Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa
File: 681E9EECCAC111ECA0AC3E32C4F9AE02.roa (raw, json)
Hash identifier: A/XsmWmS2Fzl2w/pads2BI35cg5AkCMUce4iVb/sJsY=
Subject key identifier: 0F:54:B2:21:B2:55:B9:FF:CA:58:BC:C6:A0:0D:A7:C5:D2:86:FF:21
Certificate issuer: /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Certificate serial: 0267
Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa
Signing time: Sun 05 May 2024 04:06:45 +0000
ROA not before: Sun 05 May 2024 04:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134242
IP address blocks: 103.111.16.0/22 maxlen: 22
103.111.16.0/24 maxlen: 24
103.111.17.0/24 maxlen: 24
103.111.18.0/24 maxlen: 24
103.111.19.0/24 maxlen: 24
2402:9340::/32 maxlen: 32
2402:9340:1000::/36 maxlen: 36
2402:9340:2000::/36 maxlen: 36
2402:9340:3000::/36 maxlen: 36
2402:9340:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Validity
Not Before: May 5 04:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663705d5-a889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:a8:d7:98:f5:dc:e7:07:c6:c4:bc:72:57:
a2:ec:a9:19:db:46:7e:ba:45:50:57:58:f4:5c:54:
5c:f4:09:b2:c3:2d:c0:91:eb:5c:6a:83:96:7f:b3:
39:a6:ad:fb:c2:3c:d4:65:28:ee:05:72:e2:68:ea:
f3:2d:a8:39:47:6e:c7:4f:c5:cd:46:93:7b:f2:88:
ee:dd:09:fc:1a:a3:25:e9:32:2e:cb:af:86:0c:5f:
37:d4:8c:1c:84:88:c1:6a:4f:b1:4b:44:7c:de:ed:
a6:93:ca:29:91:94:34:e5:aa:11:b1:7d:a7:37:58:
26:12:27:57:3e:8a:df:c6:ac:f8:d7:65:82:28:2e:
da:b5:3d:40:93:4d:47:58:8e:0a:d1:ff:67:49:18:
da:02:81:56:53:b7:07:23:71:76:21:f6:73:34:06:
91:d4:0c:8d:a0:3c:d4:1d:8a:23:26:a3:95:60:06:
f8:d2:5d:f3:ff:d6:89:5d:dd:2d:51:3b:26:80:9a:
12:52:b0:c9:4b:da:48:5e:3f:2b:b5:26:92:1a:ff:
b9:8d:f7:8b:90:9e:8b:9b:64:b2:0e:e3:5f:6a:e4:
49:b4:2c:93:6f:fc:0c:67:96:90:d0:22:d4:8d:fd:
6a:37:55:2b:da:c3:95:02:df:04:70:c0:39:97:f8:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:54:B2:21:B2:55:B9:FF:CA:58:BC:C6:A0:0D:A7:C5:D2:86:FF:21
X509v3 Authority Key Identifier:
keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.16.0/22
IPv6:
2402:9340::/32
Signature Algorithm: sha256WithRSAEncryption
09:d5:65:16:39:cc:f5:09:0c:39:2a:51:99:85:25:b4:c2:a5:
06:2c:f1:3b:6c:ed:92:90:0c:ff:58:91:81:92:21:b0:ab:b8:
e4:cf:d5:77:3f:a3:ab:28:8b:e0:99:6a:e2:03:9c:64:19:a9:
03:7e:25:4a:2c:8d:d1:8a:0d:04:1c:fd:bc:81:ff:e2:57:09:
a4:7e:53:74:63:58:37:b0:78:aa:39:91:62:59:52:24:35:3e:
68:d6:2b:39:da:17:3f:12:e6:5c:05:6b:83:f0:19:b5:9b:c6:
93:c3:98:9d:c7:de:3c:cd:f3:8e:63:7d:59:00:3e:f5:83:ce:
9b:a1:8e:1d:9c:02:1d:68:43:68:07:8f:ca:74:ac:98:a8:ad:
bc:8c:15:5d:fc:82:ef:82:68:7e:72:44:98:4e:31:bc:0d:5a:
38:00:fe:60:28:5e:cc:0e:92:2d:00:5b:4b:b8:23:9e:83:2c:
53:de:98:f0:28:93:ea:51:e1:b4:9f:28:7b:42:e1:a4:a2:33:
27:50:1e:8a:72:54:f7:7a:7e:b1:89:02:e5:8c:15:33:71:25:
38:2f:5c:fe:31:7b:35:a2:42:83:c0:5d:f5:66:6b:ed:24:1b:
5b:80:cf:1f:1f:d8:18:ee:ef:01:f4:64:27:d1:7e:5d:a4:42:
69:71:4c:56
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJCNkYxMTAvBgNVBAUTKDc5NkE0NENGMUI3MEY0QTlGOUU2QTVGRkIwMDlCQjc4
NjBGMzU1ODAwHhcNMjQwNTA1MDQwNjQ1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM3MDVkNS1hODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1qWo15j13OcHxsS8clei7KkZ20Z+ukVQV1j0XFRc9Amywy3AketcaoOWf7M5
pq37wjzUZSjuBXLiaOrzLag5R27HT8XNRpN78oju3Qn8GqMl6TIuy6+GDF831Iwc
hIjBak+xS0R83u2mk8opkZQ05aoRsX2nN1gmEidXPorfxqz412WCKC7atT1Ak01H
WI4K0f9nSRjaAoFWU7cHI3F2IfZzNAaR1AyNoDzUHYojJqOVYAb40l3z/9aJXd0t
UTsmgJoSUrDJS9pIXj8rtSaSGv+5jfeLkJ6Lm2SyDuNfauRJtCyTb/wMZ5aQ0CLU
jf1qN1Ur2sOVAt8EcMA5l/iObQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFA9UsiGy
Vbn/yli8xqANp8XShv8hMB8GA1UdIwQYMBaAFHlqRM8bcPSp+eal/7AJu3hg81WA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkI2Ri9GN0Y5NDc2RUM4
QjAxMUVDQTg4NDc5NDlDNEY5QUUwMi9lV3BFenh0dzlLbjU1cVhfc0FtN2VHRHpW
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VXcEV6eHR3OUtuNTVxWF9zQW03ZUdEelZZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODJCNkYvRjdGOTQ3NkVDOEIwMTFFQ0E4ODQ3OTQ5QzRGOUFFMDIvNjgxRTlFRUND
QUMxMTFFQ0EwQUMzRTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnbxAwDQQCAAIwBwMFACQCk0AwDQYJKoZIhvcNAQELBQAD
ggEBAAnVZRY5zPUJDDkqUZmFJbTCpQYs8Tts7ZKQDP9YkYGSIbCruOTP1Xc/o6so
i+CZauIDnGQZqQN+JUosjdGKDQQc/byB/+JXCaR+U3RjWDeweKo5kWJZUiQ1PmjW
KznaFz8S5lwFa4PwGbWbxpPDmJ3H3jzN845jfVkAPvWDzpuhjh2cAh1oQ2gHj8p0
rJiorbyMFV38gu+CaH5yRJhOMbwNWjgA/mAoXswOki0AW0u4I56DLFPemPAok+pR
4bSfKHtC4aSiMydQHopyVPd6frGJAuWMFTNxJTgvXP4xezWiQoPAXfVma+0kG1uA
zx8f2Bju7wH0ZCfRfl2kQmlxTFY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:13 2025 by rpki-client