Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
File: D42E171A97E011ED9EFB180DC4F9AE02.roa (raw, json)
Hash identifier: mDZsjarnInL00UCiRI8BBWvnetS/NgUxS188zevxEQU=
Subject key identifier: 43:EA:9A:E8:56:EA:F4:7F:F4:73:AC:4D:30:1E:26:DB:7C:FF:9D:2F
Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial: 257F
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
Signing time: Fri 22 Nov 2024 18:06:28 +0000
ROA not before: Fri 22 Nov 2024 18:06:28 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 4294955555
IP address blocks: 103.138.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9599 (0x257f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Validity
Not Before: Nov 22 18:06:28 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6740c824-e488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:f6:21:42:64:ec:d4:af:6c:5f:30:0c:e3:
75:07:7e:b2:20:68:48:9d:76:2e:99:16:fd:d7:34:
18:6e:02:52:8d:f8:f2:7d:94:bf:79:38:85:33:61:
e0:71:49:fb:f8:b2:11:99:8f:70:5b:ee:e2:7b:28:
07:dc:91:33:c9:df:e0:cf:a0:77:75:2a:89:92:86:
d4:b5:d4:1f:bc:ac:49:be:33:e4:f5:14:b1:e9:35:
59:32:a7:e0:dd:7f:46:63:cb:93:3d:b6:ee:92:56:
09:6c:e1:6e:31:46:2a:bd:75:eb:bc:49:1a:23:bd:
35:3f:cd:ae:75:17:9b:25:01:be:43:b3:6a:b5:1f:
5d:9e:a2:c3:dc:04:e9:bd:db:23:0a:e2:07:f4:a9:
9d:c8:58:c5:ab:36:d6:92:00:0b:15:29:c2:f8:9e:
ff:3c:80:f0:37:55:90:4d:9a:1c:11:60:55:b5:68:
23:27:03:9b:a9:19:65:c6:6e:ed:d0:de:4c:19:57:
e8:5c:0f:4c:bc:51:65:6b:09:84:93:40:ad:c0:03:
b1:c6:18:41:45:81:d3:1c:ad:40:ae:e3:4f:ac:4e:
1f:02:59:2a:70:ee:97:ae:56:5c:13:a1:92:16:9d:
3a:12:3c:67:6e:51:6d:67:a4:92:e1:9c:51:95:86:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EA:9A:E8:56:EA:F4:7F:F4:73:AC:4D:30:1E:26:DB:7C:FF:9D:2F
X509v3 Authority Key Identifier:
keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7a:28:4b:da:23:89:b9:85:a1:60:31:9f:35:8a:a1:cd:c0:
05:3c:18:9f:7a:76:1c:28:22:eb:d4:a1:83:af:9c:13:94:a6:
2b:0d:ba:1b:2c:e9:3b:63:b2:b1:7f:8c:a7:05:8e:12:2b:6b:
f0:6f:6e:57:28:e4:ce:f8:fb:05:46:c4:0b:af:ce:71:fc:08:
14:16:26:6f:3f:c7:da:d4:99:fe:2a:25:16:b3:58:94:74:42:
d5:44:67:d0:95:6a:e6:06:ee:30:60:0d:26:d0:67:6a:bc:ed:
0c:ee:bf:77:0c:73:39:e1:d7:d8:f2:38:c2:c5:c6:eb:21:00:
e6:ad:31:a8:e3:a7:be:21:59:e7:ae:5c:b5:86:1d:48:55:f0:
70:52:78:54:f1:a9:62:39:18:d3:b6:ec:75:82:ea:3c:e9:1c:
50:93:4d:b5:7e:d5:c7:e4:cb:46:9c:63:6b:99:1d:42:43:9c:
bb:9e:95:91:01:31:d7:66:b9:a5:2f:a4:cf:1d:b0:31:bc:7d:
f8:0d:42:20:53:d3:91:ab:71:51:e3:b3:96:51:41:ce:dc:c9:
73:c0:fb:f4:53:c9:ec:62:23:69:64:22:e8:67:fa:66:58:1c:
fa:c8:7e:ba:1d:9c:cc:c0:82:44:ea:35:b8:ac:06:c7:71:b5:
c3:e2:59:7f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw
RDNEOEE2RDAwHhcNMjQxMTIyMTgwNjI4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQwYzgyNC1lNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApNb2IUJk7NSvbF8wDON1B36yIGhInXYumRb91zQYbgJSjfjyfZS/eTiFM2Hg
cUn7+LIRmY9wW+7ieygH3JEzyd/gz6B3dSqJkobUtdQfvKxJvjPk9RSx6TVZMqfg
3X9GY8uTPbbuklYJbOFuMUYqvXXrvEkaI701P82udRebJQG+Q7NqtR9dnqLD3ATp
vdsjCuIH9KmdyFjFqzbWkgALFSnC+J7/PIDwN1WQTZocEWBVtWgjJwObqRllxm7t
0N5MGVfoXA9MvFFlawmEk0CtwAOxxhhBRYHTHK1AruNPrE4fAlkqcO6XrlZcE6GS
Fp06EjxnblFtZ6SS4ZxRlYawVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEPqmuhW
6vR/9HOsTTAeJtt8/50vMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC
N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvRDQyRTE3MUE5
N0UwMTFFRDlFRkIxODBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnitIwDQYJKoZIhvcNAQELBQADggEBAE56KEvaI4m5haFg
MZ81iqHNwAU8GJ96dhwoIuvUoYOvnBOUpisNuhss6TtjsrF/jKcFjhIra/Bvblco
5M74+wVGxAuvznH8CBQWJm8/x9rUmf4qJRazWJR0QtVEZ9CVauYG7jBgDSbQZ2q8
7Qzuv3cMcznh19jyOMLFxushAOatMajjp74hWeeuXLWGHUhV8HBSeFTxqWI5GNO2
7HWC6jzpHFCTTbV+1cfky0acY2uZHUJDnLuelZEBMddmuaUvpM8dsDG8ffgNQiBT
05GrcVHjs5ZRQc7cyXPA+/RTyexiI2lkIuhn+mZYHPrIfrodnMzAgkTqNbisBsdx
tcPiWX8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:31:00 2025 by rpki-client