Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/A84F7CEE432711EA87CB0E53C4F9AE02.roa
File: A84F7CEE432711EA87CB0E53C4F9AE02.roa (raw, json)
Hash identifier: MpvzI6CZw61K9EHN7FjBJQlJM7cvj1uvm28ieQf0lOE=
Subject key identifier: EF:D9:C8:61:00:ED:77:2F:2C:20:07:91:AB:28:A7:2B:46:8F:8B:5A
Certificate issuer: /CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Certificate serial: 0A14
Authority key identifier: A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/A84F7CEE432711EA87CB0E53C4F9AE02.roa
Signing time: Tue 06 Feb 2024 20:38:22 +0000
ROA not before: Tue 06 Feb 2024 20:38:22 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 135032
IP address blocks: 103.206.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580 (0xa14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Validity
Not Before: Feb 6 20:38:22 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65c298be-1deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:05:1f:dd:36:4a:7f:d8:72:bc:16:70:56:
c8:11:04:f1:7d:d1:16:f6:7a:69:1e:49:a5:56:d0:
cc:98:f7:e6:ec:93:3f:94:0f:2f:4c:28:d5:4d:bb:
e0:82:0b:e2:86:49:a8:37:e4:38:83:7a:b0:44:d0:
4a:b8:76:15:58:30:b3:95:1a:b7:98:b0:21:d6:d7:
3a:97:56:7a:ef:c1:0d:d6:28:77:1f:86:ea:73:b2:
50:52:33:cc:42:68:9d:84:02:05:80:36:b1:84:09:
81:45:cb:a9:84:88:ae:d0:20:41:11:2b:a9:57:13:
19:bc:df:a3:a9:02:4b:1c:8a:62:82:41:c4:eb:6e:
0f:dd:65:de:5b:c8:cf:95:2c:36:70:12:20:76:48:
2d:75:1e:20:48:da:30:b6:94:ea:93:79:7f:6b:f6:
63:00:66:b5:3c:c0:fc:02:e7:05:2f:c1:28:e9:b0:
f8:9b:b7:50:7d:a5:be:bc:de:e7:70:06:fc:c1:f1:
39:b0:a2:dc:d1:7b:f6:aa:a9:40:a1:9b:d6:ba:00:
7e:ec:97:3a:f3:dd:d8:61:16:1f:8f:5b:f2:ef:c1:
7e:dc:58:ec:ed:f9:bb:ec:4c:87:04:b9:9f:89:08:
69:77:b6:21:56:6f:ba:da:b8:2a:ad:c5:65:c0:6e:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:C8:61:00:ED:77:2F:2C:20:07:91:AB:28:A7:2B:46:8F:8B:5A
X509v3 Authority Key Identifier:
keyid:A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/A84F7CEE432711EA87CB0E53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.206.184.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:98:8e:20:ee:f9:52:b9:51:e1:5f:4c:5d:ea:dc:09:d3:0c:
a3:5f:14:03:75:bd:81:e9:9b:4c:c3:f3:e5:33:a6:58:24:76:
cb:46:d3:35:6e:68:33:88:5f:48:40:ac:e2:23:72:03:6e:21:
b8:49:b3:fe:7a:60:27:f7:22:17:44:b4:53:9d:cc:ab:75:95:
ad:8e:ec:c2:2b:71:7c:fb:10:b1:f8:72:4a:c4:b9:28:c9:a5:
ef:b0:45:2c:4d:9b:c2:e9:49:53:15:4e:5a:f2:84:5e:73:cb:
a7:4e:9f:5b:c3:54:11:3e:70:b4:24:15:e2:f8:03:cc:09:24:
87:b9:d6:ad:30:57:0f:9b:ab:dd:dd:fb:6c:c2:32:ab:d5:95:
ed:66:eb:4a:37:20:48:28:de:9e:9d:ac:11:f0:97:d2:31:78:
af:e8:eb:6a:4d:a4:5e:d7:25:c2:83:d0:20:bf:80:58:45:e7:
3c:26:a0:83:1f:5c:f5:27:f4:ac:27:ed:62:b2:6a:f8:45:58:
63:08:aa:b8:b5:a2:5d:c6:7c:8e:8a:4f:65:e7:c2:d7:ad:9c:
29:de:bb:5b:a7:63:6e:38:f6:e4:09:bf:c9:de:ca:0b:9f:fb:
ee:7e:b3:68:15:2a:40:be:e3:8c:af:8c:c9:eb:24:a7:e4:1a:
66:c9:ae:7d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICChQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhEOEYxMTAvBgNVBAUTKEE1MkY4Rjk4NTlDQUM0N0Q2ODU0MjcyMzREMjYxNkVC
OUU1Mzk2MzQwHhcNMjQwMjA2MjAzODIyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWMyOThiZS0xZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0jEFH902Sn/YcrwWcFbIEQTxfdEW9nppHkmlVtDMmPfm7JM/lA8vTCjVTbvg
ggvihkmoN+Q4g3qwRNBKuHYVWDCzlRq3mLAh1tc6l1Z678EN1ih3H4bqc7JQUjPM
QmidhAIFgDaxhAmBRcuphIiu0CBBESupVxMZvN+jqQJLHIpigkHE624P3WXeW8jP
lSw2cBIgdkgtdR4gSNowtpTqk3l/a/ZjAGa1PMD8AucFL8Eo6bD4m7dQfaW+vN7n
cAb8wfE5sKLc0Xv2qqlAoZvWugB+7Jc6893YYRYfj1vy78F+3Fjs7fm77EyHBLmf
iQhpd7YhVm+62rgqrcVlwG4IowIDAQABo4IClTCCApEwHQYDVR0OBBYEFO/ZyGEA
7XcvLCAHkasopytGj4taMB8GA1UdIwQYMBaAFKUvj5hZysR9aFQnI00mFuueU5Y0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQ4Ri9CODUyRkIzQzQz
MjQxMUVBOTI2MzI1NEFDNEY5QUUwMi9wUy1QbUZuS3hIMW9WQ2NqVFNZVzY1NVRs
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BTLVBtRm5LeEgxb1ZDY2pUU1lXNjU1VGxqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODhEOEYvQjg1MkZCM0M0MzI0MTFFQTkyNjMyNTRBQzRGOUFFMDIvQTg0RjdDRUU0
MzI3MTFFQTg3Q0IwRTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnzrgwDQYJKoZIhvcNAQELBQADggEBAA6YjiDu+VK5UeFf
TF3q3AnTDKNfFAN1vYHpm0zD8+UzplgkdstG0zVuaDOIX0hArOIjcgNuIbhJs/56
YCf3IhdEtFOdzKt1la2O7MIrcXz7ELH4ckrEuSjJpe+wRSxNm8LpSVMVTlryhF5z
y6dOn1vDVBE+cLQkFeL4A8wJJIe51q0wVw+bq93d+2zCMqvVle1m60o3IEgo3p6d
rBHwl9IxeK/o62pNpF7XJcKD0CC/gFhF5zwmoIMfXPUn9Kwn7WKyavhFWGMIqri1
ol3GfI6KT2XnwtetnCneu1unY2449uQJv8neyguf++5+s2gVKkC+44yvjMnrJKfk
GmbJrn0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:17:54 2025 by rpki-client