Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/3BABBD7699E611EAB3C00943C4F9AE02.roa
File: 3BABBD7699E611EAB3C00943C4F9AE02.roa (raw, json)
Hash identifier: ofC7tglYcEt0K5DgsHyHVWTgOvFGFcBwV3e64Pwy/mA=
Subject key identifier: 25:7D:96:4F:FA:A6:22:EC:05:C6:AE:59:B6:80:07:C0:62:04:14:2B
Certificate issuer: /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37
Certificate serial: 088F
Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/3BABBD7699E611EAB3C00943C4F9AE02.roa
Signing time: Fri 08 Mar 2024 21:29:38 +0000
ROA not before: Fri 08 Mar 2024 21:29:38 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 63916
IP address blocks: 43.245.220.0/22 maxlen: 22
43.245.220.0/24 maxlen: 24
43.245.221.0/24 maxlen: 24
43.245.223.0/24 maxlen: 24
103.209.100.0/24 maxlen: 24
103.209.101.0/24 maxlen: 24
103.209.102.0/24 maxlen: 24
103.209.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37
Validity
Not Before: Mar 8 21:29:38 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65eb8342-336b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:40:b4:54:d8:ed:b8:df:66:68:e7:5c:c4:d1:
a5:21:31:47:42:cc:9e:67:bc:ca:c4:c2:fd:4a:f3:
38:62:c7:d4:85:a3:09:ad:ad:d2:f8:03:d1:51:04:
dd:aa:97:8d:b2:be:f6:ee:04:ea:0d:eb:f4:c3:e2:
79:29:33:d8:c0:db:24:89:8c:eb:0b:44:48:51:4f:
1f:d7:8f:fa:4e:2e:c2:f1:07:24:a3:91:41:20:60:
7f:7c:a7:30:33:44:a2:cc:87:d7:62:05:00:e0:6c:
12:f2:d9:93:54:d3:44:0e:10:d2:69:5e:64:1e:3e:
55:65:e0:53:60:7b:eb:19:2b:f0:ec:3b:00:73:42:
8d:0a:1e:ad:91:37:0f:eb:74:fd:f0:97:c1:9a:f5:
0f:f4:53:50:37:cd:9a:79:6f:ea:f6:06:89:08:3c:
d4:de:ca:16:db:52:27:64:2f:6a:13:fa:e2:81:44:
c8:43:d3:cd:0a:30:b6:0b:55:fb:27:df:b7:dc:8b:
36:8d:fd:7b:fb:de:a7:15:62:fd:2b:6c:5d:60:eb:
f5:e6:31:a2:4d:41:52:b9:61:4c:c5:f5:0a:02:82:
ba:3f:d9:8a:01:81:30:4f:a5:ca:5c:cc:60:a1:7a:
4f:bc:71:21:76:04:70:8d:ec:ba:62:f1:bb:78:56:
0b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7D:96:4F:FA:A6:22:EC:05:C6:AE:59:B6:80:07:C0:62:04:14:2B
X509v3 Authority Key Identifier:
keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/3BABBD7699E611EAB3C00943C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.220.0/22
103.209.100.0/22
Signature Algorithm: sha256WithRSAEncryption
45:f2:83:b2:dd:eb:1c:8d:e5:5b:64:cf:0c:96:dd:72:0d:7c:
79:d4:d5:5c:2e:4b:d4:6d:b7:6e:76:f1:9e:d7:43:b2:28:96:
6e:67:3c:a3:56:3d:56:8d:40:21:dc:9d:5d:a4:10:6f:d2:6b:
36:d7:75:59:66:bd:de:42:3c:9f:8d:2c:c2:6c:c7:dc:40:07:
95:8c:a1:b2:89:ca:06:f4:34:21:b2:f9:13:34:14:f2:89:51:
f7:4f:87:30:14:19:52:6f:d6:c4:d2:45:b0:8b:e7:4b:f4:fa:
33:c1:95:9d:ea:7d:f9:d6:3b:e1:34:db:b1:db:52:3c:4f:91:
e7:21:a6:13:6a:99:52:42:98:21:a0:f2:57:71:c3:f1:ba:88:
53:09:da:40:5c:c1:32:15:16:af:b4:b2:3c:a6:c8:f0:e0:45:
c4:46:61:09:d3:e9:c5:fc:5d:41:c6:24:f7:80:6e:57:57:08:
a3:41:50:bd:59:f9:ca:bd:59:0a:79:72:a5:2f:4a:b3:b6:a5:
83:dc:84:29:9b:c3:ef:5d:f9:62:4e:5a:b4:4c:9b:d6:39:92:
c6:53:77:5a:eb:b6:96:f2:6d:e7:23:a1:41:46:be:ef:73:ad:
3f:41:ae:b5:50:22:ee:0c:1c:6e:81:4c:b5:cf:ef:d8:b4:80:
2b:f3:b4:e3
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTYzNDIxMTAvBgNVBAUTKDc3REEyNDgwMDRFOEM1ODcyQkRGNzJCQUMxMjIyQzdD
Q0I2RThFMzcwHhcNMjQwMzA4MjEyOTM4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWViODM0Mi0zMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7EC0VNjtuN9maOdcxNGlITFHQsyeZ7zKxML9SvM4YsfUhaMJra3S+APRUQTd
qpeNsr727gTqDev0w+J5KTPYwNskiYzrC0RIUU8f14/6Ti7C8Qcko5FBIGB/fKcw
M0SizIfXYgUA4GwS8tmTVNNEDhDSaV5kHj5VZeBTYHvrGSvw7DsAc0KNCh6tkTcP
63T98JfBmvUP9FNQN82aeW/q9gaJCDzU3soW21InZC9qE/rigUTIQ9PNCjC2C1X7
J9+33Is2jf17+96nFWL9K2xdYOv15jGiTUFSuWFMxfUKAoK6P9mKAYEwT6XKXMxg
oXpPvHEhdgRwjey6YvG7eFYLyQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCV9lk/6
piLsBcauWbaAB8BiBBQrMB8GA1UdIwQYMBaAFHfaJIAE6MWHK99yusEiLHzLbo43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjM0Mi9CREY4OTA4MDk5
RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZY3IzM0s2d1NJc2ZNdHVq
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q5b2tnQVRveFljcjMzSzZ3U0lzZk10dWpqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTYzNDIvQkRGODkwODA5OUU0MTFFQTg5QTRDMjQwQzRGOUFFMDIvM0JBQkJENzY5
OUU2MTFFQUIzQzAwOTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIr9dwDBAJn0WQwDQYJKoZIhvcNAQELBQADggEBAEXyg7Ld
6xyN5VtkzwyW3XINfHnU1VwuS9Rtt2528Z7XQ7Iolm5nPKNWPVaNQCHcnV2kEG/S
azbXdVlmvd5CPJ+NLMJsx9xAB5WMobKJygb0NCGy+RM0FPKJUfdPhzAUGVJv1sTS
RbCL50v0+jPBlZ3qffnWO+E027HbUjxPkechphNqmVJCmCGg8ldxw/G6iFMJ2kBc
wTIVFq+0sjymyPDgRcRGYQnT6cX8XUHGJPeAbldXCKNBUL1Z+cq9WQp5cqUvSrO2
pYPchCmbw+9d+WJOWrRMm9Y5ksZTd1rrtpbybecjoUFGvu9zrT9BrrVQIu4MHG6B
TLXP79i0gCvztOM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:48:42 2025 by rpki-client