Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F094C2D96511EFB9E12B2CC4F9AE02.roa
File: 19F094C2D96511EFB9E12B2CC4F9AE02.roa (raw, json)
Hash identifier: znQ8NqIO+uikr8BxMZgCvRY09XXL+tMITVLf3rmGYyU=
Subject key identifier: AA:B7:2A:53:6B:84:86:25:8E:DC:53:CE:E2:F1:32:38:C7:49:6C:29
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A378
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F094C2D96511EFB9E12B2CC4F9AE02.roa
Signing time: Thu 23 Jan 2025 08:36:13 +0000
ROA not before: Thu 23 Jan 2025 08:36:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 153228
IP address blocks: 103.181.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41848 (0xa378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 23 08:36:13 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6791ff7c-5e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8c:31:91:06:c8:2c:9d:98:2d:74:a5:dc:e8:
f6:93:39:87:97:2e:ab:7c:58:40:f3:de:3a:55:c0:
35:33:ec:6e:d9:b3:d7:67:61:3b:6e:7d:7e:1a:59:
ff:07:5d:42:d4:fa:89:12:70:62:c8:0e:e2:e5:bf:
b4:b6:b1:fe:e1:42:62:9b:dd:d9:73:be:21:e6:b8:
91:0a:a5:45:85:5f:f5:bb:18:ca:3a:b4:5a:ff:a1:
91:b0:c0:ba:0c:17:07:77:15:c0:c2:9d:9d:e3:69:
ae:9e:b2:39:87:51:3a:44:6f:52:64:96:55:b6:a2:
21:2d:cc:db:f7:89:2b:9b:50:e5:0d:1e:a3:a0:12:
4b:2e:48:68:c0:a4:ba:07:11:7f:3b:55:a7:36:67:
4f:a5:29:4d:16:67:2a:5f:31:99:fb:a2:b7:01:29:
16:98:27:c5:3a:85:33:35:e3:bd:94:8b:e6:56:c4:
57:c4:1d:a1:aa:b0:5d:cb:fb:ba:72:46:bc:a7:e0:
da:ee:13:c8:5e:56:64:61:dc:e4:61:b1:24:d7:ca:
08:df:e1:ba:96:00:d3:a6:89:e9:2e:f4:ba:c2:12:
0f:3b:55:41:a1:0c:6a:22:4d:85:a1:f4:86:34:bb:
0b:2d:4e:74:e3:97:09:fa:1f:be:b6:ea:6e:13:f9:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:2A:53:6B:84:86:25:8E:DC:53:CE:E2:F1:32:38:C7:49:6C:29
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F094C2D96511EFB9E12B2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.108.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5a:13:b6:61:c9:f9:a5:89:c5:c8:d2:01:e2:0e:e8:b6:fb:
e0:33:4c:68:be:76:f6:07:b1:e1:06:17:46:ac:2c:56:a1:46:
24:c5:6f:a1:1f:a1:04:1e:4a:32:d0:83:44:a1:a8:73:c6:09:
06:3e:29:e4:c0:87:5a:88:39:7b:bd:c5:3e:0b:be:18:3a:52:
59:7b:05:fb:0c:9a:dd:b0:36:29:26:9a:a1:9c:10:a2:1f:2b:
73:95:c3:d6:a0:46:93:ae:0d:b5:12:4c:6d:c5:34:06:c6:a1:
45:ee:37:d5:19:21:c5:7b:cc:f8:52:65:07:ac:09:de:00:7d:
f5:6a:4c:29:63:f3:78:9f:90:3a:12:8f:d4:14:87:56:bd:9a:
1b:ec:59:cf:8a:c9:f0:a3:49:c4:50:83:e9:1f:ea:5a:a6:66:
67:9a:d4:4f:b6:82:ed:af:9c:63:8a:30:94:93:fe:6d:26:94:
5c:34:db:c7:d3:a1:c6:62:6a:48:4a:01:37:b5:8a:17:b9:b9:
04:4b:f1:d8:1e:11:87:74:03:bc:30:d4:d2:ca:f7:c4:fc:df:
9d:50:a5:12:9d:f2:7c:08:a0:a0:a0:65:7a:3b:ca:06:0a:d4:
9d:98:aa:9e:a8:b7:95:4b:8a:a7:d3:04:18:dc:1d:30:4a:fa:
c0:60:5f:77
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAKN4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDEyMzA4MzYxM1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjc5MWZmN2MtNWU4YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOOMMZEGyCydmC10pdzo9pM5h5cuq3xYQPPeOlXANTPsbtmz12dhO259fhpZ
/wddQtT6iRJwYsgO4uW/tLax/uFCYpvd2XO+Iea4kQqlRYVf9bsYyjq0Wv+hkbDA
ugwXB3cVwMKdneNprp6yOYdROkRvUmSWVbaiIS3M2/eJK5tQ5Q0eo6ASSy5IaMCk
ugcRfztVpzZnT6UpTRZnKl8xmfuitwEpFpgnxTqFMzXjvZSL5lbEV8QdoaqwXcv7
unJGvKfg2u4TyF5WZGHc5GGxJNfKCN/hupYA06aJ6S70usISDztVQaEMaiJNhaH0
hjS7Cy1OdOOXCfofvrbqbhP5WMcCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSqtypT
a4SGJY7cU87i8TI4x0lsKTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE5RjA5NEMy
RDk2NTExRUZCOUUxMkIyQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ7VsMA0GCSqGSIb3DQEBCwUAA4IBAQB3WhO2Ycn5pYnF
yNIB4g7otvvgM0xovnb2B7HhBhdGrCxWoUYkxW+hH6EEHkoy0INEoahzxgkGPink
wIdaiDl7vcU+C74YOlJZewX7DJrdsDYpJpqhnBCiHytzlcPWoEaTrg21EkxtxTQG
xqFF7jfVGSHFe8z4UmUHrAneAH31akwpY/N4n5A6Eo/UFIdWvZob7FnPisnwo0nE
UIPpH+papmZnmtRPtoLtr5xjijCUk/5tJpRcNNvH06HGYmpISgE3tYoXubkES/HY
HhGHdAO8MNTSyvfE/N+dUKUSnfJ8CKCgoGV6O8oGCtSdmKqeqLeVS4qn0wQY3B0w
SvrAYF93
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:17 2025 by rpki-client