Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa
File: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (raw, json)
Hash identifier: xWLJsIOACYVl3HGPv+BGgFGrPw1FmHr3Q1PpP41xefE=
Subject key identifier: E7:7C:A4:54:75:52:47:2B:49:3C:B5:22:62:50:BB:64:D0:89:35:66
Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
Certificate serial: 0DC2
Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa
Signing time: Wed 04 Sep 2024 18:36:18 +0000
ROA not before: Wed 04 Sep 2024 18:36:18 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 134809
IP address blocks: 43.228.200.0/22 maxlen: 22
43.252.216.0/22 maxlen: 22
103.12.140.0/22 maxlen: 22
103.22.160.0/22 maxlen: 22
103.26.248.0/22 maxlen: 22
103.194.80.0/22 maxlen: 22
163.53.224.0/22 maxlen: 22
2400:6e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3522 (0xdc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039
Validity
Not Before: Sep 4 18:36:18 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66d8a8a2-b538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:1d:c9:fc:8b:a9:11:ba:01:e5:18:99:19:
e5:d2:ae:7b:a2:4d:37:cc:ec:58:64:e8:9e:98:66:
7f:fe:ca:07:2f:72:4b:40:d5:7a:5f:16:8d:03:af:
17:e7:f0:de:4e:2f:1c:46:e4:4f:4c:f9:56:6b:31:
a6:85:f3:82:88:e0:d7:ae:44:78:03:95:37:9e:bb:
f7:5e:37:c1:4c:f5:98:70:7c:22:6d:1f:ea:50:53:
ba:15:3d:fa:93:10:d9:68:2e:67:14:57:15:3f:8e:
28:d6:01:6d:70:7f:6b:15:01:e6:b3:44:8e:7a:87:
5d:93:5e:65:7d:48:ae:9f:5d:2d:be:dc:9c:fe:59:
3f:f3:f1:33:a1:80:c2:09:fd:f4:56:7b:b3:b8:b9:
d2:7a:ad:11:fe:f4:a0:02:ec:31:48:a3:5e:14:59:
63:08:f7:d8:0e:89:8d:d4:50:8c:23:fb:5f:92:0f:
d7:c2:9c:81:b3:0f:73:b9:0e:a7:40:96:6e:de:53:
92:30:51:a5:90:c1:7e:1e:b3:a1:0e:db:f1:08:5f:
e3:06:80:e9:3f:34:5d:15:be:bf:9e:41:41:b6:dd:
0f:23:57:9e:c6:8e:05:d5:e1:0d:a0:87:81:7e:78:
0d:35:c2:aa:1d:ec:d1:f2:50:a3:5e:cb:bf:40:83:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7C:A4:54:75:52:47:2B:49:3C:B5:22:62:50:BB:64:D0:89:35:66
X509v3 Authority Key Identifier:
keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.200.0/22
43.252.216.0/22
103.12.140.0/22
103.22.160.0/22
103.26.248.0/22
103.194.80.0/22
163.53.224.0/22
IPv6:
2400:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
2e:25:43:3c:09:48:ad:e8:84:ed:10:5a:19:32:b2:86:79:e4:
c4:33:43:77:da:18:02:9b:6a:cf:d7:84:5d:de:38:b9:88:e4:
14:33:ff:68:b3:8f:37:68:68:21:87:38:c8:95:63:bd:bf:8f:
9a:76:af:c8:53:92:08:53:db:87:b0:95:87:ad:0e:0e:77:42:
57:3b:2f:ba:8f:20:d5:08:c5:96:9e:67:77:c1:2f:1e:33:c7:
d8:5f:5e:e6:90:99:11:8b:fd:b6:6f:a7:ba:43:94:3f:af:e4:
92:27:65:c4:79:35:6e:ab:b4:58:3a:82:c9:bd:1f:5e:73:48:
06:2d:a9:4a:f3:40:17:e3:24:79:5a:55:e4:5d:52:7e:44:47:
ec:37:cb:90:07:f2:75:ad:7b:8f:7f:09:26:84:88:b8:a0:fe:
b7:54:a4:12:98:d6:ea:66:69:67:95:31:45:97:59:7d:b0:83:
b7:ec:74:95:74:f7:bc:0f:ea:52:ad:db:1d:16:e3:0a:05:61:
00:10:a8:22:cf:7f:0f:6b:6d:8c:1a:3a:14:f5:28:62:e0:25:
87:71:03:fe:d3:13:ba:cc:b6:2c:25:b7:3c:48:34:a9:0a:c0:
13:77:c9:d6:78:96:2e:b1:b2:29:bb:49:dd:2c:7e:9e:3a:1a:
26:69:de:95
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgICDcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz
MEVBMkQwMzkwHhcNMjQwOTA0MTgzNjE4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ4YThhMi1iNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumQdyfyLqRG6AeUYmRnl0q57ok03zOxYZOiemGZ//soHL3JLQNV6XxaNA68X
5/DeTi8cRuRPTPlWazGmhfOCiODXrkR4A5U3nrv3XjfBTPWYcHwibR/qUFO6FT36
kxDZaC5nFFcVP44o1gFtcH9rFQHms0SOeoddk15lfUiun10tvtyc/lk/8/EzoYDC
Cf30VnuzuLnSeq0R/vSgAuwxSKNeFFljCPfYDomN1FCMI/tfkg/XwpyBsw9zuQ6n
QJZu3lOSMFGlkMF+HrOhDtvxCF/jBoDpPzRdFb6/nkFBtt0PI1eexo4F1eENoIeB
fngNNcKqHezR8lCjXsu/QINEmQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFOd8pFR1
UkcrSTy1ImJQu2TQiTVmMB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0
MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0Y0QjAvMkQyNzA2OTJBNDMzMTFFOTg4MTU4RjA5QzRGOUFFMDIvN0ZDMkJBM0FD
RUUyMTFFREFGNDFCQzI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E
QzBBMDAEAgABMCoDBAIr5MgDBAIr/NgDBAJnDIwDBAJnFqADBAJnGvgDBAJnwlAD
BAKjNeAwDQQCAAIwBwMFACQAboAwDQYJKoZIhvcNAQELBQADggEBAC4lQzwJSK3o
hO0QWhkysoZ55MQzQ3faGAKbas/XhF3eOLmI5BQz/2izjzdoaCGHOMiVY72/j5p2
r8hTkghT24ewlYetDg53Qlc7L7qPINUIxZaeZ3fBLx4zx9hfXuaQmRGL/bZvp7pD
lD+v5JInZcR5NW6rtFg6gsm9H15zSAYtqUrzQBfjJHlaVeRdUn5ER+w3y5AH8nWt
e49/CSaEiLig/rdUpBKY1upmaWeVMUWXWX2wg7fsdJV097wP6lKt2x0W4woFYQAQ
qCLPfw9rbYwaOhT1KGLgJYdxA/7TE7rMtiwltzxINKkKwBN3ydZ4li6xsim7Sd0s
fp46GiZp3pU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:04:50 2025 by rpki-client