Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/7464EB1E876411EE8971C221C4F9AE02.roa
File: 7464EB1E876411EE8971C221C4F9AE02.roa (raw, json)
Hash identifier: ojB4V4VtVHXuFHAezvaTkfH4Bh/CstC86ZtstiMw1LA=
Subject key identifier: 98:9C:45:04:27:29:99:E6:D7:AF:D3:B4:9B:CF:32:13:61:D5:30:0D
Certificate issuer: /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Certificate serial: 05D8
Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/7464EB1E876411EE8971C221C4F9AE02.roa
Signing time: Sat 31 Aug 2024 00:32:21 +0000
ROA not before: Sat 31 Aug 2024 00:32:21 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 58580
IP address blocks: 103.62.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Validity
Not Before: Aug 31 00:32:21 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d26495-e577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:10:81:ef:8f:08:7e:24:d3:f7:f9:0d:88:
0a:b0:fb:c7:89:4b:18:8c:81:e0:39:09:47:4d:ca:
25:f8:d4:fc:93:9d:6b:d8:8b:81:1b:b3:3f:40:d2:
13:27:a2:01:ec:db:24:72:44:eb:fe:cb:80:d5:9f:
ec:0e:2d:d0:f4:70:92:9a:09:7f:4e:b2:98:2b:12:
90:1a:3f:10:dd:b6:2e:6c:76:bb:ad:b9:d3:4a:f3:
2d:74:36:0d:02:9b:5d:49:cf:19:2a:99:54:f7:c9:
4e:6f:96:23:a3:4d:7e:18:79:46:fa:a7:31:cf:76:
1a:d8:88:e4:94:d0:2f:6a:24:d5:d6:86:ad:e3:54:
cf:f3:a3:dd:ff:9c:c1:b4:b0:57:c0:48:4e:a0:70:
d0:86:e1:b5:f0:b4:3e:94:28:c4:99:db:6e:2e:42:
f9:c3:b5:59:a9:cd:bd:c5:bb:c0:b0:d4:41:7a:05:
dc:3f:22:e3:81:af:b1:b5:50:bc:98:c5:06:f7:e5:
5e:01:6f:c6:50:52:98:c9:6f:ef:4b:a4:87:1a:ad:
7d:cf:7c:20:8d:8b:e4:41:51:9a:46:5b:b1:4b:94:
1f:01:79:31:5e:27:13:94:de:27:32:56:75:cc:19:
c8:58:cf:0d:52:9e:29:e7:8c:6b:9b:cd:d0:01:4a:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9C:45:04:27:29:99:E6:D7:AF:D3:B4:9B:CF:32:13:61:D5:30:0D
X509v3 Authority Key Identifier:
keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/7464EB1E876411EE8971C221C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:b4:1a:4c:54:e5:3c:ab:e5:90:5c:6d:ad:61:77:c2:3c:fd:
4c:a1:6d:ce:37:3e:bb:f6:30:b3:55:ef:a5:a8:24:3f:e1:b3:
86:24:e0:05:68:68:9c:37:8f:3c:e8:a9:e7:47:7f:10:ef:7e:
0c:ce:26:3b:8c:e6:d0:15:a9:d2:0e:7c:98:87:e0:72:94:94:
70:4a:0f:a0:22:0f:df:20:1a:2e:7f:2f:a3:14:68:35:58:b3:
02:2b:23:84:1a:28:43:68:be:62:f4:26:56:fb:af:de:c6:f3:
9f:bb:32:be:70:dd:66:f7:04:d6:3c:23:ee:3d:4b:07:b3:c4:
4d:10:71:bb:4d:8a:15:4f:7d:de:26:b4:56:29:7f:e3:a4:dd:
db:df:47:3d:3b:08:51:a8:5f:f9:3d:9c:a7:84:f1:0f:8f:3e:
44:d2:56:e1:6d:33:a6:c9:d9:0d:c2:aa:ab:a7:1c:67:e2:20:
3b:04:47:c3:9c:b4:06:ac:ba:93:9d:ed:94:d5:51:0e:f2:dd:
00:2a:bf:ec:9a:8e:8a:f8:aa:41:ad:5f:51:6f:1f:9c:04:3b:
d9:83:54:de:d0:2f:70:fb:d7:77:b8:b9:2b:c6:1e:bd:3f:6e:
31:c9:51:84:b8:70:ad:8f:a0:d8:a4:4f:aa:ff:01:89:f9:33:
0d:f0:4d:34
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA2OEUxMTAvBgNVBAUTKEI4RjhDMzYyNkREMDYxNjJFNjdFMjVGNTlBOUE4MUZB
RTQ3MjBBMjUwHhcNMjQwODMxMDAzMjIxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQyNjQ5NS1lNTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1kQge+PCH4k0/f5DYgKsPvHiUsYjIHgOQlHTcol+NT8k51r2IuBG7M/QNIT
J6IB7NskckTr/suA1Z/sDi3Q9HCSmgl/TrKYKxKQGj8Q3bYubHa7rbnTSvMtdDYN
AptdSc8ZKplU98lOb5Yjo01+GHlG+qcxz3Ya2IjklNAvaiTV1oat41TP86Pd/5zB
tLBXwEhOoHDQhuG18LQ+lCjEmdtuLkL5w7VZqc29xbvAsNRBegXcPyLjga+xtVC8
mMUG9+VeAW/GUFKYyW/vS6SHGq19z3wgjYvkQVGaRluxS5QfAXkxXicTlN4nMlZ1
zBnIWM8NUp4p54xrm83QAUqODQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJicRQQn
KZnm16/TtJvPMhNh1TANMB8GA1UdIwQYMBaAFLj4w2Jt0GFi5n4l9Zqagfrkcgol
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDY4RS9ENkVGNjcxQTg0
QTUxMUVCQUU5RTQ0NzJDNEY5QUUwMi91UGpEWW0zUVlXTG1maVgxbXBxQi11UnlD
aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VQakRZbTNRWVdMbWZpWDFtcHFCLXVSeUNpVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzA2OEUvRDZFRjY3MUE4NEE1MTFFQkFFOUU0NDcyQzRGOUFFMDIvNzQ2NEVCMUU4
NzY0MTFFRTg5NzFDMjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnPiQwDQYJKoZIhvcNAQELBQADggEBAKa0GkxU5Tyr5ZBc
ba1hd8I8/Uyhbc43Prv2MLNV76WoJD/hs4Yk4AVoaJw3jzzoqedHfxDvfgzOJjuM
5tAVqdIOfJiH4HKUlHBKD6AiD98gGi5/L6MUaDVYswIrI4QaKENovmL0Jlb7r97G
85+7Mr5w3Wb3BNY8I+49SwezxE0QcbtNihVPfd4mtFYpf+Ok3dvfRz07CFGoX/k9
nKeE8Q+PPkTSVuFtM6bJ2Q3CqqunHGfiIDsER8OctAasupOd7ZTVUQ7y3QAqv+ya
jor4qkGtX1FvH5wEO9mDVN7QL3D713e4uSvGHr0/bjHJUYS4cK2PoNikT6r/AYn5
Mw3wTTQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:39 2025 by rpki-client