Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa
File: D08310DE94C511EDB2732947C4F9AE02.roa (raw, json)
Hash identifier: Xy93j2wiTLRQmJ+0n87qnILIP2Iwo0hp0rGxKJhzYuY=
Subject key identifier: 43:38:42:C5:32:71:20:CC:FD:89:BE:D3:35:5C:CC:1C:90:BE:C2:FB
Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial: 0178
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa
Signing time: Thu 19 Dec 2024 02:26:33 +0000
ROA not before: Thu 19 Dec 2024 02:26:33 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150662
IP address blocks: 103.49.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Validity
Not Before: Dec 19 02:26:33 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67638458-7eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:62:61:33:8f:89:17:3e:42:80:18:62:40:5d:
ee:b7:4f:95:69:ee:f6:5a:12:4f:01:4d:98:01:18:
5b:59:3d:b2:fb:27:02:f9:41:a1:f2:cb:dc:20:83:
c1:7a:1d:71:32:04:1c:4d:ef:0d:cd:9a:4e:06:08:
3b:82:ac:32:cb:00:b5:b9:0f:9f:10:f5:46:2d:a5:
da:74:f0:e2:7a:c9:8f:f8:2c:07:c5:11:5f:16:06:
2f:ed:86:90:eb:20:28:f9:fb:79:89:e0:d2:06:31:
25:b8:20:ae:f3:8a:c3:ef:a8:f7:14:ae:46:8e:25:
f5:e2:be:bc:a9:51:b4:81:e3:df:5d:96:03:63:1a:
9f:74:7b:87:0c:ed:9a:32:9d:18:71:33:bd:41:67:
6c:20:c1:d1:80:0f:ce:10:1c:ee:c6:8c:55:28:65:
ec:50:e7:27:e4:15:20:c5:52:5f:38:6e:71:83:10:
f7:24:ed:c0:e5:e5:b6:ff:01:92:75:1d:4b:ce:4d:
da:fa:4b:f4:c7:8b:c7:5e:1c:25:5e:b7:34:3e:38:
61:10:c2:04:77:64:ec:1d:1d:da:ea:a8:57:db:fb:
8e:a3:cd:c4:8e:c6:b3:0c:ea:c5:4d:b0:c5:bb:45:
1f:1f:9e:4d:6a:bc:91:1f:44:d3:3a:a7:51:5c:37:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:38:42:C5:32:71:20:CC:FD:89:BE:D3:35:5C:CC:1C:90:BE:C2:FB
X509v3 Authority Key Identifier:
keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.100.0/23
Signature Algorithm: sha256WithRSAEncryption
28:4f:42:29:86:a9:0d:f8:b1:5a:e4:91:de:35:82:7f:b6:08:
8a:17:7e:3d:4e:b1:0b:65:1d:49:96:6e:b6:ba:dd:4c:f2:51:
ed:62:00:47:67:98:36:4e:64:f3:03:88:7d:93:df:a4:d8:c3:
48:90:52:a1:98:15:9a:a3:17:00:48:98:73:ef:1a:56:d2:bf:
4a:b0:ab:b5:02:79:66:19:37:6e:47:cf:e8:18:29:54:c9:29:
ee:99:63:f2:9c:96:b7:6d:17:34:0c:b6:c1:f1:c6:75:2c:1a:
e0:dc:53:e1:8c:6e:90:a3:f1:7e:8a:e0:06:b3:e3:20:84:b2:
28:60:9f:29:76:43:3b:d5:c8:01:41:1e:b3:be:2d:34:5f:07:
8c:42:fd:ff:bc:12:80:f1:8b:70:f9:f0:e6:2d:d1:a7:69:82:
a2:92:12:ad:da:18:c4:fe:65:28:0c:e8:08:a4:40:fe:1c:a4:
45:78:eb:97:0c:2b:2f:14:aa:7d:cf:10:a9:1f:d3:3a:36:8a:
9f:36:34:b4:4b:7f:a6:ff:90:ce:b5:ac:15:97:98:6b:2e:e3:
c3:b5:b6:a3:14:58:66:51:36:04:c6:e7:2f:10:98:19:80:bc:
17:12:e6:fb:d8:ef:60:2e:ae:81:74:7e:a8:d4:a7:9b:14:5a:
75:2e:b4:f6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVENTIxMTAvBgNVBAUTKDJFNzFCOEJBNjMwNUZGRDQ4QzEzMUQwODYwQUYyQzFB
Q0Y2RDIyQjYwHhcNMjQxMjE5MDIyNjMzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzYzODQ1OC03ZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7WJhM4+JFz5CgBhiQF3ut0+Vae72WhJPAU2YARhbWT2y+ycC+UGh8svcIIPB
eh1xMgQcTe8NzZpOBgg7gqwyywC1uQ+fEPVGLaXadPDiesmP+CwHxRFfFgYv7YaQ
6yAo+ft5ieDSBjEluCCu84rD76j3FK5GjiX14r68qVG0gePfXZYDYxqfdHuHDO2a
Mp0YcTO9QWdsIMHRgA/OEBzuxoxVKGXsUOcn5BUgxVJfOG5xgxD3JO3A5eW2/wGS
dR1Lzk3a+kv0x4vHXhwlXrc0PjhhEMIEd2TsHR3a6qhX2/uOo83EjsazDOrFTbDF
u0UfH55NaryRH0TTOqdRXDdkbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEM4QsUy
cSDM/Ym+0zVczByQvsL7MB8GA1UdIwQYMBaAFC5xuLpjBf/UjBMdCGCvLBrPbSK2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUQ1Mi82MTJCNjdBQzg0
RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85U01FeDBJWUs4c0dzOXRJ
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xuRzR1bU1GXzlTTUV4MElZSzhzR3M5dElyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjVENTIvNjEyQjY3QUM4NEZBMTFFRDgwQUM0RTEwQzRGOUFFMDIvRDA4MzEwREU5
NEM1MTFFREIyNzMyOTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnMWQwDQYJKoZIhvcNAQELBQADggEBAChPQimGqQ34sVrk
kd41gn+2CIoXfj1OsQtlHUmWbra63UzyUe1iAEdnmDZOZPMDiH2T36TYw0iQUqGY
FZqjFwBImHPvGlbSv0qwq7UCeWYZN25Hz+gYKVTJKe6ZY/KclrdtFzQMtsHxxnUs
GuDcU+GMbpCj8X6K4Aaz4yCEsihgnyl2QzvVyAFBHrO+LTRfB4xC/f+8EoDxi3D5
8OYt0adpgqKSEq3aGMT+ZSgM6AikQP4cpEV465cMKy8Uqn3PEKkf0zo2ip82NLRL
f6b/kM61rBWXmGsu48O1tqMUWGZRNgTG5y8QmBmAvBcS5vvY72AuroF0fqjUp5sU
WnUutPY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:59:08 2025 by rpki-client