Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/DD058EDAC0B211EEBAD8C90CC4F9AE02.roa
File: DD058EDAC0B211EEBAD8C90CC4F9AE02.roa (raw, json)
Hash identifier: ++ZiW2liv4vhbYoVqKcq8Sm09vlbxFcrZvZEsqcF2h4=
Subject key identifier: 60:16:E5:69:DB:28:9B:62:CE:80:41:92:C0:73:B1:CE:AB:D7:72:78
Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Certificate serial: 035D
Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/DD058EDAC0B211EEBAD8C90CC4F9AE02.roa
Signing time: Fri 31 Jan 2025 01:15:07 +0000
ROA not before: Fri 31 Jan 2025 01:15:07 +0000
ROA not after: Mon 02 Jun 2025 00:00:00 +0000
asID: 138655
IP address blocks: 103.159.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861 (0x35d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Validity
Not Before: Jan 31 01:15:07 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=679c241b-7cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:4c:f9:eb:38:e0:39:3e:66:18:2d:37:8e:
ec:d1:85:29:8f:ba:46:6c:2e:26:7f:56:45:c4:35:
a6:db:4c:f8:e5:6f:18:f2:c1:31:9c:7c:f5:25:bf:
77:d5:a5:7b:60:a5:0b:ba:7a:4f:1a:ee:be:07:ec:
de:85:c9:fc:92:85:c5:68:d2:05:44:67:13:b2:5c:
be:36:26:60:1e:7b:a2:60:a3:d1:cd:38:b0:c5:ca:
ad:5c:4f:d1:82:f9:0c:0f:0d:ad:75:9d:cc:8d:d3:
b4:13:5e:55:56:c0:1c:64:4b:47:a7:31:c7:4b:b4:
53:67:86:1d:4d:ec:17:27:74:ee:07:c5:63:ad:bf:
ce:4a:78:ac:74:2b:91:23:67:cb:32:5e:67:30:be:
f4:aa:53:5b:88:c6:96:63:ee:2e:38:ac:f7:5e:fa:
8b:e9:94:1c:1c:3b:e8:d1:61:95:0e:f3:68:a3:5d:
cc:16:fc:b5:3d:eb:90:91:de:58:54:18:45:c1:04:
f8:cb:26:79:63:63:17:49:9c:45:00:c5:cb:89:e8:
e9:d2:51:f4:b8:7f:ea:bd:29:58:57:86:94:22:3f:
f0:82:f7:8c:7a:af:74:16:e3:1f:a1:00:26:63:77:
4e:2e:a6:3f:f0:b2:3e:b2:32:18:67:f3:dc:48:b8:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:16:E5:69:DB:28:9B:62:CE:80:41:92:C0:73:B1:CE:AB:D7:72:78
X509v3 Authority Key Identifier:
keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/DD058EDAC0B211EEBAD8C90CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1b:15:e5:82:96:d5:31:26:66:c7:0b:45:b8:b1:be:f7:cf:
f1:f3:52:33:01:60:b7:fd:25:b4:cd:0c:bb:a0:a9:2e:18:2e:
ac:86:ac:c3:65:dc:f7:89:85:02:c3:4d:08:d0:04:b9:44:b3:
1d:87:bc:3f:2b:0e:61:70:ab:5a:7f:a8:17:78:da:c1:21:3a:
7c:a5:8d:47:86:4f:74:ec:b4:74:2f:64:2a:f5:32:29:2d:22:
c8:e3:82:4a:9a:a8:34:24:93:62:1b:06:da:31:d2:37:80:f2:
83:09:93:2a:d3:e8:49:3c:ba:e2:2d:c3:71:d2:81:e9:98:c6:
97:67:8b:77:2c:5a:69:6d:3c:58:01:1d:9f:7d:f1:84:cf:af:
3f:91:5e:8b:b9:37:7d:1b:d0:ba:e9:49:52:7d:f5:a4:a9:a0:
7b:6e:70:e2:51:90:d6:d8:4f:3c:5a:a1:fc:20:d0:3f:f8:41:
ec:a6:36:9b:9f:5f:6b:d4:1f:03:fe:64:18:c2:69:ff:27:dd:
c1:5d:cd:c9:3e:2f:c1:02:83:61:a0:ca:5f:1e:74:96:19:72:
0f:d7:b0:39:78:d1:ac:e8:a6:b5:3f:da:90:b4:93:7f:d0:e0:
c4:82:2f:4b:03:eb:84:45:55:6f:44:31:ad:16:55:42:0d:7d:
73:14:76:c3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB
REQ1RjM0QUMwHhcNMjUwMTMxMDExNTA3WhcNMjUwNjAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzljMjQxYi03Y2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArv9M+es44Dk+ZhgtN47s0YUpj7pGbC4mf1ZFxDWm20z45W8Y8sExnHz1Jb93
1aV7YKULunpPGu6+B+zehcn8koXFaNIFRGcTsly+NiZgHnuiYKPRzTiwxcqtXE/R
gvkMDw2tdZ3MjdO0E15VVsAcZEtHpzHHS7RTZ4YdTewXJ3TuB8Vjrb/OSnisdCuR
I2fLMl5nML70qlNbiMaWY+4uOKz3XvqL6ZQcHDvo0WGVDvNoo13MFvy1PeuQkd5Y
VBhFwQT4yyZ5Y2MXSZxFAMXLiejp0lH0uH/qvSlYV4aUIj/wgveMeq90FuMfoQAm
Y3dOLqY/8LI+sjIYZ/PcSLjLgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGAW5Wnb
KJtizoBBksBzsc6r13J4MB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF
MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO
S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NThFOEUvMDRGQkI4RjBBRTBGMTFFQ0EwMjA1NjY2QzRGOUFFMDIvREQwNThFREFD
MEIyMTFFRUJBRDhDOTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnn04wDQYJKoZIhvcNAQELBQADggEBAD8bFeWCltUxJmbH
C0W4sb73z/HzUjMBYLf9JbTNDLugqS4YLqyGrMNl3PeJhQLDTQjQBLlEsx2HvD8r
DmFwq1p/qBd42sEhOnyljUeGT3TstHQvZCr1MiktIsjjgkqaqDQkk2IbBtox0jeA
8oMJkyrT6Ek8uuItw3HSgemYxpdni3csWmltPFgBHZ998YTPrz+RXou5N30b0Lrp
SVJ99aSpoHtucOJRkNbYTzxaofwg0D/4QeymNpufX2vUHwP+ZBjCaf8n3cFdzck+
L8ECg2Ggyl8edJYZcg/XsDl40azoprU/2pC0k3/Q4MSCL0sD64RFVW9EMa0WVUIN
fXMUdsM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:16 2025 by rpki-client