Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35687E3CCFB611EDA7069782C4F9AE02.roa
File: 35687E3CCFB611EDA7069782C4F9AE02.roa (raw, json)
Hash identifier: 3K3vEJ8YxjeDOff3cJDJAhrwf9GW2UFt10RgPt+fnKQ=
Subject key identifier: 14:47:9B:F9:80:27:82:C0:28:41:B8:87:67:D4:7D:C0:28:C8:0D:AA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8FED
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35687E3CCFB611EDA7069782C4F9AE02.roa
Signing time: Thu 30 May 2024 16:25:50 +0000
ROA not before: Thu 30 May 2024 16:25:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150642
IP address blocks: 103.111.228.0/23 maxlen: 24
2001:df2:1c40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36845 (0x8fed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:25:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a88e-1617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:35:c1:c7:b5:b7:01:3f:4e:01:ac:eb:01:
2f:ae:b8:57:3a:b3:fb:34:0f:a4:21:e8:8e:e4:cf:
9a:d3:4b:a1:e7:de:69:c6:ff:c5:3b:e6:72:fb:fc:
14:c5:e2:1f:c9:f5:f9:af:aa:bd:fc:0e:e1:8b:4a:
a7:06:f0:3f:00:0c:6e:f6:cf:6a:48:7d:43:57:c2:
3a:cf:96:df:05:b7:6c:e9:56:44:44:f5:17:86:65:
d8:dc:9d:b1:57:50:2b:43:34:fb:5b:15:48:da:05:
2e:7c:bc:10:da:36:87:6f:ba:bd:e3:e2:97:ab:71:
51:bd:51:8f:bc:f5:d7:9b:eb:4c:45:5e:28:88:4f:
be:e0:19:c3:aa:0a:d9:dd:0c:13:2a:05:1e:65:b2:
f9:84:5d:0b:9c:b2:5b:2b:d7:bc:62:35:4b:3d:13:
10:5a:0f:cc:37:11:0a:88:cf:f3:51:63:7b:a5:44:
55:11:22:c6:89:d2:b1:f7:42:24:8e:02:a0:71:62:
81:bb:da:43:f7:be:1a:00:e8:94:cb:45:50:48:b2:
93:f5:84:e0:40:81:48:b0:aa:4b:4e:1a:c1:59:7d:
ce:6e:66:62:3b:69:58:64:75:30:aa:ce:0e:57:a7:
b5:dc:f0:20:80:74:71:4e:7e:25:33:63:27:90:1f:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:47:9B:F9:80:27:82:C0:28:41:B8:87:67:D4:7D:C0:28:C8:0D:AA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35687E3CCFB611EDA7069782C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.228.0/23
IPv6:
2001:df2:1c40::/48
Signature Algorithm: sha256WithRSAEncryption
af:f2:f8:42:23:c1:61:0f:bd:bb:73:c0:eb:c3:bd:75:6c:f0:
f0:b3:0a:a0:f7:d3:18:25:70:96:08:bb:00:7d:b2:59:fa:b9:
0c:e4:96:4e:96:9c:ee:8e:4e:bb:64:5f:d5:0f:5d:84:b6:a2:
41:d1:0d:6c:c3:62:6a:95:72:c8:06:cf:8b:1c:69:62:d8:a8:
18:b1:97:e1:af:6c:8b:b7:92:ad:c7:9e:49:da:7a:01:59:f8:
80:1c:35:47:c8:d7:c6:bd:a6:8f:be:19:49:5a:84:f2:32:b7:
33:b8:cf:1d:95:67:60:2a:f7:60:0a:28:02:60:20:21:97:3c:
13:61:a5:dc:7b:15:ff:02:06:33:5b:e7:98:98:9a:9a:7d:e3:
fa:2d:49:9f:f6:49:6a:02:c6:6b:68:0a:4f:ba:f9:3b:15:cf:
52:e3:3b:ef:59:af:95:0f:cc:69:4b:24:0c:85:b4:4e:a7:cd:
60:82:ce:34:29:ee:81:85:3d:3f:57:64:39:7e:64:e1:8d:11:
95:3f:55:08:7a:ec:ae:ac:5b:61:c2:f5:9f:51:b6:e6:b3:51:
7f:42:e6:bf:99:9b:ed:16:48:8d:a8:e1:b2:c2:76:a2:30:cd:
97:48:63:0c:ab:ee:b2:23:50:cd:7d:b1:3e:2e:b2:9c:ec:53:
b7:1d:68:89
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDAI/tMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MjU1MFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE4OGUtMTYxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMQANcHHtbcBP04BrOsBL664Vzqz+zQPpCHojuTPmtNLoefeacb/xTvmcvv8
FMXiH8n1+a+qvfwO4YtKpwbwPwAMbvbPakh9Q1fCOs+W3wW3bOlWRET1F4Zl2Nyd
sVdQK0M0+1sVSNoFLny8ENo2h2+6vePil6txUb1Rj7z115vrTEVeKIhPvuAZw6oK
2d0MEyoFHmWy+YRdC5yyWyvXvGI1Sz0TEFoPzDcRCojP81Fje6VEVREixonSsfdC
JI4CoHFigbvaQ/e+GgDolMtFUEiyk/WE4ECBSLCqS04awVl9zm5mYjtpWGR1MKrO
DlentdzwIIB0cU5+JTNjJ5AfbJECAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQUR5v5
gCeCwChBuIdn1H3AKMgNqjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM1Njg3RTND
Q0ZCNjExRURBNzA2OTc4MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/
BCEwHzAMBAIAATAGAwQBZ2/kMA8EAgACMAkDBwAgAQ3yHEAwDQYJKoZIhvcNAQEL
BQADggEBAK/y+EIjwWEPvbtzwOvDvXVs8PCzCqD30xglcJYIuwB9sln6uQzklk6W
nO6OTrtkX9UPXYS2okHRDWzDYmqVcsgGz4scaWLYqBixl+GvbIu3kq3HnknaegFZ
+IAcNUfI18a9po++GUlahPIytzO4zx2VZ2Aq92AKKAJgICGXPBNhpdx7Ff8CBjNb
55iYmpp94/otSZ/2SWoCxmtoCk+6+TsVz1LjO+9Zr5UPzGlLJAyFtE6nzWCCzjQp
7oGFPT9XZDl+ZOGNEZU/VQh67K6sW2HC9Z9RtuazUX9C5r+Zm+0WSI2o4bLCdqIw
zZdIYwyr7rIjUM19sT4uspzsU7cdaIk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:07 2025 by rpki-client