Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/983A2AA20F3011EDA9D57685C4F9AE02.roa
File: 983A2AA20F3011EDA9D57685C4F9AE02.roa (raw, json)
Hash identifier: 87sTTH7HT3OWk9m9sGpVqgdql1L7BYa0XxLT95Va0Zc=
Subject key identifier: 19:D1:D4:38:C8:9F:C7:16:3C:59:89:05:69:99:1D:5D:1D:43:18:96
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8F7E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/983A2AA20F3011EDA9D57685C4F9AE02.roa
Signing time: Thu 30 May 2024 16:24:03 +0000
ROA not before: Thu 30 May 2024 16:24:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150050
IP address blocks: 103.191.40.0/23 maxlen: 24
2400:94a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36734 (0x8f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:24:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a823-f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:19:e1:37:93:ac:6e:dd:31:5e:65:f1:ce:
e0:39:ff:2c:96:6d:f6:cc:29:e8:97:0d:8e:67:e7:
c9:72:bb:45:a7:72:b8:b4:7d:94:a6:62:3f:4f:6f:
a5:d9:6f:63:4d:a5:60:58:14:69:b7:d8:75:b9:88:
f8:84:aa:40:07:e4:4f:51:fe:de:69:5d:6c:d1:3c:
a2:3f:2f:66:63:7b:00:56:64:fa:3f:3f:2d:4e:fe:
b6:ce:5f:d6:41:6d:ae:26:03:5b:e5:10:94:b3:7d:
24:cd:9c:c3:57:cf:5a:d7:bd:3f:57:b2:c4:e0:9f:
a4:8a:d7:ec:fa:c3:c6:cf:b7:52:db:ca:d7:49:96:
e1:0b:a8:62:45:44:0f:d4:33:2c:3a:cb:5d:dd:09:
55:58:93:51:e8:5e:43:d2:d5:df:fe:85:d1:4d:89:
35:39:0d:64:85:ef:c9:7d:1c:ea:9d:ec:f9:62:54:
7d:6b:6c:56:51:73:27:4c:c6:82:89:37:06:5a:eb:
04:58:c2:ed:c6:67:4a:ab:b6:2a:a6:0a:5e:8d:7c:
b2:ba:ed:b2:ec:6e:8d:59:54:54:cf:ab:5c:fe:8f:
e5:f4:03:78:b3:01:2d:c7:dc:70:7f:e0:56:bb:05:
50:27:d5:74:2a:fd:a0:78:e2:6f:a9:dc:98:58:d7:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D1:D4:38:C8:9F:C7:16:3C:59:89:05:69:99:1D:5D:1D:43:18:96
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/983A2AA20F3011EDA9D57685C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.40.0/23
IPv6:
2400:94a0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:54:ef:57:b5:25:c3:87:33:7d:1d:9b:7c:10:c6:30:91:49:
f7:6a:7d:53:db:2f:8b:de:cb:d9:1d:60:cc:67:bb:81:09:ba:
42:21:f5:03:08:1c:3a:01:20:a7:bf:bf:7e:39:8b:18:af:13:
6d:28:8f:a1:c0:fa:61:35:21:d6:b8:fb:45:51:e5:e6:57:4b:
94:ed:1e:fc:93:88:65:cf:7a:20:08:04:60:d1:f6:6c:94:f3:
10:be:cd:ca:03:07:f2:35:8b:67:d9:23:05:1c:09:f9:83:8a:
50:65:21:75:d3:57:9c:08:98:d8:e9:1d:f3:48:b9:34:59:63:
1c:a0:97:16:c0:5d:37:de:88:a8:ec:d2:74:5a:48:f0:a3:cb:
d8:43:c2:80:09:46:2e:3f:26:f9:5a:04:14:5b:11:95:a4:93:
51:4d:3f:2f:35:7e:6a:bc:01:83:f5:75:b8:85:b7:cc:01:4b:
35:96:d4:7b:9a:57:c4:81:39:4c:42:e8:87:23:06:7b:79:ee:
7f:69:95:0a:4f:ce:e6:19:6d:19:02:f3:ba:0a:6d:38:ca:62:
f2:fd:c9:44:db:ea:99:26:46:94:8b:36:62:8e:12:10:8c:bf:
52:e9:6b:b6:a9:d4:ca:59:df:11:fd:61:6f:34:65:49:cb:61:
78:dc:d7:5d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAI9+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MjQwM1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE4MjMtZjE1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALF3GeE3k6xu3TFeZfHO4Dn/LJZt9swp6JcNjmfnyXK7RadyuLR9lKZiP09v
pdlvY02lYFgUabfYdbmI+ISqQAfkT1H+3mldbNE8oj8vZmN7AFZk+j8/LU7+ts5f
1kFtriYDW+UQlLN9JM2cw1fPWte9P1eyxOCfpIrX7PrDxs+3UtvK10mW4QuoYkVE
D9QzLDrLXd0JVViTUeheQ9LV3/6F0U2JNTkNZIXvyX0c6p3s+WJUfWtsVlFzJ0zG
gok3BlrrBFjC7cZnSqu2KqYKXo18srrtsuxujVlUVM+rXP6P5fQDeLMBLcfccH/g
VrsFUCfVdCr9oHjib6ncmFjX8dkCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQZ0dQ4
yJ/HFjxZiQVpmR1dHUMYljAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk4M0EyQUEy
MEYzMDExRURBOUQ1NzY4NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQBZ78oMA0EAgACMAcDBQAkAJSgMA0GCSqGSIb3DQEBCwUA
A4IBAQBcVO9XtSXDhzN9HZt8EMYwkUn3an1T2y+L3svZHWDMZ7uBCbpCIfUDCBw6
ASCnv79+OYsYrxNtKI+hwPphNSHWuPtFUeXmV0uU7R78k4hlz3ogCARg0fZslPMQ
vs3KAwfyNYtn2SMFHAn5g4pQZSF101ecCJjY6R3zSLk0WWMcoJcWwF033oio7NJ0
Wkjwo8vYQ8KACUYuPyb5WgQUWxGVpJNRTT8vNX5qvAGD9XW4hbfMAUs1ltR7mlfE
gTlMQuiHIwZ7ee5/aZUKT87mGW0ZAvO6Cm04ymLy/clE2+qZJkaUizZijhIQjL9S
6Wu2qdTKWd8R/WFvNGVJy2F43Ndd
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:39 2025 by rpki-client