Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/E911B9C2AD6211EABEDF046AC4F9AE02.roa
File: E911B9C2AD6211EABEDF046AC4F9AE02.roa (raw, json)
Hash identifier: QUObNXZOwXzCGPF+2m5s+nGn/9bDkCSMgpOC/MmIYMw=
Subject key identifier: F5:EA:B7:B3:EB:B0:18:46:BE:29:AB:76:75:C8:8E:FE:AE:21:2A:7F
Certificate issuer: /CN=A914F5BA/serialNumber=51CA0CBA847F9899C9CF5A57A9BE615CFB3A5A50
Certificate serial: 082E
Authority key identifier: 51:CA:0C:BA:84:7F:98:99:C9:CF:5A:57:A9:BE:61:5C:FB:3A:5A:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcoMuoR_mJnJz1pXqb5hXPs6WlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/E911B9C2AD6211EABEDF046AC4F9AE02.roa
Signing time: Tue 28 May 2024 22:02:33 +0000
ROA not before: Tue 28 May 2024 22:02:33 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 137811
IP address blocks: 103.114.88.0/22 maxlen: 22
103.114.88.0/24 maxlen: 24
103.114.89.0/24 maxlen: 24
103.114.90.0/24 maxlen: 24
103.114.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094 (0x82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F5BA/serialNumber=51CA0CBA847F9899C9CF5A57A9BE615CFB3A5A50
Validity
Not Before: May 28 22:02:33 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66565479-8112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:72:a5:72:76:d9:ba:ab:7e:c8:6d:12:3d:
4e:03:d4:58:2a:c4:cd:3f:f9:88:df:45:13:75:89:
57:06:30:c0:03:2b:f0:07:27:9f:45:f5:ae:7f:29:
4c:4d:f8:24:96:37:fe:7c:84:f9:de:f3:39:fe:1c:
79:d1:51:fb:dc:5c:d2:02:00:f5:e6:db:51:b8:58:
16:a3:56:65:47:e5:29:cf:40:b5:c2:02:0b:9a:ce:
17:6f:79:7e:19:e6:74:02:85:00:8d:41:ae:49:ed:
ac:61:18:ab:73:bc:4d:ea:e7:df:f4:ba:1d:59:4c:
5a:73:e5:db:37:45:07:f6:82:29:46:0e:88:9d:b3:
b8:92:c4:5d:48:3a:b3:dd:27:69:72:77:2b:46:9d:
1f:c7:c2:40:94:93:d3:80:b8:96:59:2f:18:e2:bb:
e0:51:80:08:d8:63:65:b9:6b:41:f9:d1:6b:4a:e5:
81:d2:6a:a7:a7:d9:e2:5e:6a:00:56:a3:dd:f0:b6:
38:68:a1:86:9a:46:a3:92:55:65:bf:5f:10:68:2e:
e2:63:fa:9f:c3:50:72:92:7c:40:bf:2d:89:95:fc:
4b:16:03:59:1d:e1:d8:8f:bd:01:c6:7a:8e:b3:ca:
0f:3f:ce:e8:1a:c0:63:9e:e6:4b:44:ed:a9:6e:62:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:B7:B3:EB:B0:18:46:BE:29:AB:76:75:C8:8E:FE:AE:21:2A:7F
X509v3 Authority Key Identifier:
keyid:51:CA:0C:BA:84:7F:98:99:C9:CF:5A:57:A9:BE:61:5C:FB:3A:5A:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcoMuoR_mJnJz1pXqb5hXPs6WlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/E911B9C2AD6211EABEDF046AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:dd:c7:db:b6:fa:b7:17:ec:ce:b8:4c:8b:c4:8f:66:fb:62:
6a:22:82:74:47:66:04:3c:49:1b:26:18:a6:3e:39:d2:75:2c:
ce:48:e2:bd:55:03:3f:ef:80:f3:e4:d6:5d:01:88:3f:e3:47:
94:00:e2:17:8e:5b:1d:05:54:8c:44:c7:14:f7:e3:e2:06:41:
90:9b:3f:8c:7c:12:fa:a0:cf:c5:11:47:6b:e0:f7:90:3a:bb:
85:53:ba:63:a6:a8:42:3a:85:8e:f8:74:24:ad:da:42:19:fc:
37:c2:70:1d:da:5a:79:49:10:cb:bb:cc:7e:cb:1d:60:38:e0:
55:fc:f2:de:78:20:69:ba:15:5b:e4:b8:6e:3e:c5:81:2c:70:
e2:85:f5:8c:3a:75:05:fc:60:0c:cc:3a:5a:40:17:ad:00:f9:
2c:4f:94:db:8c:a9:73:0f:29:06:4a:bd:99:9a:73:3c:e4:63:
fe:e4:e6:37:c9:a8:fc:7b:71:79:17:92:2a:ea:4b:4e:d8:5b:
f6:ec:3d:1f:17:83:8a:0f:bd:65:dc:5f:c7:40:41:d8:db:b2:
bf:34:28:c5:3f:dc:07:34:e0:bb:fd:bf:12:32:90:49:0c:58:
b3:38:ff:67:8f:75:2c:ab:88:79:4f:f4:91:1a:8a:17:67:06:
f4:14:4f:73
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY1QkExMTAvBgNVBAUTKDUxQ0EwQ0JBODQ3Rjk4OTlDOUNGNUE1N0E5QkU2MTVD
RkIzQTVBNTAwHhcNMjQwNTI4MjIwMjMzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU2NTQ3OS04MTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuEpypXJ22bqrfshtEj1OA9RYKsTNP/mI30UTdYlXBjDAAyvwByefRfWufylM
Tfgkljf+fIT53vM5/hx50VH73FzSAgD15ttRuFgWo1ZlR+Upz0C1wgILms4Xb3l+
GeZ0AoUAjUGuSe2sYRirc7xN6uff9LodWUxac+XbN0UH9oIpRg6InbO4ksRdSDqz
3SdpcncrRp0fx8JAlJPTgLiWWS8Y4rvgUYAI2GNluWtB+dFrSuWB0mqnp9niXmoA
VqPd8LY4aKGGmkajklVlv18QaC7iY/qfw1ByknxAvy2JlfxLFgNZHeHYj70BxnqO
s8oPP87oGsBjnuZLRO2pbmIW7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPXqt7Pr
sBhGvimrdnXIjv6uISp/MB8GA1UdIwQYMBaAFFHKDLqEf5iZyc9aV6m+YVz7OlpQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjVCQS9FRTIyRDAxMEFE
NjAxMUVBOEYxQThENjNDNEY5QUUwMi9VY29NdW9SX21Kbkp6MXBYcWI1aFhQczZX
bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Vjb011b1JfbUpuSnoxcFhxYjVoWFBzNldsQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEY1QkEvRUUyMkQwMTBBRDYwMTFFQThGMUE4RDYzQzRGOUFFMDIvRTkxMUI5QzJB
RDYyMTFFQUJFREYwNDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnclgwDQYJKoZIhvcNAQELBQADggEBAHzdx9u2+rcX7M64
TIvEj2b7YmoignRHZgQ8SRsmGKY+OdJ1LM5I4r1VAz/vgPPk1l0BiD/jR5QA4heO
Wx0FVIxExxT34+IGQZCbP4x8Evqgz8URR2vg95A6u4VTumOmqEI6hY74dCSt2kIZ
/DfCcB3aWnlJEMu7zH7LHWA44FX88t54IGm6FVvkuG4+xYEscOKF9Yw6dQX8YAzM
OlpAF60A+SxPlNuMqXMPKQZKvZmaczzkY/7k5jfJqPx7cXkXkirqS07YW/bsPR8X
g4oPvWXcX8dAQdjbsr80KMU/3Ac04Lv9vxIykEkMWLM4/2ePdSyriHlP9JEaihdn
BvQUT3M=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:26:47 2025 by rpki-client