Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/A8C501F61B2A11EE84F40B3AC4F9AE02.roa
File: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (raw, json)
Hash identifier: qxnwJg8IFQzglpT6JsIB6JuKL16Bl6FnMy8IuEKj94o=
Subject key identifier: C0:78:11:1B:19:C3:22:1E:81:91:EB:59:17:67:C8:7B:3F:76:79:D1
Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial: 7C
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/A8C501F61B2A11EE84F40B3AC4F9AE02.roa
Signing time: Fri 09 Feb 2024 06:08:01 +0000
ROA not before: Fri 09 Feb 2024 06:08:01 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 14618
IP address blocks: 103.73.186.0/24 maxlen: 24
103.73.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Validity
Not Before: Feb 9 06:08:01 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65c5c141-713c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:c8:1d:c2:12:c6:fc:f1:17:04:80:f5:9e:
3c:f5:c8:dc:fc:2f:47:6c:c6:b3:3c:4d:51:5c:87:
86:b1:cf:e9:7b:5a:98:38:97:51:f3:48:0a:ac:97:
f5:9c:e5:97:71:76:74:60:0e:8f:85:ba:0c:ba:00:
b0:c7:17:d0:bc:1a:d6:a0:27:92:96:ca:58:08:87:
d5:ca:68:d5:91:a2:92:f4:88:9f:90:bd:88:9b:2d:
cb:f7:94:0d:05:9e:1b:4e:8a:d0:ee:ef:0a:87:15:
5c:9e:c3:5c:e6:e5:5e:20:61:01:03:7c:71:5c:e2:
6a:d7:97:56:55:5f:70:46:51:68:92:2c:8b:f1:e2:
08:fe:b3:85:ba:3d:13:ec:7a:61:3e:00:1c:5e:65:
96:01:0a:37:a7:63:9a:af:93:2d:7a:7e:57:f9:f0:
0a:e0:40:52:f8:14:fb:d3:1e:52:ff:ea:29:71:6d:
8c:5f:24:9e:cb:5b:d5:70:b0:8e:b7:86:73:c0:28:
7e:11:3c:e1:3f:d8:62:fc:0b:6a:0d:b1:db:67:be:
83:a1:bc:69:94:36:53:11:b8:07:ee:e2:b2:0a:09:
ae:d7:c7:aa:48:71:11:af:8b:0c:3a:cb:08:a1:f7:
37:b7:17:4b:a9:5b:7d:56:7d:ce:a1:14:da:54:50:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:11:1B:19:C3:22:1E:81:91:EB:59:17:67:C8:7B:3F:76:79:D1
X509v3 Authority Key Identifier:
keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/A8C501F61B2A11EE84F40B3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.186.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:d6:5d:5c:a6:cb:b8:cf:5a:cb:47:7c:bc:30:51:78:dc:18:
46:e5:f4:2a:75:0c:2c:63:af:13:82:80:15:de:af:44:7f:3c:
f2:57:77:fb:db:89:fe:72:1d:c1:72:3b:e8:81:fd:17:7b:bb:
06:46:7e:55:94:61:78:4e:95:39:63:c8:a1:b7:59:57:f5:28:
0b:07:91:4c:d5:2a:8e:58:4e:38:21:0e:83:e7:16:cc:dd:45:
91:93:95:a5:f4:bd:55:9b:7c:ed:09:ee:3c:60:6f:16:c0:30:
3d:7d:01:b4:66:f1:1e:2f:5b:58:32:2a:60:92:7c:fa:33:20:
cb:c9:71:84:30:e9:88:e4:73:94:a4:84:d8:28:46:d7:22:42:
cc:58:51:39:45:d0:71:d2:b9:c4:ca:d0:dd:0c:c8:63:c5:46:
54:97:bf:a6:d4:94:12:90:3d:d7:a0:a8:f6:be:2e:6c:54:92:
4c:46:dc:5d:3b:6d:cb:6e:8f:cb:c6:af:f9:06:41:a7:9f:b8:
0b:58:c9:dc:9b:92:c5:e1:84:cb:4a:5e:2e:95:6d:bb:c5:71:
35:4f:dd:66:1d:fe:12:fa:f3:d7:1f:16:89:5b:e2:2b:02:c5:
b0:38:01:4f:56:9f:5d:10:72:14:ed:aa:d3:01:95:27:3a:82:
7d:2d:39:a9
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RkJCMjExMC8GA1UEBRMoQUQ4NUI3RTE4QjNBMTZGNTNFOTI5MzhBMzM0RUM2QkIz
RUI4QjYzMDAeFw0yNDAyMDkwNjA4MDFaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1YzVjMTQxLTcxM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqAcgdwhLG/PEXBID1njz1yNz8L0dsxrM8TVFch4axz+l7Wpg4l1HzSAqsl/Wc
5ZdxdnRgDo+Fugy6ALDHF9C8GtagJ5KWylgIh9XKaNWRopL0iJ+QvYibLcv3lA0F
nhtOitDu7wqHFVyew1zm5V4gYQEDfHFc4mrXl1ZVX3BGUWiSLIvx4gj+s4W6PRPs
emE+ABxeZZYBCjenY5qvky16flf58ArgQFL4FPvTHlL/6ilxbYxfJJ7LW9VwsI63
hnPAKH4RPOE/2GL8C2oNsdtnvoOhvGmUNlMRuAfu4rIKCa7Xx6pIcRGviww6ywih
9ze3F0upW31Wfc6hFNpUUCVNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUwHgRGxnD
Ih6BketZF2fIez92edEwHwYDVR0jBBgwFoAUrYW34Ys6FvU+kpOKM07Guz64tjAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGQkIyLzBFMjcwNTQ0MUE4
NjExRUVBMEFBODcxNkM0RjlBRTAyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRq
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcllXMzRZczZGdlUta3BPS00wN0d1ejY0dGpBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9BOEM1MDFGNjFC
MkExMUVFODRGNDBCM0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWdJujANBgkqhkiG9w0BAQsFAAOCAQEAT9ZdXKbLuM9ay0d8
vDBReNwYRuX0KnUMLGOvE4KAFd6vRH888ld3+9uJ/nIdwXI76IH9F3u7BkZ+VZRh
eE6VOWPIobdZV/UoCweRTNUqjlhOOCEOg+cWzN1FkZOVpfS9VZt87QnuPGBvFsAw
PX0BtGbxHi9bWDIqYJJ8+jMgy8lxhDDpiORzlKSE2ChG1yJCzFhROUXQcdK5xMrQ
3QzIY8VGVJe/ptSUEpA916Co9r4ubFSSTEbcXTtty26Py8av+QZBp5+4C1jJ3JuS
xeGEy0peLpVtu8VxNU/dZh3+Evrz1x8WiVviKwLFsDgBT1afXRByFO2q0wGVJzqC
fS05qQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:31 2025 by rpki-client