Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa
File: 0259CB6ABE7911E990831772C4F9AE02.roa (raw, json)
Hash identifier: wKOBp6pfgzScIqq1Y5Aq/wLs5uR6pO+UMIgkXEbqkKM=
Subject key identifier: 31:09:4F:3F:CE:DB:FE:8B:06:5E:FF:87:B0:98:1F:C9:98:B9:AF:43
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 34D5
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa
Signing time: Fri 24 Jan 2025 16:02:44 +0000
ROA not before: Fri 24 Jan 2025 16:02:44 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 55674
IP address blocks: 101.203.168.0/22 maxlen: 24
2405:b40::/32 maxlen: 32
2405:b40::/48 maxlen: 48
2405:b40:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13525 (0x34d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 24 16:02:44 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6793b9a3-b51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:6d:4c:84:87:27:f3:8d:20:f4:96:6b:74:
2c:1b:5c:0e:80:68:f8:d1:02:03:a7:b1:10:b2:b3:
a5:36:0a:a9:cd:9b:32:4d:09:82:38:aa:67:c6:8e:
0d:6b:ed:8b:f7:a9:28:78:2f:fb:5c:c0:5a:2a:cf:
22:94:f0:37:83:82:db:cd:41:69:4b:e6:22:29:ea:
ac:c5:36:37:97:0b:b6:06:79:c2:d4:8e:c1:d5:48:
ab:c6:7a:b4:01:fa:3d:90:8c:b2:51:be:34:36:4d:
f2:99:e0:bd:93:59:e7:9c:4a:d6:54:ac:f7:ad:79:
12:b3:46:34:95:73:18:a3:43:96:ac:6c:62:63:c6:
31:79:d4:76:96:f8:08:89:66:2a:34:01:9e:56:d1:
0c:65:f6:de:51:6a:26:aa:55:9b:23:08:3f:2f:35:
91:c4:80:27:25:ff:fb:af:7d:e4:8b:73:3e:8a:5c:
68:c3:92:bf:8c:19:08:63:11:7e:2b:38:6f:2a:6e:
4d:2c:f6:4c:ca:0f:be:6b:23:31:b0:5d:dc:8a:f2:
2e:fa:da:b4:90:d2:5c:f0:6d:24:71:6a:53:85:02:
b1:cb:e3:fb:b6:d6:2f:83:c2:ab:29:6f:95:51:21:
b6:6a:8b:de:5e:62:67:d0:e2:f4:1a:f1:19:11:b6:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:09:4F:3F:CE:DB:FE:8B:06:5E:FF:87:B0:98:1F:C9:98:B9:AF:43
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.203.168.0/22
IPv6:
2405:b40::/32
Signature Algorithm: sha256WithRSAEncryption
1b:ee:70:77:c1:e7:cf:80:13:da:ce:dc:67:36:fc:ce:1e:fc:
d8:58:b2:08:10:e1:8f:9f:ad:1d:3f:f7:2c:2e:c1:d6:53:b7:
44:65:77:9b:a4:87:97:89:8e:0a:82:a5:cc:c5:96:e4:3e:8e:
6f:7b:e9:23:d7:96:5f:8d:f4:c9:db:38:f9:77:0e:5f:17:a4:
c4:0c:30:62:8b:f6:b7:d6:bf:af:8a:a4:52:ee:7c:3c:63:00:
9a:64:44:48:0f:bc:8d:98:20:d3:20:d7:33:3e:74:c3:84:fb:
45:fa:4a:0d:61:9d:bf:b2:f7:59:4d:e6:89:58:53:2b:6c:77:
15:1a:5d:73:f9:0b:58:ad:5d:ac:51:dc:42:59:82:f0:0a:74:
0c:92:56:a9:60:dd:36:0f:f7:9e:c8:d6:ff:b4:58:b6:09:40:
79:22:16:8f:90:12:3b:a5:96:7f:ea:bb:18:a1:f8:11:80:d1:
1b:95:42:c0:a1:43:04:6e:c6:39:f3:92:4d:9d:51:43:3f:19:
27:ae:0c:79:63:d3:26:9a:fa:16:64:21:dd:c9:af:2b:c5:5d:
6c:3e:9f:22:19:f5:63:bf:19:86:67:5a:38:24:1e:02:26:ab:
7f:75:10:7e:a5:46:e9:0a:3d:03:12:ea:84:9e:7e:79:01:56:
86:37:15:b5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjUwMTI0MTYwMjQ0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzkzYjlhMy1iNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqvJtTISHJ/ONIPSWa3QsG1wOgGj40QIDp7EQsrOlNgqpzZsyTQmCOKpnxo4N
a+2L96koeC/7XMBaKs8ilPA3g4LbzUFpS+YiKeqsxTY3lwu2BnnC1I7B1Uirxnq0
Afo9kIyyUb40Nk3ymeC9k1nnnErWVKz3rXkSs0Y0lXMYo0OWrGxiY8YxedR2lvgI
iWYqNAGeVtEMZfbeUWomqlWbIwg/LzWRxIAnJf/7r33ki3M+ilxow5K/jBkIYxF+
KzhvKm5NLPZMyg++ayMxsF3civIu+tq0kNJc8G0kcWpThQKxy+P7ttYvg8KrKW+V
USG2aoveXmJn0OL0GvEZEbYKhwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDEJTz/O
2/6LBl7/h7CYH8mYua9DMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMDI1OUNCNkFC
RTc5MTFFOTkwODMxNzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJly6gwDQQCAAIwBwMFACQFC0AwDQYJKoZIhvcNAQELBQAD
ggEBABvucHfB58+AE9rO3Gc2/M4e/NhYsggQ4Y+frR0/9ywuwdZTt0Rld5ukh5eJ
jgqCpczFluQ+jm976SPXll+N9MnbOPl3Dl8XpMQMMGKL9rfWv6+KpFLufDxjAJpk
REgPvI2YINMg1zM+dMOE+0X6Sg1hnb+y91lN5olYUytsdxUaXXP5C1itXaxR3EJZ
gvAKdAySVqlg3TYP957I1v+0WLYJQHkiFo+QEjulln/quxih+BGA0RuVQsChQwRu
xjnzkk2dUUM/GSeuDHlj0yaa+hZkId3JryvFXWw+nyIZ9WO/GYZnWjgkHgImq391
EH6lRukKPQMS6oSefnkBVoY3FbU=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:09:34 2025 by rpki-client