Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/D2528232D2A011ED86EB1F59C4F9AE02.roa
File: D2528232D2A011ED86EB1F59C4F9AE02.roa (raw, json)
Hash identifier: tNyP3GpxOVlhdC8dzuHPeKXAK1xluCFT4wJaTwr6yJc=
Subject key identifier: 84:9B:82:EB:7D:3C:C2:04:CD:1E:C9:FC:CB:D9:FC:28:69:6B:06:21
Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Certificate serial: A1
Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/D2528232D2A011ED86EB1F59C4F9AE02.roa
Signing time: Sat 03 Feb 2024 05:37:20 +0000
ROA not before: Sat 03 Feb 2024 05:37:20 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 45352
IP address blocks: 103.83.168.0/22 maxlen: 24
203.89.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Validity
Not Before: Feb 3 05:37:20 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65bdd10f-7351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:10:cb:ba:05:c3:6f:e4:68:a1:e1:b2:28:
21:4a:de:4c:29:3d:b7:48:e4:10:ef:59:08:62:40:
9f:62:15:99:ab:02:ab:ab:a6:e7:63:44:48:03:00:
89:05:19:96:d6:94:06:78:bf:55:7d:69:43:06:5c:
48:d5:12:7f:3c:7a:a8:f4:55:49:78:9e:f4:1c:f8:
2c:f7:34:8b:98:70:26:60:a2:db:2a:5a:9d:a4:0b:
a2:1a:10:4f:9d:ba:e9:d0:27:d1:4d:0b:4c:4a:3e:
ce:bc:1a:a5:bd:c2:d7:5d:90:8d:e4:9d:60:9b:49:
7b:2c:c6:c9:60:ec:4a:19:57:cd:14:7d:a5:2a:81:
4e:63:aa:41:1a:6e:67:51:1c:b3:af:76:63:b5:78:
ce:76:09:e9:19:12:b0:3a:92:47:e6:0a:4a:0d:67:
93:c1:93:96:d8:80:c7:65:8e:1a:6a:92:69:e1:cc:
4d:a2:e2:9f:3d:84:58:44:5f:de:ac:38:b5:82:cb:
67:ca:29:b6:aa:9f:03:b3:3c:0c:99:c5:e8:59:fa:
f4:8a:68:0f:92:6f:7a:d9:3c:28:99:50:b8:df:4c:
91:71:82:24:80:84:65:b2:81:73:94:48:c9:e4:3d:
a3:f3:d6:f2:c3:9b:70:f8:f2:57:18:2a:00:e0:1a:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9B:82:EB:7D:3C:C2:04:CD:1E:C9:FC:CB:D9:FC:28:69:6B:06:21
X509v3 Authority Key Identifier:
keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/D2528232D2A011ED86EB1F59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.168.0/22
203.89.112.0/22
Signature Algorithm: sha256WithRSAEncryption
96:31:e4:78:4d:f9:04:71:c0:1b:0d:91:4c:34:e1:3a:27:46:
03:c5:bf:78:6b:f4:6a:29:02:09:41:80:8c:0e:cc:61:d5:16:
47:7d:6a:bf:31:d1:92:c5:80:f6:da:0d:cc:fe:7b:a1:6a:51:
48:87:3e:67:fa:54:3f:c4:81:18:2b:0a:60:2a:88:35:33:47:
10:fb:6b:12:70:f6:24:b1:fb:67:cc:b3:5e:97:ed:75:71:78:
86:fb:09:4f:9f:a8:d0:92:03:35:5b:1f:e7:fe:87:cb:f5:d2:
e6:a9:4a:15:b8:0e:9e:2d:a0:14:1e:82:8a:04:2c:44:6a:f1:
41:d1:51:05:6b:2a:9a:68:46:7e:fe:81:15:62:cb:a8:05:27:
ab:e2:17:d2:c3:d8:00:e5:13:0b:ba:9d:72:0b:63:89:24:28:
f6:21:bd:33:6e:06:ad:27:2e:ae:78:3d:73:82:c3:90:d3:ae:
36:cf:0c:f1:83:e5:c0:29:ee:11:2a:4e:4f:25:fe:db:a0:1c:
84:1f:06:77:dc:e0:7d:92:8f:5b:07:a8:02:10:e6:9e:98:9d:
9a:8e:f8:6e:f8:e5:99:5e:0b:37:49:a1:84:6a:a8:a1:fa:ae:
ac:7a:6e:dd:c1:5a:7d:57:25:cd:20:9b:cd:9f:44:eb:52:28:
91:28:1b:d2
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx
NDI4MjU1MkUwHhcNMjQwMjAzMDUzNzIwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWJkZDEwZi03MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAucEQy7oFw2/kaKHhsighSt5MKT23SOQQ71kIYkCfYhWZqwKrq6bnY0RIAwCJ
BRmW1pQGeL9VfWlDBlxI1RJ/PHqo9FVJeJ70HPgs9zSLmHAmYKLbKlqdpAuiGhBP
nbrp0CfRTQtMSj7OvBqlvcLXXZCN5J1gm0l7LMbJYOxKGVfNFH2lKoFOY6pBGm5n
URyzr3ZjtXjOdgnpGRKwOpJH5gpKDWeTwZOW2IDHZY4aapJp4cxNouKfPYRYRF/e
rDi1gstnyim2qp8DszwMmcXoWfr0imgPkm962TwomVC430yRcYIkgIRlsoFzlEjJ
5D2j89byw5tw+PJXGCoA4BoR9wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFISbgut9
PMIEzR7J/MvZ/ChpawYhMB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy
OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW
UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzU2MDQvMTAyNjQ4RENEMjlDMTFFREI0MTFDNDVEQzRGOUFFMDIvRDI1MjgyMzJE
MkEwMTFFRDg2RUIxRjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnU6gDBALLWXAwDQYJKoZIhvcNAQELBQADggEBAJYx5HhN
+QRxwBsNkUw04TonRgPFv3hr9GopAglBgIwOzGHVFkd9ar8x0ZLFgPbaDcz+e6Fq
UUiHPmf6VD/EgRgrCmAqiDUzRxD7axJw9iSx+2fMs16X7XVxeIb7CU+fqNCSAzVb
H+f+h8v10uapShW4Dp4toBQegooELERq8UHRUQVrKppoRn7+gRViy6gFJ6viF9LD
2ADlEwu6nXILY4kkKPYhvTNuBq0nLq54PXOCw5DTrjbPDPGD5cAp7hEqTk8l/tug
HIQfBnfc4H2Sj1sHqAIQ5p6YnZqO+G745ZleCzdJoYRqqKH6rqx6bt3BWn1XJc0g
m82fROtSKJEoG9I=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:14 2025 by rpki-client