Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73041B4208F211EDB951F87AC4F9AE02.roa
File: 73041B4208F211EDB951F87AC4F9AE02.roa (raw, json)
Hash identifier: 25QAfOvU3Utow3LYp8MIS6fepVj4Q22y26w3UlXuufg=
Subject key identifier: 90:8D:9D:29:D5:0D:0B:A1:67:A2:3A:3A:CB:0F:8E:03:B7:74:9A:76
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8F8B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73041B4208F211EDB951F87AC4F9AE02.roa
Signing time: Thu 30 May 2024 16:24:17 +0000
ROA not before: Thu 30 May 2024 16:24:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150064
IP address blocks: 103.185.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36747 (0x8f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:24:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a830-5dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:8b:d0:48:d6:df:93:2f:5e:60:2e:6b:32:
9b:be:54:bb:c8:bd:bd:d9:60:c2:f0:be:8a:d1:76:
51:1b:74:a3:33:36:4d:08:b5:36:5a:59:e4:f2:66:
48:fe:40:75:b1:ec:0f:bd:9a:c9:61:74:01:ae:07:
a1:a6:cf:8a:70:e8:12:e9:f5:e7:a5:88:40:87:3f:
6c:be:af:0b:a9:f9:be:08:ae:01:10:45:f9:7c:3a:
39:46:73:16:83:d5:12:ae:cd:ef:d5:b9:66:b2:bc:
67:4f:bc:45:35:65:2b:27:8e:ab:d1:25:6f:1b:8d:
76:e1:ec:59:96:cb:b9:b7:7e:66:31:4e:6e:5d:0e:
3b:36:dc:1e:e4:94:75:c5:06:a8:f5:0d:f5:37:1b:
e4:c2:00:d5:47:3f:6e:ed:d3:1d:db:de:0e:09:31:
6c:ee:cc:b1:9e:d0:00:9c:39:ef:23:5e:44:21:f1:
f0:b1:cc:71:16:cb:31:53:e8:6c:11:10:6d:d0:7b:
30:53:c4:6a:dd:a9:66:99:50:16:eb:fc:1b:29:aa:
4f:ff:e7:2d:15:eb:d2:c5:7f:1e:95:4d:e3:7f:a7:
1d:ae:e4:f6:03:f0:18:ab:59:52:25:3b:cf:df:33:
de:16:9a:93:b3:bb:c3:e5:c1:95:02:8b:ad:57:3a:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8D:9D:29:D5:0D:0B:A1:67:A2:3A:3A:CB:0F:8E:03:B7:74:9A:76
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73041B4208F211EDB951F87AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.212.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0f:ef:1d:ce:7b:c9:66:d4:6b:99:89:07:97:f9:63:1f:36:
18:c6:19:fd:17:49:b7:86:57:cb:97:12:1f:30:d9:75:ad:08:
4e:69:37:7d:e6:b1:1d:8e:4e:99:1d:e9:92:0a:3e:3e:91:be:
62:31:65:1e:f0:6e:df:a7:16:df:b7:ae:c1:d8:ef:66:85:f8:
61:37:18:ba:76:36:26:36:3b:0b:15:9c:40:67:ad:6f:3a:cb:
97:ec:d7:54:e6:32:f8:bc:99:03:44:74:15:66:ad:ac:08:b3:
d6:49:d8:4b:d3:73:f6:6b:e5:69:e3:42:64:0e:2e:66:ec:a3:
e7:c5:a9:43:97:c4:f5:ce:59:26:e6:55:15:b0:9b:e0:73:f6:
f9:f9:68:6c:7e:01:08:e1:23:68:95:b4:08:cc:3a:d0:c9:d5:
5c:b7:00:08:73:ce:d4:76:5c:8c:30:01:a7:15:25:72:79:23:
4f:d1:2a:2d:ee:ac:ea:34:b2:d4:7e:36:4a:1d:23:95:af:7b:
61:79:05:80:51:37:73:77:77:69:b2:1d:8b:e7:89:2f:e7:d0:
3b:de:48:d7:ab:17:35:f8:2f:73:14:69:dd:ea:01:a5:a2:24:
2e:8b:15:70:d1:b7:6b:94:c3:21:4f:1e:fe:c3:2d:56:de:21:
35:0c:bb:af
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAI+LMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MjQxN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE4MzAtNWRjNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKO8i9BI1t+TL15gLmsym75Uu8i9vdlgwvC+itF2URt0ozM2TQi1NlpZ5PJm
SP5AdbHsD72ayWF0Aa4HoabPinDoEun156WIQIc/bL6vC6n5vgiuARBF+Xw6OUZz
FoPVEq7N79W5ZrK8Z0+8RTVlKyeOq9ElbxuNduHsWZbLubd+ZjFObl0OOzbcHuSU
dcUGqPUN9Tcb5MIA1Uc/bu3THdveDgkxbO7MsZ7QAJw57yNeRCHx8LHMcRbLMVPo
bBEQbdB7MFPEat2pZplQFuv8GymqT//nLRXr0sV/HpVN43+nHa7k9gPwGKtZUiU7
z98z3haak7O7w+XBlQKLrVc6RQkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSQjZ0p
1Q0LoWeiOjrLD44Dt3SadjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzczMDQxQjQy
MDhGMjExRURCOTUxRjg3QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ7nUMA0GCSqGSIb3DQEBCwUAA4IBAQBGD+8dznvJZtRr
mYkHl/ljHzYYxhn9F0m3hlfLlxIfMNl1rQhOaTd95rEdjk6ZHemSCj4+kb5iMWUe
8G7fpxbft67B2O9mhfhhNxi6djYmNjsLFZxAZ61vOsuX7NdU5jL4vJkDRHQVZq2s
CLPWSdhL03P2a+Vp40JkDi5m7KPnxalDl8T1zlkm5lUVsJvgc/b5+WhsfgEI4SNo
lbQIzDrQydVctwAIc87UdlyMMAGnFSVyeSNP0Sot7qzqNLLUfjZKHSOVr3theQWA
UTdzd3dpsh2L54kv59A73kjXqxc1+C9zFGnd6gGloiQuixVw0bdrlMMhTx7+wy1W
3iE1DLuv
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:09:13 2025 by rpki-client