Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/A29B8E5A46A911EC8F95FC6EC4F9AE02.roa
File: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (raw, json)
Hash identifier: j0OYbP016uqCUyPAzhyPYu4cMFhnnpV0imO0FVFr9xQ=
Subject key identifier: 5E:65:55:E6:18:C0:01:9A:EB:C3:D3:08:BE:4B:1F:BB:DF:FB:AC:1F
Certificate issuer: /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial: 03AB
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/A29B8E5A46A911EC8F95FC6EC4F9AE02.roa
Signing time: Wed 03 Apr 2024 03:04:55 +0000
ROA not before: Wed 03 Apr 2024 03:04:55 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 141757
IP address blocks: 103.163.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Validity
Not Before: Apr 3 03:04:55 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660cc756-60f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:47:0c:80:4e:ad:a1:8c:d4:e2:31:47:3f:
63:fd:e4:5e:56:58:b8:87:cf:dd:cd:94:bd:61:fd:
bf:54:29:e9:29:12:87:a7:7f:b3:84:d7:91:7d:b9:
f0:18:50:b1:ab:78:88:76:cc:a8:89:b7:08:70:bb:
7d:4e:95:40:a2:b9:b3:65:d8:6a:f1:d3:4f:44:a4:
c1:4b:4d:15:2f:17:da:42:e3:b9:03:9a:4e:2c:66:
a9:61:fb:1d:64:fd:32:40:96:4e:96:15:c9:6c:72:
2c:86:10:85:6d:08:b5:83:6a:c4:6e:1e:6b:76:12:
61:bd:d6:8f:03:e7:57:7e:60:a3:0c:f9:58:70:66:
c4:e8:e2:d5:40:50:b1:6b:81:4b:1d:06:ca:2e:de:
56:4f:78:3d:8b:f1:1e:15:4b:b4:f7:f0:97:fa:22:
d7:85:53:a7:11:78:3e:f8:8c:fc:24:41:0e:6f:f7:
5b:49:57:c9:f2:09:58:fd:aa:a3:1d:28:48:69:67:
49:1c:c4:8b:6d:b0:8a:36:80:9a:d3:59:fd:62:8f:
5f:5c:7c:09:88:8b:2c:c6:66:d7:26:0d:aa:53:f9:
5d:0e:91:ab:ae:26:5c:f8:b4:e5:1f:06:9a:05:c6:
67:43:06:37:a4:ff:00:e1:34:9c:3d:d8:6e:a7:e9:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:65:55:E6:18:C0:01:9A:EB:C3:D3:08:BE:4B:1F:BB:DF:FB:AC:1F
X509v3 Authority Key Identifier:
keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/A29B8E5A46A911EC8F95FC6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.152.0/23
Signature Algorithm: sha256WithRSAEncryption
20:f9:09:26:75:b8:f6:81:4b:7a:5e:ee:57:c8:0e:b0:0a:35:
1d:20:ef:d5:1a:67:7e:5e:ce:68:10:c9:0b:d4:13:e6:c0:82:
97:2a:c0:d7:70:6e:93:ba:85:a8:f8:1d:d7:fe:fb:e5:7e:0f:
00:29:3a:0b:55:5f:8c:bd:89:55:da:0e:ca:00:73:5d:4c:da:
e6:9d:b6:e5:95:8c:5e:73:25:db:1a:72:29:9e:2d:58:33:2f:
77:2e:a1:7a:6f:e5:6b:60:63:c9:d7:3c:3e:54:fc:ea:fe:e5:
c9:7a:a0:e6:c4:01:ff:ae:a4:a0:87:ee:f4:61:a0:7b:8d:4c:
cb:17:04:84:fc:95:1e:2f:f2:a3:dd:1d:32:bb:19:fb:b0:b7:
7d:b7:bc:8e:10:58:7f:07:79:56:97:ae:b7:fc:fb:32:a0:9c:
8a:d6:65:a3:d2:6e:2c:13:6d:ce:9c:5e:52:48:78:9f:3b:ea:
7e:7f:9d:13:de:a2:d5:55:49:c0:67:7e:8c:14:17:5b:bc:44:
3f:52:01:f7:73:c8:56:5e:3e:ed:26:12:5b:b2:c1:27:91:a9:
73:fa:a7:3f:c6:29:10:97:2b:7d:00:9f:59:8e:ae:af:95:18:
9b:c5:13:2d:e2:74:90:92:b1:52:a5:f3:5b:87:0c:81:4a:79:
2b:b4:0a:84
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG
OUExNDJFRjkwHhcNMjQwNDAzMDMwNDU1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBjYzc1Ni02MGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSlHDIBOraGM1OIxRz9j/eReVli4h8/dzZS9Yf2/VCnpKRKHp3+zhNeRfbnw
GFCxq3iIdsyoibcIcLt9TpVAormzZdhq8dNPRKTBS00VLxfaQuO5A5pOLGapYfsd
ZP0yQJZOlhXJbHIshhCFbQi1g2rEbh5rdhJhvdaPA+dXfmCjDPlYcGbE6OLVQFCx
a4FLHQbKLt5WT3g9i/EeFUu09/CX+iLXhVOnEXg++Iz8JEEOb/dbSVfJ8glY/aqj
HShIaWdJHMSLbbCKNoCa01n9Yo9fXHwJiIssxmbXJg2qU/ldDpGrriZc+LTlHwaa
BcZnQwY3pP8A4TScPdhup+kO9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFF5lVeYY
wAGa68PTCL5LH7vf+6wfMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2
OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTAwODAvMjIzRTNBNTA0NjlBMTFFQ0JFODEzNjBGQzRGOUFFMDIvQTI5QjhFNUE0
NkE5MTFFQzhGOTVGQzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFno5gwDQYJKoZIhvcNAQELBQADggEBACD5CSZ1uPaBS3pe
7lfIDrAKNR0g79UaZ35ezmgQyQvUE+bAgpcqwNdwbpO6haj4Hdf+++V+DwApOgtV
X4y9iVXaDsoAc11M2uadtuWVjF5zJdsacimeLVgzL3cuoXpv5WtgY8nXPD5U/Or+
5cl6oObEAf+upKCH7vRhoHuNTMsXBIT8lR4v8qPdHTK7Gfuwt323vI4QWH8HeVaX
rrf8+zKgnIrWZaPSbiwTbc6cXlJIeJ876n5/nRPeotVVScBnfowUF1u8RD9SAfdz
yFZePu0mEluywSeRqXP6pz/GKRCXK30An1mOrq+VGJvFEy3idJCSsVKl81uHDIFK
eSu0CoQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:13:03 2025 by rpki-client