Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa
File: 8479151EC72011EA8062547CC4F9AE02.roa (raw, json)
Hash identifier: a8T2tDSruvMY8XhGVCjDtKcaR5fee/wuPWX28KfJWEw=
Subject key identifier: BB:47:8B:4D:B5:2F:C1:60:AE:6C:17:C2:CE:ED:92:8C:A9:55:29:C5
Certificate issuer: /CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
Certificate serial: 07A6
Authority key identifier: 83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa
Signing time: Wed 22 May 2024 22:31:32 +0000
ROA not before: Wed 22 May 2024 22:31:32 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 139034
IP address blocks: 103.138.186.0/24 maxlen: 24
103.138.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1958 (0x7a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
Validity
Not Before: May 22 22:31:32 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=664e7244-3e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:bf:f9:e9:66:b4:e6:07:63:02:18:5c:cb:
06:82:98:5c:2b:07:86:19:cf:87:16:58:c9:e8:a8:
a7:16:85:1d:b7:3b:b8:e3:d9:9f:74:b0:91:40:b1:
72:c3:d6:d0:37:04:9e:9c:da:e8:85:1a:19:7e:ca:
14:3c:33:05:3c:0f:27:33:e1:6e:3d:3d:dd:7c:91:
05:fe:eb:e8:ce:c3:f4:8b:55:e4:84:6d:f9:9c:2f:
6f:a4:68:4e:4f:16:18:a3:8c:ea:dd:11:15:0c:da:
cf:cf:77:4b:1f:96:15:71:10:29:f4:23:6e:24:56:
3d:ef:42:31:5a:8a:08:2e:70:3b:42:37:91:83:6b:
29:c3:93:e7:1f:80:68:86:4d:a8:4b:4e:91:7d:be:
0f:25:3a:40:72:b0:01:dd:09:74:22:27:24:a6:ed:
bb:2f:3e:97:23:75:0c:61:fe:7b:6f:67:d8:5d:23:
13:ea:d9:c3:05:41:f1:44:86:18:e6:24:6e:3e:f0:
57:b8:2c:68:ac:c3:92:62:a5:9a:7a:a5:a0:b0:e1:
11:5f:f0:4c:96:18:d0:19:4b:3f:48:37:e4:f5:6f:
61:a4:9d:4c:13:f6:fc:82:3f:14:8f:30:6d:57:1e:
52:aa:64:ef:f2:2e:20:1c:71:86:b3:13:b3:1b:5b:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:8B:4D:B5:2F:C1:60:AE:6C:17:C2:CE:ED:92:8C:A9:55:29:C5
X509v3 Authority Key Identifier:
keyid:83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.186.0/23
Signature Algorithm: sha256WithRSAEncryption
84:87:db:4c:86:ab:7a:9b:3f:cd:2b:60:34:d7:e5:cc:32:95:
9e:22:5f:fe:0c:e3:29:0e:35:76:53:c8:96:27:fc:31:4e:4a:
8f:1e:40:55:bd:40:f4:48:81:cb:37:77:27:7f:ca:46:69:ca:
4e:d6:20:71:d0:aa:bb:cc:ac:00:73:70:8d:81:25:f9:a5:11:
34:ab:f4:5b:98:d4:a8:a3:1c:7a:11:55:ca:aa:c2:89:33:cc:
75:ba:98:5d:01:ba:96:94:96:4f:81:16:23:cb:5b:6f:e6:20:
07:15:37:01:fa:1d:96:57:01:b2:0f:4e:aa:8b:af:e1:af:37:
c8:9e:89:5a:75:68:db:ff:2a:e5:16:9b:ef:b5:18:e3:9c:f5:
2b:a5:04:1c:58:31:1a:bc:55:c7:38:cf:60:23:72:e7:13:f5:
fc:b2:6f:2f:a3:28:5c:36:72:11:13:16:d2:42:8a:76:7d:50:
a4:eb:da:01:d3:cf:9b:a1:d0:3f:0f:fe:24:f1:8b:04:58:6c:
16:8b:d9:cc:a4:b2:8a:7b:2c:a8:16:c8:3a:74:01:d5:af:40:
80:24:a2:b3:bf:86:27:a6:de:92:34:b4:83:aa:eb:0d:cd:68:
25:29:08:41:55:d2:38:89:e1:10:d3:f7:c5:ab:77:17:ee:a6:
cf:33:0b:be
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURCNTUxMTAvBgNVBAUTKDgzMjMzM0U2NEM0QzhCMEI1ODZERUY5MzdCQjk2MjQ4
MjFCOEMxREYwHhcNMjQwNTIyMjIzMTMyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjRlNzI0NC0zZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsVS/+elmtOYHYwIYXMsGgphcKweGGc+HFljJ6KinFoUdtzu449mfdLCRQLFy
w9bQNwSenNrohRoZfsoUPDMFPA8nM+FuPT3dfJEF/uvozsP0i1XkhG35nC9vpGhO
TxYYo4zq3REVDNrPz3dLH5YVcRAp9CNuJFY970IxWooILnA7QjeRg2spw5PnH4Bo
hk2oS06Rfb4PJTpAcrAB3Ql0Iickpu27Lz6XI3UMYf57b2fYXSMT6tnDBUHxRIYY
5iRuPvBXuCxorMOSYqWaeqWgsOERX/BMlhjQGUs/SDfk9W9hpJ1ME/b8gj8UjzBt
Vx5SqmTv8i4gHHGGsxOzG1uLuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLtHi021
L8FgrmwXws7tkoypVSnFMB8GA1UdIwQYMBaAFIMjM+ZMTIsLWG3vk3u5YkghuMHf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI1NS81QUFGRDdFNkM3
MUYxMUVBOUZCMUUzNzhDNEY5QUUwMi9neU16NWt4TWl3dFliZS1UZTdsaVNDRzR3
ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d5TXo1a3hNaXd0WWJlLVRlN2xpU0NHNHdkOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NURCNTUvNUFBRkQ3RTZDNzFGMTFFQTlGQjFFMzc4QzRGOUFFMDIvODQ3OTE1MUVD
NzIwMTFFQTgwNjI1NDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnirowDQYJKoZIhvcNAQELBQADggEBAISH20yGq3qbP80r
YDTX5cwylZ4iX/4M4ykONXZTyJYn/DFOSo8eQFW9QPRIgcs3dyd/ykZpyk7WIHHQ
qrvMrABzcI2BJfmlETSr9FuY1KijHHoRVcqqwokzzHW6mF0BupaUlk+BFiPLW2/m
IAcVNwH6HZZXAbIPTqqLr+GvN8ieiVp1aNv/KuUWm++1GOOc9SulBBxYMRq8Vcc4
z2AjcucT9fyyby+jKFw2chETFtJCinZ9UKTr2gHTz5uh0D8P/iTxiwRYbBaL2cyk
sop7LKgWyDp0AdWvQIAkorO/hiem3pI0tIOq6w3NaCUpCEFV0jiJ4RDT98Wrdxfu
ps8zC74=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:40 2025 by rpki-client