Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/99C6F94CF52511E7948D5A0BC4F9AE02.roa
File: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (raw, json)
Hash identifier: vVPzJlO8vaF4Vh+BV9iHSW1TnZ35r0+ZhJx7At1qJd0=
Subject key identifier: D5:7A:25:AB:90:29:32:73:D8:38:10:70:0D:FD:D2:6F:EC:05:7A:C0
Certificate issuer: /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279
Certificate serial: 1640
Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/99C6F94CF52511E7948D5A0BC4F9AE02.roa
Signing time: Wed 28 Aug 2024 17:24:41 +0000
ROA not before: Wed 28 Aug 2024 17:24:41 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 132365
IP address blocks: 103.72.109.0/24 maxlen: 24
103.90.0.0/23 maxlen: 23
103.90.0.0/24 maxlen: 24
103.90.1.0/24 maxlen: 24
103.90.2.0/24 maxlen: 24
2401:3b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5696 (0x1640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279
Validity
Not Before: Aug 28 17:24:41 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66cf5d58-c77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:f4:84:ed:69:40:f8:4c:7e:d8:f4:1b:65:
5b:cc:50:43:5f:b8:cd:a6:50:00:af:8c:fb:25:8b:
a1:22:b7:7f:b9:37:1f:94:ce:d7:3f:21:10:d4:a1:
2f:20:1d:6b:bb:61:9e:53:a8:d9:81:7f:6b:2d:6a:
e0:5d:b6:f4:d1:05:85:3f:1b:fc:65:f8:37:29:42:
67:33:10:f0:33:06:22:5f:2a:91:9b:4e:48:1b:d2:
c8:b3:55:7a:cd:e8:f6:5c:fa:ea:64:9e:d2:6a:fa:
80:f7:5c:eb:71:de:2d:79:e6:0d:ee:bb:93:af:f1:
eb:aa:10:62:ba:ae:be:d5:4b:22:70:16:20:19:fd:
ef:b4:e5:84:66:77:54:1e:58:8f:2a:14:78:10:63:
fa:2e:9b:0e:6c:bd:64:7f:01:b8:1d:6f:54:fd:cd:
78:bf:77:81:32:55:6b:aa:78:b1:16:9b:d8:df:9d:
94:b3:9b:0f:ca:20:ca:29:a4:ee:a3:2b:2a:f9:4a:
a8:78:1b:d4:da:47:aa:a9:f9:1c:c3:63:ee:4b:5d:
0a:56:cf:3c:68:d6:73:eb:3b:77:a6:d2:df:a0:73:
79:ba:04:d8:89:8d:a5:6a:a3:73:27:74:db:52:38:
aa:aa:30:47:ca:dc:77:ac:d0:31:55:60:89:61:f0:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7A:25:AB:90:29:32:73:D8:38:10:70:0D:FD:D2:6F:EC:05:7A:C0
X509v3 Authority Key Identifier:
keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/99C6F94CF52511E7948D5A0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.109.0/24
103.90.0.0-103.90.2.255
IPv6:
2401:3b40::/32
Signature Algorithm: sha256WithRSAEncryption
1d:bc:8b:3d:55:d7:4f:c2:cd:f1:83:24:d0:37:73:1e:8f:d9:
d3:12:97:4d:9d:52:d9:ba:65:66:d4:21:30:4d:42:e9:36:81:
1c:d9:d7:69:8c:2c:de:6b:4f:29:ea:53:a3:ed:fa:aa:f6:67:
c5:a3:4d:61:b7:76:36:f8:85:33:80:1c:e2:dd:16:b6:ea:c5:
45:ec:1d:a6:97:e9:c4:cc:27:c3:21:da:26:d5:99:24:02:91:
e6:a5:d1:3d:da:b5:88:0b:c4:57:37:63:29:4e:9b:2f:a0:9e:
d8:de:65:69:18:96:74:48:c6:c7:16:ab:55:12:17:e8:2d:a9:
37:be:2a:11:08:a2:0a:ca:19:85:7c:9c:2a:8d:0d:43:ea:5e:
bc:97:69:d4:c8:fb:54:02:02:73:f8:b4:10:c4:3c:cd:88:84:
32:3e:85:8a:88:82:f6:b0:ef:bd:ac:f2:4a:0a:07:a3:c8:4b:
0c:cc:a3:62:50:06:6e:c5:9a:fb:83:0a:53:60:4d:0d:a6:e7:
74:e9:d0:8e:58:0f:ba:af:5e:9d:f9:23:ed:10:ba:a0:db:93:
26:d6:79:01:42:6e:3b:8c:f9:4b:a7:6f:a7:2e:26:14:1b:9b:
6a:37:50:54:dc:e1:d4:73:e9:6d:4a:43:b1:82:e9:2a:10:14:
1a:c0:83:7d
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgICFkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNBQTYxMTAvBgNVBAUTKEU1QzNBNjg2QzgzREVFNkQzM0JGRUM1NDFFQUNCNEE0
QTA4OTkyNzkwHhcNMjQwODI4MTcyNDQxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmNmNWQ1OC1jNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxSD0hO1pQPhMftj0G2VbzFBDX7jNplAAr4z7JYuhIrd/uTcflM7XPyEQ1KEv
IB1ru2GeU6jZgX9rLWrgXbb00QWFPxv8Zfg3KUJnMxDwMwYiXyqRm05IG9LIs1V6
zej2XPrqZJ7SavqA91zrcd4teeYN7ruTr/HrqhBiuq6+1UsicBYgGf3vtOWEZndU
HliPKhR4EGP6LpsObL1kfwG4HW9U/c14v3eBMlVrqnixFpvY352Us5sPyiDKKaTu
oysq+UqoeBvU2keqqfkcw2PuS10KVs88aNZz6zt3ptLfoHN5ugTYiY2laqNzJ3Tb
UjiqqjBHytx3rNAxVWCJYfDGZQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFNV6JauQ
KTJz2DgQcA390m/sBXrAMB8GA1UdIwQYMBaAFOXDpobIPe5tM7/sVB6stKSgiZJ5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FBNi85QzNEODdFNkY1
MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdtMHp2LXhVSHF5MHBLQ0pr
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVjT21oc2c5N20wenYteFVIcXkwcEtDSmtuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTNBQTYvOUMzRDg3RTZGNTI0MTFFNzk2NDRCMDA5QzRGOUFFMDIvOTlDNkY5NENG
NTI1MTFFNzk0OEQ1QTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E
LDAqMBkEAgABMBMDBABnSG0wCwMDAWdaAwQAZ1oCMA0EAgACMAcDBQAkATtAMA0G
CSqGSIb3DQEBCwUAA4IBAQAdvIs9VddPws3xgyTQN3Mej9nTEpdNnVLZumVm1CEw
TULpNoEc2ddpjCzea08p6lOj7fqq9mfFo01ht3Y2+IUzgBzi3Ra26sVF7B2ml+nE
zCfDIdom1ZkkApHmpdE92rWIC8RXN2MpTpsvoJ7Y3mVpGJZ0SMbHFqtVEhfoLak3
vioRCKIKyhmFfJwqjQ1D6l68l2nUyPtUAgJz+LQQxDzNiIQyPoWKiIL2sO+9rPJK
CgejyEsMzKNiUAZuxZr7gwpTYE0Npud06dCOWA+6r16d+SPtELqg25Mm1nkBQm47
jPlLp2+nLiYUG5tqN1BU3OHUc+ltSkOxgukqEBQawIN9
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:30:56 2025 by rpki-client