Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa
File: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (raw, json)
Hash identifier: mu1mKwNxbL7+Qz6oyXzuFah+meolf6goLYumQsj+R3w=
Subject key identifier: 72:32:59:87:30:24:DB:2F:00:7D:41:FB:27:EA:12:68:96:C6:2F:E7
Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Certificate serial: 0429
Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa
Signing time: Wed 07 Aug 2024 01:22:43 +0000
ROA not before: Wed 07 Aug 2024 01:22:43 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 9744
IP address blocks: 103.70.76.0/23 maxlen: 24
103.71.252.0/23 maxlen: 24
103.194.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4
Validity
Not Before: Aug 7 01:22:43 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66b2cc63-182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:70:0d:b6:e8:ac:09:1c:29:a9:67:86:04:
f9:ab:94:ee:a2:d8:46:ab:cf:a8:b0:3c:9d:b7:78:
70:80:94:de:1f:8e:b5:f3:49:43:c2:be:44:c5:79:
63:b1:4d:f7:68:9b:be:bf:a9:69:26:11:f4:ec:3e:
f9:06:d9:29:be:d7:22:33:99:78:2d:a5:8b:66:54:
dc:f0:59:e3:32:0c:bb:8e:6d:fc:1b:4d:e0:73:d1:
b2:0c:d1:cc:31:cf:cf:80:61:16:c2:5d:dd:75:06:
ae:dc:77:99:20:3a:c0:c5:07:18:96:3e:e0:f7:8f:
f9:f4:54:7c:10:52:98:63:71:c6:69:89:61:80:0c:
c7:75:e8:ba:6b:d2:95:ce:b7:4c:32:2e:6a:5f:72:
6b:ce:22:ce:6b:db:3c:22:92:32:0d:8b:32:f0:eb:
09:3a:92:fe:3e:cb:4e:ef:0d:34:68:19:5c:e6:ec:
c4:c7:8d:5f:d1:99:77:46:a7:ef:86:47:b7:be:34:
b8:01:7f:cb:32:54:fa:d6:15:a6:f0:ed:f1:8f:de:
20:4c:fd:af:27:e2:69:2b:9b:27:b8:d6:6e:0d:69:
c1:7d:1b:5b:d7:0a:a7:27:f6:3b:35:b9:8f:25:c5:
fd:bd:7c:bf:09:db:eb:fe:74:8c:e9:22:71:b9:0b:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:32:59:87:30:24:DB:2F:00:7D:41:FB:27:EA:12:68:96:C6:2F:E7
X509v3 Authority Key Identifier:
keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/A6DC22C63C7D11ECB08DFD13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.70.76.0/23
103.71.252.0/23
103.194.184.0/22
Signature Algorithm: sha256WithRSAEncryption
89:0d:45:24:6e:82:6e:ab:19:54:cc:a9:6c:21:1a:62:d3:5b:
80:1c:90:0d:3b:07:4a:07:f8:23:b1:c4:49:02:c2:6a:76:45:
c0:17:84:bd:15:1e:5f:ab:ad:cc:65:78:53:ba:ab:c8:74:6e:
9d:ce:48:bc:95:fc:c8:50:36:e2:61:c9:a9:0d:fb:3a:1c:f1:
b9:a7:a5:ed:e0:46:a5:0f:bc:c4:bb:3b:8c:b0:f2:ab:42:1d:
d2:5a:19:99:f7:a8:e9:13:db:70:a7:18:66:dc:63:ae:21:78:
7b:43:f8:55:8d:49:2b:31:92:cc:a4:d0:74:b3:78:78:59:ca:
e7:56:64:42:4e:e7:71:ae:a7:06:ba:0a:bf:27:45:8b:db:6e:
58:cd:b4:5d:42:e2:a9:9b:83:c8:8f:cf:0e:78:5c:e1:36:37:
29:68:80:77:cd:16:34:0c:99:29:48:c8:11:76:dd:ce:18:c7:
29:06:78:2e:00:e5:2e:7f:79:35:8c:2e:6d:e8:77:5c:0e:73:
5a:e6:15:a4:3e:4c:15:43:2e:ef:e7:a3:f4:8b:76:35:07:0d:
c7:2a:be:55:b1:33:31:b4:d8:27:c3:92:23:53:50:f9:d0:4e:
2f:d8:73:fc:71:cf:09:24:b0:ca:31:7f:cb:a6:f0:74:e7:76:
19:47:72:2e
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwMTcxMTAvBgNVBAUTKDFBOUYyQkJFQTUyMkYxRUUyNTkyMzU5QjRCNTJGQTJC
NDFBM0NEQzQwHhcNMjQwODA3MDEyMjQzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmIyY2M2My0xODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYNwDbborAkcKalnhgT5q5TuothGq8+osDydt3hwgJTeH46180lDwr5ExXlj
sU33aJu+v6lpJhH07D75BtkpvtciM5l4LaWLZlTc8FnjMgy7jm38G03gc9GyDNHM
Mc/PgGEWwl3ddQau3HeZIDrAxQcYlj7g94/59FR8EFKYY3HGaYlhgAzHdei6a9KV
zrdMMi5qX3JrziLOa9s8IpIyDYsy8OsJOpL+PstO7w00aBlc5uzEx41f0Zl3Rqfv
hke3vjS4AX/LMlT61hWm8O3xj94gTP2vJ+JpK5snuNZuDWnBfRtb1wqnJ/Y7NbmP
JcX9vXy/Cdvr/nSM6SJxuQuRcwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHIyWYcw
JNsvAH1B+yfqEmiWxi/nMB8GA1UdIwQYMBaAFBqfK76lIvHuJZI1m0tS+itBo83E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDAxNy83RjEyMjgxQzJE
NjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThlNGxraldiUzFMNkswR2p6
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dwOHJ2cVVpOGU0bGtqV2JTMUw2SzBHanpjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQwMTcvN0YxMjI4MUMyRDY0MTFFQzg1RDY4QjgwQzRGOUFFMDIvQTZEQzIyQzYz
QzdEMTFFQ0IwOERGRDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAFnRkwDBAFnR/wDBAJnwrgwDQYJKoZIhvcNAQELBQADggEB
AIkNRSRugm6rGVTMqWwhGmLTW4AckA07B0oH+COxxEkCwmp2RcAXhL0VHl+rrcxl
eFO6q8h0bp3OSLyV/MhQNuJhyakN+zoc8bmnpe3gRqUPvMS7O4yw8qtCHdJaGZn3
qOkT23CnGGbcY64heHtD+FWNSSsxksyk0HSzeHhZyudWZEJO53Gupwa6Cr8nRYvb
bljNtF1C4qmbg8iPzw54XOE2NylogHfNFjQMmSlIyBF23c4YxykGeC4A5S5/eTWM
Lm3od1wOc1rmFaQ+TBVDLu/no/SLdjUHDccqvlWxMzG02CfDkiNTUPnQTi/Yc/xx
zwkksMoxf8um8HTndhlHci4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:21:49 2025 by rpki-client