Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/3FEB4A2EBD8C11EDA150C338C4F9AE02.roa
File: 3FEB4A2EBD8C11EDA150C338C4F9AE02.roa (raw, json)
Hash identifier: nXIaKuUBJG5iCj/tPzK1KC24tDJ2glAmEW+mAsZE8j4=
Subject key identifier: 8F:09:28:ED:8D:44:29:FF:2B:BA:5C:2F:0B:1B:D4:CB:3D:5D:27:48
Certificate issuer: /CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
Certificate serial: CD
Authority key identifier: AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/3FEB4A2EBD8C11EDA150C338C4F9AE02.roa
Signing time: Fri 29 Mar 2024 05:58:16 +0000
ROA not before: Fri 29 Mar 2024 05:58:16 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 18001
IP address blocks: 103.96.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
Validity
Not Before: Mar 29 05:58:16 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66065878-fdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:17:dd:46:fb:8a:c3:f4:42:63:43:08:a0:
df:b5:da:44:d8:04:2a:4b:df:de:00:25:a6:69:eb:
5e:0e:39:77:d6:8e:07:21:eb:f3:61:ee:03:fe:1f:
5d:0d:8d:28:df:b5:c3:bc:ac:0f:bb:a3:b9:e9:da:
ac:2e:59:cf:1d:8a:e5:fd:35:af:8e:2b:03:76:7a:
a8:b2:50:de:e5:0d:8d:c3:bd:ec:93:5f:58:5b:c8:
53:10:b0:90:54:3e:9d:fd:0d:65:f6:0f:c8:66:cd:
3f:89:06:75:7e:d4:13:49:c1:cf:ee:02:e7:17:f3:
fd:ca:92:a1:a8:67:da:e1:f7:29:f7:f4:9b:be:fa:
a5:d1:13:28:6f:d2:30:c2:69:38:ef:0f:4f:60:eb:
53:3f:51:d9:39:f6:24:a7:b5:64:dc:23:49:b9:ba:
d9:2e:f6:f2:da:9d:46:cb:53:27:8b:0e:e6:67:64:
06:c9:69:87:14:9b:3c:60:ed:59:bd:6a:01:2c:76:
f6:fe:9d:e5:a4:80:3c:aa:15:1d:7f:ff:5a:42:83:
f9:88:19:d9:45:af:8d:66:77:8a:4e:47:71:f2:77:
3d:8a:7c:ef:be:6b:4c:05:98:b3:fc:0a:d7:64:ae:
9d:5b:29:4c:38:37:b6:e1:e7:d9:88:44:bd:a9:d9:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:09:28:ED:8D:44:29:FF:2B:BA:5C:2F:0B:1B:D4:CB:3D:5D:27:48
X509v3 Authority Key Identifier:
keyid:AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/3FEB4A2EBD8C11EDA150C338C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.226.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:47:6e:b5:71:b2:ea:3c:9c:0e:ee:f2:89:44:fa:2d:da:b3:
0e:fd:43:15:62:90:af:ca:3a:3a:3a:ed:5b:b6:11:f2:fa:21:
9e:b8:2f:68:4b:1c:d2:e0:d6:a0:bf:ab:ee:ec:7c:e9:67:74:
1e:cc:cf:b3:cc:cc:15:70:46:e9:ed:d6:aa:97:8a:19:66:ac:
3f:91:ea:3a:80:55:09:88:41:dc:94:89:52:8e:3b:46:02:73:
7e:d2:d1:a0:04:5a:88:8b:f9:db:cb:fc:10:df:97:29:81:94:
5e:68:ab:97:23:fa:44:fe:e1:be:6d:1e:60:3c:88:66:f8:78:
8e:cb:a4:0e:df:f5:c7:a4:64:4f:93:38:28:ed:69:27:01:26:
35:41:cc:80:33:5a:9e:3b:2d:80:66:04:78:e4:f0:32:bc:bf:
91:16:aa:2a:22:df:c7:ac:9b:f8:64:9a:c7:f1:a7:7b:59:69:
e9:0c:84:6c:d2:e6:16:8b:b2:fb:77:fb:8c:39:78:1e:2f:c8:
31:b2:8a:09:81:f9:5a:5f:ed:70:f9:4e:72:ea:23:7a:03:e7:
03:e0:c7:d3:fb:02:94:e9:f8:9d:eb:93:1d:80:84:37:59:21:
63:7c:4d:0c:55:93:3b:cd:8f:be:4b:aa:db:0b:d7:f8:49:db:
75:f4:4a:3a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc0MjcxMTAvBgNVBAUTKEFEOTUxNURGOTVCRkQ0RjhFREZGNUQ4Q0JEMkFCNEI5
QkQ4NEY4QTQwHhcNMjQwMzI5MDU1ODE2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjA2NTg3OC1mZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0t4X3Ub7isP0QmNDCKDftdpE2AQqS9/eACWmaeteDjl31o4HIevzYe4D/h9d
DY0o37XDvKwPu6O56dqsLlnPHYrl/TWvjisDdnqoslDe5Q2Nw73sk19YW8hTELCQ
VD6d/Q1l9g/IZs0/iQZ1ftQTScHP7gLnF/P9ypKhqGfa4fcp9/Sbvvql0RMob9Iw
wmk47w9PYOtTP1HZOfYkp7Vk3CNJubrZLvby2p1Gy1Mniw7mZ2QGyWmHFJs8YO1Z
vWoBLHb2/p3lpIA8qhUdf/9aQoP5iBnZRa+NZneKTkdx8nc9inzvvmtMBZiz/ArX
ZK6dWylMODe24efZiES9qdk3NQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI8JKO2N
RCn/K7pcLwsb1Ms9XSdIMB8GA1UdIwQYMBaAFK2VFd+Vv9T47f9djL0qtLm9hPik
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzQyNy82QUI5MUZGNkJE
ODcxMUVEQjVFNDA4NDdDNEY5QUUwMi9yWlVWMzVXXzFQanRfMTJNdlNxMHViMkUt
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JaVVYzNVdfMVBqdF8xMk12U3EwdWIyRS1LUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njc0MjcvNkFCOTFGRjZCRDg3MTFFREI1RTQwODQ3QzRGOUFFMDIvM0ZFQjRBMkVC
RDhDMTFFREExNTBDMzM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnYOIwDQYJKoZIhvcNAQELBQADggEBAA5HbrVxsuo8nA7u
8olE+i3asw79QxVikK/KOjo67Vu2EfL6IZ64L2hLHNLg1qC/q+7sfOlndB7Mz7PM
zBVwRunt1qqXihlmrD+R6jqAVQmIQdyUiVKOO0YCc37S0aAEWoiL+dvL/BDflymB
lF5oq5cj+kT+4b5tHmA8iGb4eI7LpA7f9cekZE+TOCjtaScBJjVBzIAzWp47LYBm
BHjk8DK8v5EWqioi38esm/hkmsfxp3tZaekMhGzS5haLsvt3+4w5eB4vyDGyigmB
+Vpf7XD5TnLqI3oD5wPgx9P7ApTp+J3rkx2AhDdZIWN8TQxVkzvNj75LqtsL1/hJ
23X0Sjo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:53:13 2025 by rpki-client