Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa
File: 0EF0E842839E11EEA1892A12C4F9AE02.roa (raw, json)
Hash identifier: qjRK1UsduZje7NigLFGo9IfaYJBsXsGYrorJ0nbh7Fg=
Subject key identifier: 2D:A2:3D:05:88:02:A4:0D:35:B6:E1:84:47:3B:87:08:42:0A:A2:02
Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial: 0BE1
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa
Signing time: Mon 04 Mar 2024 19:27:11 +0000
ROA not before: Mon 04 Mar 2024 19:27:11 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 135341
IP address blocks: 103.134.126.0/24 maxlen: 24
103.134.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3041 (0xbe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Validity
Not Before: Mar 4 19:27:11 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e6208f-96ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:f0:ae:65:65:81:50:91:c3:f2:82:7a:7b:
1f:f8:92:ff:f0:8d:d0:ce:e2:3a:54:d6:40:92:d4:
c1:00:c2:15:7b:84:72:02:ae:d3:c2:97:f4:a1:19:
56:27:11:41:cc:c0:01:84:05:55:03:50:d5:93:51:
de:1f:f1:22:6a:41:97:1b:56:fc:19:3c:dc:cf:9c:
59:1b:ea:c8:61:f4:54:0f:e1:a0:a0:e8:23:b4:e9:
10:64:04:53:04:e4:8a:ae:2f:42:ee:82:07:c7:21:
e5:3b:c4:2a:fd:76:77:83:13:3d:c3:27:4d:44:1e:
01:67:f4:3a:5a:96:ac:84:7b:f6:62:8f:7a:e1:bf:
75:fd:e7:2a:d5:31:67:c4:ea:ae:92:2a:c3:e2:d9:
88:57:53:2b:f8:3f:fc:bf:c2:11:29:71:1a:32:5f:
55:2e:c0:fb:cd:81:53:cc:35:e3:13:0c:e0:c6:33:
01:fc:c2:8e:e5:8f:01:40:a1:ea:a8:d5:29:65:d5:
60:84:83:27:8f:95:b7:62:31:fd:ec:36:f1:f6:fe:
2c:3b:ab:ff:c3:95:8f:c2:df:a7:73:85:11:be:44:
d9:4b:39:55:96:18:eb:ab:e6:dc:54:39:e2:f7:e2:
fc:5e:43:83:b6:09:8f:c1:1f:7f:60:b2:de:db:7f:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A2:3D:05:88:02:A4:0D:35:B6:E1:84:47:3B:87:08:42:0A:A2:02
X509v3 Authority Key Identifier:
keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/0EF0E842839E11EEA1892A12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.126.0/23
Signature Algorithm: sha256WithRSAEncryption
77:7e:b0:2d:ba:f3:21:ee:80:16:27:2d:56:7f:ba:6d:ff:24:
ac:5c:bb:54:63:d2:4e:5d:c7:7f:20:68:f0:6b:9a:c7:66:67:
5d:a1:9a:43:84:7c:c7:67:65:8f:ed:48:36:a3:77:fd:24:d4:
a6:7c:60:41:b3:a4:3c:52:1d:1a:32:56:af:1d:e8:2d:b0:43:
48:e4:16:07:7e:a5:1f:0d:b5:ad:96:46:fc:b6:22:ce:a4:9c:
d5:49:7a:b1:57:42:6a:95:fa:e6:d1:7d:7c:c3:c8:5a:46:36:
99:e9:a4:f1:4d:3d:4f:a2:9c:16:f6:ab:86:b3:76:8e:6b:da:
30:69:c3:2e:0f:e2:e5:82:72:76:de:68:e0:16:6c:19:d7:00:
d8:5a:2f:b4:77:cc:8d:51:87:5a:2c:29:a5:6a:f7:12:0e:69:
72:32:92:c5:63:2b:da:d0:4a:8c:1b:be:be:d6:3c:18:f6:86:
60:c1:5f:f6:7d:fc:c1:0f:75:9c:ee:ce:ea:f8:01:a9:74:bb:
34:7f:41:c2:61:dc:f3:6d:aa:3f:17:cc:ad:64:3c:4e:57:03:
2e:1d:96:8f:a3:98:f2:07:50:5d:62:e5:4a:58:f8:8a:58:35:
cf:f4:0f:67:b8:65:1d:76:86:0d:94:7c:86:3f:db:b9:ba:49:
fb:ef:6e:f7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1
RUY0ODkwODgwHhcNMjQwMzA0MTkyNzExWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWU2MjA4Zi05NmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZrwrmVlgVCRw/KCensf+JL/8I3QzuI6VNZAktTBAMIVe4RyAq7Twpf0oRlW
JxFBzMABhAVVA1DVk1HeH/EiakGXG1b8GTzcz5xZG+rIYfRUD+GgoOgjtOkQZART
BOSKri9C7oIHxyHlO8Qq/XZ3gxM9wydNRB4BZ/Q6WpashHv2Yo964b91/ecq1TFn
xOqukirD4tmIV1Mr+D/8v8IRKXEaMl9VLsD7zYFTzDXjEwzgxjMB/MKO5Y8BQKHq
qNUpZdVghIMnj5W3YjH97Dbx9v4sO6v/w5WPwt+nc4URvkTZSzlVlhjrq+bcVDni
9+L8XkODtgmPwR9/YLLe23+KsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC2iPQWI
AqQNNbbhhEc7hwhCCqICMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2
NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjQyQTAvQ0E3RDExNjJGNjc2MTFFOTkwQkFBMjIyQzRGOUFFMDIvMEVGMEU4NDI4
MzlFMTFFRUExODkyQTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnhn4wDQYJKoZIhvcNAQELBQADggEBAHd+sC268yHugBYn
LVZ/um3/JKxcu1Rj0k5dx38gaPBrmsdmZ12hmkOEfMdnZY/tSDajd/0k1KZ8YEGz
pDxSHRoyVq8d6C2wQ0jkFgd+pR8Nta2WRvy2Is6knNVJerFXQmqV+ubRfXzDyFpG
NpnppPFNPU+inBb2q4azdo5r2jBpwy4P4uWCcnbeaOAWbBnXANhaL7R3zI1Rh1os
KaVq9xIOaXIyksVjK9rQSowbvr7WPBj2hmDBX/Z9/MEPdZzuzur4Aal0uzR/QcJh
3PNtqj8XzK1kPE5XAy4dlo+jmPIHUF1i5UpY+IpYNc/0D2e4ZR12hg2UfIY/27m6
Sfvvbvc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:52 2025 by rpki-client