Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/9D4041FA376411EEB0C70459C4F9AE02.roa
File: 9D4041FA376411EEB0C70459C4F9AE02.roa (raw, json)
Hash identifier: ZFtHcBc54ZeKS+b4WzXq0vpdKRKFZcVziUY5NK5/ml8=
Subject key identifier: 78:0D:15:BE:20:56:AE:A7:5E:81:3D:D8:20:A3:2B:FF:3F:F6:90:CA
Certificate issuer: /CN=A913EDDF/serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1
Certificate serial: 75
Authority key identifier: 15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/9D4041FA376411EEB0C70459C4F9AE02.roa
Signing time: Fri 15 Mar 2024 06:39:26 +0000
ROA not before: Fri 15 Mar 2024 06:39:26 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 139285
IP address blocks: 103.148.228.0/23 maxlen: 23
103.148.228.0/24 maxlen: 24
103.148.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EDDF/serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1
Validity
Not Before: Mar 15 06:39:26 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f3ed1e-5d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:52:7d:5d:96:06:1c:cb:b2:5e:9b:38:cb:
8f:11:42:bc:99:56:ee:64:78:8f:a8:8a:e4:85:4e:
3a:7f:c2:91:04:0c:3c:f7:5c:eb:9c:11:a0:85:53:
00:82:9c:f6:16:b0:04:38:c0:ee:45:c5:78:2e:55:
e8:17:b2:31:c9:a4:2b:92:a2:15:23:d7:a9:79:77:
32:5f:37:79:da:41:9a:5e:13:20:2d:1e:4e:7b:00:
ae:32:23:df:85:dd:3f:17:96:69:e6:ef:b5:42:1a:
85:36:e7:de:07:b2:0f:d9:8b:97:95:42:9c:48:10:
b1:19:d1:84:1b:32:0b:35:a0:31:a4:c7:e7:34:04:
b4:b0:b2:14:76:a7:76:d0:55:ea:fe:47:5a:c1:a9:
5a:6c:ec:c1:b2:20:51:af:5a:9d:34:19:cd:68:3a:
fd:72:23:cb:c2:88:96:39:fd:d2:53:f6:ba:05:f6:
4f:c0:e8:df:fc:36:01:67:9f:54:6b:1c:77:fc:04:
5d:e7:5c:6f:17:f8:50:f9:83:f5:9d:23:b5:51:03:
5c:1d:83:93:dd:c0:4b:61:5a:1e:b4:2b:37:f6:2b:
45:09:27:91:f2:0c:5a:6a:38:22:e7:62:bc:9b:e0:
12:87:bf:31:ed:ed:44:f0:0a:8d:13:9e:a2:b7:a6:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0D:15:BE:20:56:AE:A7:5E:81:3D:D8:20:A3:2B:FF:3F:F6:90:CA
X509v3 Authority Key Identifier:
keyid:15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/9D4041FA376411EEB0C70459C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.228.0/23
Signature Algorithm: sha256WithRSAEncryption
64:ef:17:10:e4:6f:e7:43:d8:cf:c4:19:0d:42:05:01:3d:a5:
38:a7:a0:21:c8:d9:dd:d5:29:40:a5:bb:06:ca:43:0b:54:00:
3d:43:19:7b:1a:ca:8d:95:e6:80:a5:df:60:d2:92:7c:30:dc:
b3:09:55:5d:9f:e7:2a:e6:2f:eb:17:e8:da:17:25:90:81:e0:
fd:fe:1f:81:fc:e6:10:12:da:8e:9a:a5:c9:2b:09:be:e0:8c:
fb:ca:e6:1d:92:8b:ad:84:df:14:25:62:0e:01:06:e3:d9:77:
01:4b:d3:17:9b:67:6a:3b:b0:de:68:e0:17:10:0e:78:b0:1d:
7a:58:8f:a4:59:23:9b:bc:0f:d7:bc:7c:c3:73:92:e7:a7:d2:
78:6b:37:b5:aa:d5:48:81:76:01:1f:6d:1c:3d:cf:34:08:75:
f5:34:23:56:7c:6c:02:e2:ef:65:69:89:2a:5b:b9:45:05:42:
6c:67:50:14:c9:d4:09:21:07:e4:dc:13:fc:8c:98:4c:ab:78:
8c:0a:d0:b8:8c:19:0c:f0:9d:4b:fb:4f:62:4e:a4:f8:9b:da:
e3:9e:f4:55:ff:e4:30:e2:16:9e:36:59:76:7b:6d:b7:8f:b8:
17:c5:b9:56:3f:43:4a:56:eb:e5:0b:e3:47:df:eb:b8:ef:66:
3e:4c:23:70
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RURERjExMC8GA1UEBRMoMTVFMUNERERBRUNDRUFCQjY1NjY1RTMwQUNGNDQ1Rjk3
Mjk2NjNFMTAeFw0yNDAzMTUwNjM5MjZaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ZjNlZDFlLTVkMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7VlJ9XZYGHMuyXps4y48RQryZVu5keI+oiuSFTjp/wpEEDDz3XOucEaCFUwCC
nPYWsAQ4wO5FxXguVegXsjHJpCuSohUj16l5dzJfN3naQZpeEyAtHk57AK4yI9+F
3T8Xlmnm77VCGoU2594Hsg/Zi5eVQpxIELEZ0YQbMgs1oDGkx+c0BLSwshR2p3bQ
Ver+R1rBqVps7MGyIFGvWp00Gc1oOv1yI8vCiJY5/dJT9roF9k/A6N/8NgFnn1Rr
HHf8BF3nXG8X+FD5g/WdI7VRA1wdg5PdwEthWh60Kzf2K0UJJ5HyDFpqOCLnYryb
4BKHvzHt7UTwCo0TnqK3pnRtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUeA0VviBW
rqdegT3YIKMr/z/2kMowHwYDVR0jBBgwFoAUFeHN3a7M6rtlZl4wrPRF+XKWY+Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFRERGLzU0Nzg1Nzk2Mzc2
NDExRUVBNUFBN0E1OEM0RjlBRTAyL0ZlSE4zYTdNNnJ0bFpsNHdyUFJGLVhLV1kt
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRmVITjNhN002cnRsWmw0d3JQUkYtWEtXWS1FLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RURERi81NDc4NTc5NjM3NjQxMUVFQTVBQTdBNThDNEY5QUUwMi85RDQwNDFGQTM3
NjQxMUVFQjBDNzA0NTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWeU5DANBgkqhkiG9w0BAQsFAAOCAQEAZO8XEORv50PYz8QZ
DUIFAT2lOKegIcjZ3dUpQKW7BspDC1QAPUMZexrKjZXmgKXfYNKSfDDcswlVXZ/n
KuYv6xfo2hclkIHg/f4fgfzmEBLajpqlySsJvuCM+8rmHZKLrYTfFCViDgEG49l3
AUvTF5tnajuw3mjgFxAOeLAdeliPpFkjm7wP17x8w3OS56fSeGs3tarVSIF2AR9t
HD3PNAh19TQjVnxsAuLvZWmJKlu5RQVCbGdQFMnUCSEH5NwT/IyYTKt4jArQuIwZ
DPCdS/tPYk6k+Jva4570Vf/kMOIWnjZZdnttt4+4F8W5Vj9DSlbr5QvjR9/ruO9m
PkwjcA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:40:55 2025 by rpki-client