Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/C7D74E2CB9EA11EFBCC89752C4F9AE02.roa
File: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (raw, json)
Hash identifier: 3zCR20o/KfK/K9C/wTlGB6P7rn/kp0/zxFVVdoqdb8g=
Subject key identifier: 8F:68:EC:34:0F:05:21:B6:A3:CE:87:E8:5A:49:59:C9:0B:34:81:7A
Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial: 0113
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/C7D74E2CB9EA11EFBCC89752C4F9AE02.roa
Signing time: Sat 14 Dec 2024 07:12:30 +0000
ROA not before: Sat 14 Dec 2024 07:12:30 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 400342
IP address blocks: 103.135.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Validity
Not Before: Dec 14 07:12:30 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=675d2fde-00e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:cc:09:55:17:55:47:48:43:7d:09:39:40:
88:a6:63:70:cf:50:9a:1d:db:94:71:9c:9b:65:6b:
75:95:0f:fd:b2:7d:11:4e:76:aa:8a:95:2a:6a:5b:
75:ab:db:d3:d6:22:a9:20:4a:0d:d3:1a:77:54:b8:
80:06:4c:15:e8:93:62:41:1c:83:31:46:8e:98:8a:
6e:4f:bd:fb:b4:ef:ce:31:ba:98:85:07:5f:f6:e3:
dd:12:c2:4d:17:ce:e0:4a:e0:72:e6:a2:ef:a2:5f:
98:b6:22:de:fa:8d:fc:d0:fb:41:db:d6:93:fa:9b:
29:2c:4b:4f:4d:f7:db:98:49:30:2b:54:ca:72:96:
5e:6f:db:81:7a:9e:a8:ac:74:8b:eb:85:23:f1:c3:
73:90:fc:5a:04:bb:f5:83:93:d9:49:87:9e:e5:c3:
50:97:26:b6:80:47:c5:ea:73:e8:cc:91:16:15:c9:
37:aa:ce:e3:ff:6c:28:a7:4a:f4:76:15:9f:96:22:
a1:08:ad:ed:51:8d:7d:e2:92:d2:2f:7f:66:4f:c7:
87:23:c8:07:81:e4:11:1f:dd:21:9a:6f:d1:56:ba:
8f:f7:6c:22:3f:02:fa:58:b8:cc:86:fe:45:e3:b9:
db:34:df:88:3a:86:23:57:76:98:67:a2:e8:99:e0:
91:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:68:EC:34:0F:05:21:B6:A3:CE:87:E8:5A:49:59:C9:0B:34:81:7A
X509v3 Authority Key Identifier:
keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/C7D74E2CB9EA11EFBCC89752C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.44.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c7:f8:53:1a:c9:92:0c:e7:bf:42:80:e3:6d:be:b1:9b:e8:
ba:ed:88:8b:cc:b8:ab:ff:b1:2d:2a:a5:12:19:f2:1d:65:9d:
e9:ae:53:13:0e:75:85:32:cf:c3:ac:91:d7:89:ae:0c:9c:9c:
08:9e:7f:e5:67:73:de:f1:e0:bb:38:79:f1:f6:5b:7d:92:67:
ea:d1:2d:90:55:33:22:87:6d:04:8e:7a:b9:46:cc:aa:bb:14:
5c:5b:48:e6:95:b5:4a:8c:c4:e6:43:19:cb:a0:21:fe:bb:91:
19:4f:8b:56:14:ae:52:2c:cb:41:58:3b:b8:5d:ea:b5:b2:1d:
de:dd:c1:ff:7d:17:e8:06:c2:b5:e5:4f:14:ff:97:50:93:cb:
90:be:21:a9:f3:86:84:51:66:81:5a:e6:cd:c7:40:b4:b9:6a:
9a:6f:bc:f5:7b:d2:08:4c:a6:64:97:78:b8:47:50:00:45:13:
d9:72:a3:4a:21:c7:ed:4b:d1:ec:3f:bb:5e:bc:9f:16:e4:e5:
a0:71:ac:58:6a:98:0d:3a:05:28:0a:fb:1b:68:61:5e:cc:d5:
3f:e0:7b:f1:4d:50:de:e3:e2:a2:68:3a:5a:7a:6f:8b:cb:84:
f1:3c:1e:e3:83:25:3e:18:b0:46:e9:1e:bb:70:45:58:40:c0:
13:f3:98:b5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz
RTk5MDM5QTMwHhcNMjQxMjE0MDcxMjMwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzVkMmZkZS0wMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ZDMCVUXVUdIQ30JOUCIpmNwz1CaHduUcZybZWt1lQ/9sn0RTnaqipUqalt1
q9vT1iKpIEoN0xp3VLiABkwV6JNiQRyDMUaOmIpuT737tO/OMbqYhQdf9uPdEsJN
F87gSuBy5qLvol+YtiLe+o380PtB29aT+pspLEtPTffbmEkwK1TKcpZeb9uBep6o
rHSL64Uj8cNzkPxaBLv1g5PZSYee5cNQlya2gEfF6nPozJEWFck3qs7j/2wop0r0
dhWfliKhCK3tUY194pLSL39mT8eHI8gHgeQRH90hmm/RVrqP92wiPwL6WLjMhv5F
47nbNN+IOoYjV3aYZ6LomeCRRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI9o7DQP
BSG2o86H6FpJWckLNIF6MB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx
QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU4QkYvQjM4OUNGMzg0MUE3MTFFRTkyRTVCMzc4QzRGOUFFMDIvQzdENzRFMkNC
OUVBMTFFRkJDQzg5NzUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhywwDQYJKoZIhvcNAQELBQADggEBADLH+FMayZIM579C
gONtvrGb6LrtiIvMuKv/sS0qpRIZ8h1lnemuUxMOdYUyz8OskdeJrgycnAief+Vn
c97x4Ls4efH2W32SZ+rRLZBVMyKHbQSOerlGzKq7FFxbSOaVtUqMxOZDGcugIf67
kRlPi1YUrlIsy0FYO7hd6rWyHd7dwf99F+gGwrXlTxT/l1CTy5C+IanzhoRRZoFa
5s3HQLS5appvvPV70ghMpmSXeLhHUABFE9lyo0ohx+1L0ew/u168nxbk5aBxrFhq
mA06BSgK+xtoYV7M1T/ge/FNUN7j4qJoOlp6b4vLhPE8HuODJT4YsEbpHrtwRVhA
wBPzmLU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:25 2025 by rpki-client