Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/FC11F400240611EFA8F45A54C4F9AE02.roa
File: FC11F400240611EFA8F45A54C4F9AE02.roa (raw, json)
Hash identifier: 0Kz75Ec+aiyaTgQW5w9kydRmf1vsulhgyrIgS2fmNao=
Subject key identifier: 5A:55:A7:BD:8C:29:14:D3:0E:84:E7:87:D3:22:DF:68:C4:E0:94:3F
Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Certificate serial: 02F4
Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/FC11F400240611EFA8F45A54C4F9AE02.roa
Signing time: Thu 06 Jun 2024 13:17:16 +0000
ROA not before: Thu 06 Jun 2024 13:17:15 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 150735
IP address blocks: 103.122.122.0/24 maxlen: 24
103.182.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756 (0x2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3
Validity
Not Before: Jun 6 13:17:15 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6661b6db-015e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:91:5c:c1:4b:97:eb:59:d1:f6:79:8d:d9:
e4:dc:62:66:d5:15:4d:07:de:40:c4:1b:c8:86:42:
8c:da:85:a4:7f:86:fc:c4:2d:71:f9:d0:7f:66:72:
f1:d3:20:63:a8:b0:ef:e0:3e:5a:8c:a5:a2:d9:1d:
af:8d:62:67:db:d3:f7:56:5a:59:db:c9:61:b3:d3:
89:ea:38:74:92:54:b6:16:30:fb:d5:69:c1:d2:f2:
2a:71:94:6e:86:69:7c:c0:08:e7:36:48:4c:b2:06:
df:9e:f7:97:03:86:5b:55:74:29:45:b9:b8:33:92:
e9:f4:ad:f5:f4:a7:21:8a:92:d1:b1:82:76:a6:b0:
5f:3d:da:82:2b:d2:03:70:7f:a5:ca:1e:87:77:c7:
d3:13:e7:39:47:78:10:2e:76:e8:9a:fc:55:fa:30:
bf:9c:5b:6e:23:47:d1:a7:a8:21:8e:cf:74:a8:69:
18:81:ae:4b:66:8e:b7:d4:25:12:ad:59:32:bc:6c:
c6:cd:7c:6b:0b:a7:90:1b:16:4e:6d:48:bd:63:d7:
9f:0a:08:27:55:38:bc:14:b0:52:2d:e4:86:67:64:
63:69:16:02:31:a8:13:df:f8:c0:6d:dd:64:b8:98:
bc:5a:4f:b3:2e:75:1c:5c:49:c0:e3:ed:a4:d5:97:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:55:A7:BD:8C:29:14:D3:0E:84:E7:87:D3:22:DF:68:C4:E0:94:3F
X509v3 Authority Key Identifier:
keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/FC11F400240611EFA8F45A54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.122.0/24
103.182.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a7:e0:e2:ab:20:40:68:8c:5c:ec:62:4e:9b:d6:ff:10:8d:
2a:ff:fa:06:5a:7f:41:8a:0f:59:7e:50:85:6c:3e:b6:47:ee:
1f:8e:fa:dd:95:48:94:0e:88:cf:2a:bd:b8:96:a0:6f:f6:e2:
50:85:dc:bf:c0:09:57:8a:72:ff:64:1f:d8:62:0c:b4:22:db:
75:ed:49:cf:7e:d1:49:6e:4b:fe:2d:8a:fc:cf:0a:e8:a6:4a:
c2:75:3e:99:0c:c6:65:db:de:ed:5c:e8:2a:46:96:15:2b:8c:
91:f9:03:79:a5:12:6a:9c:b1:4a:d1:79:9d:18:c8:1e:45:00:
bb:ad:b5:73:23:e3:83:ed:22:c9:f4:4b:75:94:d9:00:5f:34:
b8:45:a3:20:ce:a7:0b:4f:74:01:7b:99:4e:65:50:b0:10:11:
ab:78:10:be:f4:e7:56:f4:80:fd:2d:71:84:37:7b:12:8c:04:
e6:df:16:68:74:0d:2f:86:d5:8c:94:09:c3:e1:68:19:cf:25:
80:71:e0:6e:32:57:63:8d:53:80:60:27:b3:9c:3a:7d:bb:41:
a8:41:ed:42:a5:28:27:9b:27:be:0f:3e:5d:91:49:c0:50:48:
19:bc:38:1f:2d:ab:5a:f5:ba:f5:b2:89:4a:a5:39:c6:65:fd:
6f:20:b4:18
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJEMUExMTAvBgNVBAUTKDIwNzQ2REE5NkM2QzkzNDhFOTRCQkI3NERDQ0I1OTAx
QzZFQ0I3QjMwHhcNMjQwNjA2MTMxNzE1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjYxYjZkYi0wMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+CRXMFLl+tZ0fZ5jdnk3GJm1RVNB95AxBvIhkKM2oWkf4b8xC1x+dB/ZnLx
0yBjqLDv4D5ajKWi2R2vjWJn29P3VlpZ28lhs9OJ6jh0klS2FjD71WnB0vIqcZRu
hml8wAjnNkhMsgbfnveXA4ZbVXQpRbm4M5Lp9K319KchipLRsYJ2prBfPdqCK9ID
cH+lyh6Hd8fTE+c5R3gQLnbomvxV+jC/nFtuI0fRp6ghjs90qGkYga5LZo631CUS
rVkyvGzGzXxrC6eQGxZObUi9Y9efCggnVTi8FLBSLeSGZ2RjaRYCMagT3/jAbd1k
uJi8Wk+zLnUcXEnA4+2k1ZeylQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFpVp72M
KRTTDoTnh9Mi32jE4JQ/MB8GA1UdIwQYMBaAFCB0balsbJNI6Uu7dNzLWQHG7Lez
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkQxQS80QzZFQUJFODk5
RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2swanBTN3QwM010WkFjYnN0
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lIUnRxV3hzazBqcFM3dDAzTXRaQWNic3Q3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEJEMUEvNEM2RUFCRTg5OUQ4MTFFQ0I5RTM1NzZGQzRGOUFFMDIvRkMxMUY0MDAy
NDA2MTFFRkE4RjQ1QTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnenoDBABnttswDQYJKoZIhvcNAQELBQADggEBAEyn4OKr
IEBojFzsYk6b1v8QjSr/+gZaf0GKD1l+UIVsPrZH7h+O+t2VSJQOiM8qvbiWoG/2
4lCF3L/ACVeKcv9kH9hiDLQi23XtSc9+0UluS/4tivzPCuimSsJ1PpkMxmXb3u1c
6CpGlhUrjJH5A3mlEmqcsUrReZ0YyB5FALuttXMj44PtIsn0S3WU2QBfNLhFoyDO
pwtPdAF7mU5lULAQEat4EL7051b0gP0tcYQ3exKMBObfFmh0DS+G1YyUCcPhaBnP
JYBx4G4yV2ONU4BgJ7OcOn27QahB7UKlKCebJ74PPl2RScBQSBm8OB8tq1r1uvWy
iUqlOcZl/W8gtBg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:00:11 2025 by rpki-client