Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/32539C60CA1511ECA7D45938C4F9AE02.roa
File: 32539C60CA1511ECA7D45938C4F9AE02.roa (raw, json)
Hash identifier: kjWpEahcIIJSj+d4akdI5kuDEqcp+qBQk+VCZ/nbf3I=
Subject key identifier: 7F:33:47:BA:A4:10:3D:52:35:FA:1E:F1:58:A2:21:1F:36:D8:DA:6A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8B66
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/32539C60CA1511ECA7D45938C4F9AE02.roa
Signing time: Thu 30 May 2024 16:07:02 +0000
ROA not before: Thu 30 May 2024 16:07:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137098
IP address blocks: 103.105.124.0/24 maxlen: 24
103.105.125.0/24 maxlen: 24
103.105.126.0/24 maxlen: 24
103.105.127.0/24 maxlen: 24
103.161.92.0/23 maxlen: 24
103.180.221.0/24 maxlen: 24
103.206.180.0/24 maxlen: 24
103.206.181.0/24 maxlen: 24
103.206.182.0/24 maxlen: 24
103.206.183.0/24 maxlen: 24
137.59.96.0/22 maxlen: 22
137.59.96.0/24 maxlen: 24
137.59.97.0/24 maxlen: 24
137.59.98.0/24 maxlen: 24
137.59.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35686 (0x8b66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:07:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a425-2321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fa:e9:0f:3a:38:05:4e:86:cf:b0:69:15:63:
7c:ce:32:49:26:5b:51:1d:97:9c:0d:cd:52:9d:60:
3a:c1:25:8b:13:cb:6a:15:36:ba:e8:65:f1:35:9d:
f1:d7:47:21:02:c8:5b:28:56:af:c1:d7:d3:f4:53:
ec:e5:9e:e9:3c:96:0c:68:99:f4:53:d3:ac:0d:11:
7e:0d:b9:fa:18:59:b1:b2:91:12:fd:48:9f:34:b1:
f0:20:6f:23:c6:e5:ef:14:16:b9:19:e5:3f:4c:a7:
e4:d4:cb:ce:aa:ea:14:95:e8:e1:69:73:ff:c6:f8:
d0:5e:18:c3:b3:71:d6:ac:e8:43:0a:44:da:f6:48:
9b:d7:e4:55:75:3c:57:88:e4:2c:92:d3:bf:52:b3:
fc:4f:33:b4:c2:52:64:b6:7b:32:7f:e6:8f:1c:ee:
b5:60:74:1d:1a:35:cb:63:cf:8e:2e:1a:eb:b9:d8:
65:36:6d:53:88:78:02:34:3a:1a:5e:71:f6:6f:70:
e3:cc:07:c7:0d:9e:95:7b:52:23:a8:39:a1:25:a6:
bc:d6:cb:47:4f:e1:07:34:1c:63:76:b4:8d:5d:62:
9e:88:e5:b6:a6:10:ee:c3:2b:43:f7:2f:0e:aa:e3:
7f:29:19:09:e8:6e:83:23:b7:93:ed:a5:bd:3e:1d:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:47:BA:A4:10:3D:52:35:FA:1E:F1:58:A2:21:1F:36:D8:DA:6A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/32539C60CA1511ECA7D45938C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.124.0/22
103.161.92.0/23
103.180.221.0/24
103.206.180.0/22
137.59.96.0/22
Signature Algorithm: sha256WithRSAEncryption
57:05:78:75:75:f2:73:43:6a:e5:ed:fd:1f:82:f3:b2:78:76:
85:b8:38:3b:84:b9:4d:6b:ad:5d:24:9f:3a:6c:d2:cc:7e:07:
fd:e8:c5:1c:fc:cd:5f:77:80:bf:dd:b8:24:a8:6f:3a:21:05:
1e:e4:c2:7e:c3:39:e7:95:83:91:3a:a6:67:9a:39:cf:0c:b6:
06:ca:35:2f:b4:43:55:3c:ba:91:60:dc:92:86:c0:63:2e:9d:
18:29:c8:7a:39:23:d5:97:0c:35:a6:a9:2e:fd:63:f3:82:30:
e2:95:0d:a0:1f:c5:84:99:da:52:59:bd:fd:35:d6:e5:cd:2a:
ff:de:38:da:39:32:89:07:b7:29:4e:17:c9:fd:b5:fe:92:ce:
5d:13:19:d8:bb:7b:23:e5:23:fd:fa:33:20:4d:14:73:d4:21:
de:b6:d6:f0:06:ec:82:63:ab:0e:cd:1d:4c:09:be:15:3d:cf:
14:2d:3c:29:e0:1b:7e:b9:fb:fd:ee:5e:29:13:75:a2:14:05:
6e:a3:3e:b5:5a:19:35:76:19:6c:57:0f:1a:e6:33:fe:dc:01:
23:ae:f1:2c:1b:49:eb:52:ff:12:6a:42:8f:f5:85:e4:8b:ef:
10:f9:80:ef:43:02:c8:24:8b:27:1b:c6:35:bc:81:ed:28:df:
6d:c0:30:ad
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAItmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MDcwMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE0MjUtMjMyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOP66Q86OAVOhs+waRVjfM4ySSZbUR2XnA3NUp1gOsElixPLahU2uuhl8TWd
8ddHIQLIWyhWr8HX0/RT7OWe6TyWDGiZ9FPTrA0Rfg25+hhZsbKREv1InzSx8CBv
I8bl7xQWuRnlP0yn5NTLzqrqFJXo4Wlz/8b40F4Yw7Nx1qzoQwpE2vZIm9fkVXU8
V4jkLJLTv1Kz/E8ztMJSZLZ7Mn/mjxzutWB0HRo1y2PPji4a67nYZTZtU4h4AjQ6
Gl5x9m9w48wHxw2elXtSI6g5oSWmvNbLR0/hBzQcY3a0jV1inojltqYQ7sMrQ/cv
DqrjfykZCehugyO3k+2lvT4dc3kCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBR/M0e6
pBA9UjX6HvFYoiEfNtjaajAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMyNTM5QzYw
Q0ExNTExRUNBN0Q0NTkzOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDcGCCsGAQUFBwEHAQH/
BCgwJjAkBAIAATAeAwQCZ2l8AwQBZ6FcAwQAZ7TdAwQCZ860AwQCiTtgMA0GCSqG
SIb3DQEBCwUAA4IBAQBXBXh1dfJzQ2rl7f0fgvOyeHaFuDg7hLlNa61dJJ86bNLM
fgf96MUc/M1fd4C/3bgkqG86IQUe5MJ+wznnlYOROqZnmjnPDLYGyjUvtENVPLqR
YNyShsBjLp0YKch6OSPVlww1pqku/WPzgjDilQ2gH8WEmdpSWb39NdblzSr/3jja
OTKJB7cpThfJ/bX+ks5dExnYu3sj5SP9+jMgTRRz1CHettbwBuyCY6sOzR1MCb4V
Pc8ULTwp4Bt+ufv97l4pE3WiFAVuoz61Whk1dhlsVw8a5jP+3AEjrvEsG0nrUv8S
akKP9YXki+8Q+YDvQwLIJIsnG8Y1vIHtKN9twDCt
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:06 2025 by rpki-client