Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa
File: 0913CC14A59911EFBA373D1BC4F9AE02.roa (raw, json)
Hash identifier: gsiPVh91f5x0agyT4K6ET9Cizm+TUqAkZy67lxkkwXw=
Subject key identifier: E1:AA:D8:FD:01:C6:64:8F:5A:8D:27:2F:F0:A6:8C:D2:ED:92:BA:3D
Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Certificate serial: 63
Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa
Signing time: Mon 18 Nov 2024 10:36:57 +0000
ROA not before: Mon 18 Nov 2024 10:36:57 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 152734
IP address blocks: 103.142.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Validity
Not Before: Nov 18 10:36:57 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=673b18c9-6c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:6a:6e:c4:6f:38:8b:31:b5:f7:4f:ba:97:
c1:da:04:d5:31:25:94:97:47:9d:da:a4:9e:5d:0a:
46:20:b4:9d:74:ab:e9:4e:ff:5b:e1:11:fa:45:20:
d8:fa:53:78:46:7a:c2:e9:6b:c9:51:60:5f:54:bd:
26:58:32:1b:ee:1b:71:2c:0c:89:f8:13:89:8d:40:
f5:50:f1:96:8b:9b:a1:c2:db:24:0e:23:f0:69:d6:
00:be:52:63:f4:a4:cb:ea:5a:87:38:0f:4b:af:9f:
3b:c8:10:6b:7f:10:84:21:29:0c:a6:58:f0:87:8f:
8c:52:c6:e8:4b:c1:ac:6f:c0:32:ae:99:81:1e:30:
3d:88:c0:63:c9:19:49:38:9e:74:3e:d6:1e:3c:a1:
29:a4:3c:11:f3:8c:8e:d7:75:64:29:86:cf:1b:63:
45:ae:43:73:01:4a:99:d6:c8:3a:12:47:5b:b9:73:
52:91:22:be:e7:59:e5:6b:81:38:03:68:75:e7:eb:
fd:37:0c:86:5a:79:01:16:45:05:d9:5f:f1:8e:f4:
24:72:ef:07:14:eb:36:9e:e5:33:72:a8:a4:58:1d:
2d:07:b0:55:a3:1c:4d:25:23:34:a0:e5:1a:4e:2b:
c5:20:bf:c3:1e:3e:41:22:97:2e:8f:84:ea:48:99:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:D8:FD:01:C6:64:8F:5A:8D:27:2F:F0:A6:8C:D2:ED:92:BA:3D
X509v3 Authority Key Identifier:
keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.150.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:99:2b:8f:1e:8d:20:ae:52:a0:99:b4:fb:73:9c:35:6b:47:
36:4b:f3:67:da:68:a8:eb:39:1e:f2:dc:a5:b8:7b:a8:a2:7c:
8f:57:bd:4d:b6:b6:01:d5:3d:49:52:fc:df:66:2f:ff:ee:7f:
7c:28:95:71:1a:2f:0c:23:33:c4:58:f4:29:b5:42:57:bd:44:
b7:61:cf:16:23:ab:5a:5a:36:9a:00:25:ec:35:2b:eb:49:06:
77:db:0e:59:c9:87:10:a1:d1:f3:bc:e5:47:8a:ab:92:c1:06:
b6:73:be:50:d2:9f:2c:56:b5:63:ff:9e:c2:57:da:a8:72:53:
e3:91:a0:47:71:da:f7:46:44:f8:10:b1:96:c0:aa:14:12:01:
be:fb:ad:5e:16:bd:fc:df:4d:f0:6b:bc:62:6d:69:b9:4b:d1:
2b:7e:07:79:0b:ef:27:8f:f2:41:84:d0:31:9d:1e:cd:3b:2e:
04:83:a7:b3:ca:bb:1d:7e:ae:00:97:2b:f9:0f:a9:50:a1:9f:
58:1b:c5:76:28:ce:75:e9:8c:f4:29:e2:fa:56:38:17:83:39:
e7:fb:10:2f:c3:ff:0a:23:3b:ed:f6:da:79:4a:6c:fe:82:c3:
25:2e:d6:95:bf:ba:26:42:78:a2:2a:ac:5c:32:9d:b3:3b:02:
8e:39:d7:b2
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NEIwQTExMC8GA1UEBRMoRUU0QjA1NjE4NDM3RjE5NDhEOTI5OUY4QTRGOTI5QzE4
N0Q5N0YzMzAeFw0yNDExMTgxMDM2NTdaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3M2IxOGM5LTZjMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCieWpuxG84izG190+6l8HaBNUxJZSXR53apJ5dCkYgtJ10q+lO/1vhEfpFINj6
U3hGesLpa8lRYF9UvSZYMhvuG3EsDIn4E4mNQPVQ8ZaLm6HC2yQOI/Bp1gC+UmP0
pMvqWoc4D0uvnzvIEGt/EIQhKQymWPCHj4xSxuhLwaxvwDKumYEeMD2IwGPJGUk4
nnQ+1h48oSmkPBHzjI7XdWQphs8bY0WuQ3MBSpnWyDoSR1u5c1KRIr7nWeVrgTgD
aHXn6/03DIZaeQEWRQXZX/GO9CRy7wcU6zae5TNyqKRYHS0HsFWjHE0lIzSg5RpO
K8Ugv8MePkEily6PhOpImRULAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4arY/QHG
ZI9ajScv8KaM0u2Suj0wHwYDVR0jBBgwFoAU7ksFYYQ38ZSNkpn4pPkpwYfZfzMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0QjBBLzRDRjBGNzA4MTI5
MjExRUZBQjEwNjU2NEM0RjlBRTAyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN2tzRllZUTM4WlNOa3BuNHBQa3B3WWZaZnpNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi8wOTEzQ0MxNEE1
OTkxMUVGQkEzNzNEMUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWeOljANBgkqhkiG9w0BAQsFAAOCAQEAfJkrjx6NIK5SoJm0
+3OcNWtHNkvzZ9poqOs5HvLcpbh7qKJ8j1e9Tba2AdU9SVL832Yv/+5/fCiVcRov
DCMzxFj0KbVCV71Et2HPFiOrWlo2mgAl7DUr60kGd9sOWcmHEKHR87zlR4qrksEG
tnO+UNKfLFa1Y/+ewlfaqHJT45GgR3Ha90ZE+BCxlsCqFBIBvvutXha9/N9N8Gu8
Ym1puUvRK34HeQvvJ4/yQYTQMZ0ezTsuBIOns8q7HX6uAJcr+Q+pUKGfWBvFdijO
demM9Cni+lY4F4M55/sQL8P/CiM77fbaeUps/oLDJS7Wlb+6JkJ4oiqsXDKdszsC
jjnXsg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:19:11 2025 by rpki-client