Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72AA89A69B4411EFAD8FF155C4F9AE02.roa
File: 72AA89A69B4411EFAD8FF155C4F9AE02.roa (raw, json)
Hash identifier: Xf79ItCm+9EnxuKQnAUm5U83HYgvFZj2yu/gQeO1Alg=
Subject key identifier: 11:8A:0B:AB:5E:31:2B:EE:47:5E:E1:48:9F:25:70:35:81:30:18:D5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9C6D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72AA89A69B4411EFAD8FF155C4F9AE02.roa
Signing time: Tue 05 Nov 2024 07:06:15 +0000
ROA not before: Tue 05 Nov 2024 07:06:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24029
IP address blocks: 103.97.92.0/22 maxlen: 24
203.119.49.0/24 maxlen: 24
203.119.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40045 (0x9c6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 5 07:06:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6729c3e7-36bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:d0:0e:2c:b9:9b:07:60:05:c4:16:7c:5f:
75:9e:96:c5:4c:80:77:e2:01:c5:0d:69:04:7e:ad:
cb:22:35:c0:db:da:e5:fe:b2:10:18:98:a7:dd:90:
5d:60:ae:da:fa:47:3b:fc:6e:64:a0:68:7d:a1:14:
48:c5:52:6e:a0:0f:86:6f:6b:98:46:a9:e8:d7:ff:
0b:de:e0:29:b0:f8:ba:5c:53:c2:4d:cb:d6:32:2b:
d4:48:24:66:14:f8:e7:4e:c6:c8:f0:2e:a5:21:2a:
9a:31:45:22:47:dc:4d:13:2b:c2:34:04:c2:53:56:
14:d9:71:36:08:ce:f5:27:8b:69:eb:da:f1:67:f2:
96:66:71:74:cf:4c:96:37:81:ea:a5:0a:17:02:eb:
97:b7:4c:6a:55:8f:55:ad:1c:91:88:59:d7:e3:c4:
f3:fd:54:e8:d5:19:7b:87:fe:7c:62:50:a0:cb:62:
f8:2e:21:00:31:f9:40:68:b6:4a:e2:e0:08:78:01:
e8:37:3a:f0:cd:08:15:64:22:0e:15:83:a3:5a:16:
f4:06:08:f4:14:72:1e:07:02:52:f2:b2:dd:77:aa:
d4:f8:e5:e6:73:59:dc:aa:09:f2:53:d3:3c:59:69:
3e:5c:d2:79:53:3b:3b:c0:c2:52:08:76:09:88:37:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:0B:AB:5E:31:2B:EE:47:5E:E1:48:9F:25:70:35:81:30:18:D5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72AA89A69B4411EFAD8FF155C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.92.0/22
203.119.49.0-203.119.50.255
Signature Algorithm: sha256WithRSAEncryption
40:40:2b:f9:f0:60:4e:ba:f0:ac:69:1e:f6:af:4c:9d:fa:47:
83:cb:ab:bb:45:25:34:2e:66:ef:01:41:2f:47:1a:74:99:d1:
08:83:aa:cc:2c:a4:ed:24:6d:2f:6f:04:94:4b:1d:4e:87:e4:
0e:cd:e2:84:05:79:fb:10:17:d1:fc:4a:97:ff:bb:39:74:5f:
bf:35:f1:cd:ea:39:7e:ff:12:64:af:70:28:d4:0d:cd:3f:bf:
b3:cd:4e:d0:62:3e:90:d6:48:16:09:7c:e0:65:82:f7:58:72:
ac:8a:d5:6d:51:c4:61:bc:f3:d8:60:28:0e:8e:3f:46:10:b6:
68:0a:4a:3d:93:d4:b5:5a:85:97:ce:71:14:11:c5:bf:ce:a7:
0e:e0:44:a2:be:d3:2d:2d:27:d4:82:e7:30:c7:cf:3e:79:fb:
5e:56:0f:bd:c3:82:09:79:6b:3b:03:67:d2:a6:a3:ec:48:96:
e5:15:77:03:22:6f:e8:23:4f:93:d0:02:29:4a:11:30:d2:a7:
de:8e:f7:55:fe:2d:d8:eb:16:b0:cf:2d:5e:d7:7d:7e:47:ae:
42:32:c5:65:01:bc:f2:a1:97:da:04:09:af:f3:d2:68:c3:7e:
66:1e:16:e9:f0:1b:df:60:a8:36:21:70:70:e5:49:f3:4f:fe:
ab:75:e0:e9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDAJxtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MTEwNTA3MDYxNVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjcyOWMzZTctMzZiYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMtx0A4suZsHYAXEFnxfdZ6WxUyAd+IBxQ1pBH6tyyI1wNva5f6yEBiYp92Q
XWCu2vpHO/xuZKBofaEUSMVSbqAPhm9rmEap6Nf/C97gKbD4ulxTwk3L1jIr1Egk
ZhT4507GyPAupSEqmjFFIkfcTRMrwjQEwlNWFNlxNgjO9SeLaeva8WfylmZxdM9M
ljeB6qUKFwLrl7dMalWPVa0ckYhZ1+PE8/1U6NUZe4f+fGJQoMti+C4hADH5QGi2
SuLgCHgB6Dc68M0IFWQiDhWDo1oW9AYI9BRyHgcCUvKy3Xeq1Pjl5nNZ3KoJ8lPT
PFlpPlzSeVM7O8DCUgh2CYg3BvUCAwEAAaOCAqMwggKfMB0GA1UdDgQWBBQRigur
XjEr7kde4UifJXA1gTAY1TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcyQUE4OUE2
OUI0NDExRUZBRDhGRjE1NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC0GCCsGAQUFBwEHAQH/
BB4wHDAaBAIAATAUAwQCZ2FcMAwDBADLdzEDBADLdzIwDQYJKoZIhvcNAQELBQAD
ggEBAEBAK/nwYE668KxpHvavTJ36R4PLq7tFJTQuZu8BQS9HGnSZ0QiDqswspO0k
bS9vBJRLHU6H5A7N4oQFefsQF9H8Spf/uzl0X7818c3qOX7/EmSvcCjUDc0/v7PN
TtBiPpDWSBYJfOBlgvdYcqyK1W1RxGG889hgKA6OP0YQtmgKSj2T1LVahZfOcRQR
xb/Opw7gRKK+0y0tJ9SC5zDHzz55+15WD73Dggl5azsDZ9Kmo+xIluUVdwMib+gj
T5PQAilKETDSp96O91X+LdjrFrDPLV7XfX5HrkIyxWUBvPKhl9oECa/z0mjDfmYe
FunwG99gqDYhcHDlSfNP/qt14Ok=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:50 2025 by rpki-client