e:1c:3e:
69:2d:30:f6:7c:82:c7:f0:12:15:02:59:34:27:8e:90:de:18:
16:8d:9c:32:2a:c2:c8:47:f1:29:89:61:d4:46:5c:af:5f:7f:
45:10:6d:f6:8c:f4:6b:bc:b7:55:95:8b:87:e9:45:c5:8b:d3:
3f:5b:03:b9:76:db:bc:c7:8f:b2:07:8d:8e:17:e5:d7:1f:ee:
56:fc:8d:f0:25:58:e6:0c:c3:da:60:67:ef:2e:64:86:a3:77:
76:ef:c6:47:64:0f:89:d3:08:ba:d5:54:16:76:67:e8:08:a5:
15:71:67:e2:29:1e:9a:25:b3:9e:69:7b:d7:aa:14:1a:e2:f1:
df:d2:23:25:a0:9e:5e:03:83:e8:e7:6d:4f:79:2d:ba:dd:89:
5d:8e:1a:29:20:2e:ba:85:31:bd:2d:d4:00:50:59:8d:8c:eb:
39:2d:3a:c8:9c:ba:81:b2:d8:4a:8b:7e:3e:0f:5e:2d:45:c3:
ed:7e:b5:a3:07:e5:fe:ee:a1:62:55:ad:8c:c7:81:92:ad:23:
da:00:ba:1f:7f:50:c1:04:93:02:c0:ed:6f:e0:a7:1e:27:a7:
ea:73:47:4f:58:93:87:ec:cb:75:0d:97:e0:3c:30:21:72:79:
c6:0d:4f:7f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB
MTY1MjIwNTIwHhcNMjQwMjIwMjA0OTE2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQ1MTA0Yi0zZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyJzTfQixwm6Hxp5bH6IQAsWvJ6DvOAR/LAKlxJHdOhdZVvVLXA2hUp3zx/w0
Wx7+QxWgGPgGCdCEjPfGGGo79GS0EYtLROc7PkGtGA14WM+POnYeXDt3HDECcLZ5
RwZcFCPHYVKsbVHd8uaL7VPtRGi30HHNu9cQMwbxqPeBUoQjTluq/UrDCBlud2Zn
arIXuAZmOFGdgkua3LXEGmxLM0RDO7nr2HEmhKHJTjE3UY4+QyDzBmf+gd3SxIB3
fZzto7TPwNxNb556mDjBILEQ6AbwC2gMBNpIQeNErpqkqHbSehrsrQVzGmDM4+qF
x9SU4PmWeiaAEBNfyd7BIoC8CQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCoEiKHY
WqepT0Yi+mlVxRC2Y88EMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG
NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzM0NUIvMjhEODJDODI1RjZFMTFFQTkyNEI5QjgwQzRGOUFFMDIvQjM5NENGQUEz
QjFDMTFFRTlBRUU3MTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlSgwDQYJKoZIhvcNAQELBQADggEBAPENYcEK+2bOZOb3
ibxjcI4cPmktMPZ8gsfwEhUCWTQnjpDeGBaNnDIqwshH8SmJYdRGXK9ff0UQbfaM
9Gu8t1WVi4fpRcWL0z9bA7l227zHj7IHjY4X5dcf7lb8jfAlWOYMw9pgZ+8uZIaj
d3bvxkdkD4nTCLrVVBZ2Z+gIpRVxZ+IpHpols55pe9eqFBri8d/SIyWgnl4Dg+jn
bU95LbrdiV2OGikgLrqFMb0t1ABQWY2M6zktOsicuoGy2EqLfj4PXi1Fw+1+taMH
5f7uoWJVrYzHgZKtI9oAuh9/UMEEkwLA7W/gpx4np+pzR09Yk4fsy3UNl+A8MCFy
ecYNT38=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:57:04 2025 by rpki-client