Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/884A59828D3211EF9E092384C4F9AE02.roa
File: 884A59828D3211EF9E092384C4F9AE02.roa (raw, json)
Hash identifier: GqBUNYobHpDctK2tEnk2wHBO+0ezgYbmfu4uXv2cQjU=
Subject key identifier: 2F:1C:C5:D0:E3:BE:75:A2:AA:05:4B:A1:6C:68:CE:43:32:1C:0F:CE
Certificate issuer: /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial: 5C
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/884A59828D3211EF9E092384C4F9AE02.roa
Signing time: Fri 18 Oct 2024 09:22:45 +0000
ROA not before: Fri 18 Oct 2024 09:22:45 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 55405
IP address blocks: 103.13.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Validity
Not Before: Oct 18 09:22:45 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=671228e4-8f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:01:5e:b4:48:ce:98:be:cf:10:d4:65:ce:31:
a5:df:6e:32:28:cd:f1:e0:10:d8:29:ef:b4:d0:57:
30:09:b8:32:74:6d:cc:f9:ed:f1:e3:28:9a:0d:ac:
2e:ca:57:57:7b:f1:7a:6d:8f:d4:cc:65:60:eb:91:
d1:2c:2c:55:ba:5e:55:5f:b0:1e:0a:fc:7c:a7:ab:
4c:d6:47:ac:6f:66:66:77:b9:79:54:5a:75:35:ea:
70:90:78:a6:bc:aa:75:af:41:3c:44:23:73:1e:a5:
8d:9a:df:6f:74:12:b9:23:02:84:84:77:73:59:73:
78:81:02:22:e4:76:8e:10:ca:da:27:7d:0f:a9:b4:
60:e3:74:91:9a:44:46:52:2b:71:b9:3c:90:22:01:
31:46:b2:94:2c:b9:89:1a:40:d6:03:ec:38:8d:00:
bc:30:9a:56:01:0d:bc:17:55:2f:b8:13:d0:39:f1:
dc:a0:09:28:70:ab:a9:d7:a9:f2:29:cc:23:ba:b8:
cb:4b:1f:1c:6e:91:c6:03:b9:a1:47:80:6c:7a:50:
36:35:7a:71:27:13:fd:cc:55:2c:be:f4:9f:27:8e:
80:76:d0:f8:7b:90:68:bc:e1:a4:4e:95:ed:79:b8:
0b:f7:9c:18:58:ae:91:c2:67:7d:dd:84:3b:b3:d0:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1C:C5:D0:E3:BE:75:A2:AA:05:4B:A1:6C:68:CE:43:32:1C:0F:CE
X509v3 Authority Key Identifier:
keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/884A59828D3211EF9E092384C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.122.0/23
Signature Algorithm: sha256WithRSAEncryption
39:a4:d3:20:7a:88:c4:fc:56:d7:69:6c:c2:f4:52:75:36:cf:
2f:16:16:f6:4e:ec:4e:8a:65:69:3d:b4:70:f6:11:2e:0d:b3:
53:0b:ee:ee:6a:ad:c5:91:e2:46:1b:2f:50:81:8c:e1:ed:1e:
ab:04:eb:c2:b9:6b:4e:e6:59:93:7c:d4:6d:24:fa:34:22:8c:
68:5c:8e:93:1f:74:6a:55:b7:63:0c:d0:3b:af:a1:bf:d5:7f:
3c:ba:4e:ad:9d:49:02:bc:41:ff:d1:24:a1:96:87:8c:f0:2c:
bb:f6:e0:4a:14:6c:48:98:59:73:e0:79:6d:2e:27:c3:af:ea:
0c:d7:c2:bb:59:98:bf:6d:e0:6f:64:2e:78:a1:75:3c:25:3d:
c3:33:ab:f7:3d:9d:50:5a:7f:2a:8f:9a:a0:44:17:76:0d:66:
ff:22:a8:3d:46:40:0a:de:6a:2c:69:e2:bf:91:11:ad:1b:58:
9b:e6:90:3d:4e:4d:49:6a:38:64:e9:0f:c5:e6:28:ae:4b:d4:
1b:66:03:d7:08:bc:91:d8:fd:ea:31:ef:3d:90:92:89:7b:b3:
d7:6c:f4:b5:90:6c:7f:ce:3f:2f:ec:82:93:9b:fb:c5:b6:59:
f1:15:bd:b9:b0:5e:ad:71:01:43:f3:48:51:56:2b:35:b5:a7:
16:75:a2:bb
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NkZEOTExMC8GA1UEBRMoNjIyM0FCRDZGNkI2N0JBRkVGRTNFNzM2NDZGRDdBNjZF
MTAyMTRCRTAeFw0yNDEwMTgwOTIyNDVaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MTIyOGU0LThmODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfAV60SM6Yvs8Q1GXOMaXfbjIozfHgENgp77TQVzAJuDJ0bcz57fHjKJoNrC7K
V1d78Xptj9TMZWDrkdEsLFW6XlVfsB4K/Hynq0zWR6xvZmZ3uXlUWnU16nCQeKa8
qnWvQTxEI3MepY2a3290ErkjAoSEd3NZc3iBAiLkdo4QytonfQ+ptGDjdJGaREZS
K3G5PJAiATFGspQsuYkaQNYD7DiNALwwmlYBDbwXVS+4E9A58dygCShwq6nXqfIp
zCO6uMtLHxxukcYDuaFHgGx6UDY1enEnE/3MVSy+9J8njoB20Ph7kGi84aROle15
uAv3nBhYrpHCZ33dhDuz0FDdAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULxzF0OO+
daKqBUuhbGjOQzIcD84wHwYDVR0jBBgwFoAUYiOr1va2e6/v4+c2Rv16ZuECFL4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RkQ5Lzk4RDY2NkNDMEZB
MzExRUZCNDNDOTQzMkM0RjlBRTAyL1lpT3IxdmEyZTZfdjQtYzJSdjE2WnVFQ0ZM
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWWlPcjF2YTJlNl92NC1jMlJ2MTZadUVDRkw0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkZEOS85OEQ2NjZDQzBGQTMxMUVGQjQzQzk0MzJDNEY5QUUwMi84ODRBNTk4MjhE
MzIxMUVGOUUwOTIzODRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcNejANBgkqhkiG9w0BAQsFAAOCAQEAOaTTIHqIxPxW12ls
wvRSdTbPLxYW9k7sToplaT20cPYRLg2zUwvu7mqtxZHiRhsvUIGM4e0eqwTrwrlr
TuZZk3zUbST6NCKMaFyOkx90alW3YwzQO6+hv9V/PLpOrZ1JArxB/9EkoZaHjPAs
u/bgShRsSJhZc+B5bS4nw6/qDNfCu1mYv23gb2QueKF1PCU9wzOr9z2dUFp/Ko+a
oEQXdg1m/yKoPUZACt5qLGniv5ERrRtYm+aQPU5NSWo4ZOkPxeYorkvUG2YD1wi8
kdj96jHvPZCSiXuz12z0tZBsf84/L+yCk5v7xbZZ8RW9ubBerXEBQ/NIUVYrNbWn
FnWiuw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:03:06 2025 by rpki-client