Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C06DA67038B211EC961D5863C4F9AE02.roa
File: C06DA67038B211EC961D5863C4F9AE02.roa (raw, json)
Hash identifier: Sd9o/DonLQ4ENhGA+z5FjpfjHEfHro+kjWu2wt3uMtM=
Subject key identifier: A7:93:F0:56:75:D5:02:93:72:60:7D:33:04:D2:EF:C0:DA:9D:CC:4E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 897B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C06DA67038B211EC961D5863C4F9AE02.roa
Signing time: Thu 30 May 2024 15:59:00 +0000
ROA not before: Thu 30 May 2024 15:59:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134258
IP address blocks: 103.197.220.0/23 maxlen: 24
103.197.222.0/23 maxlen: 24
157.119.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35195 (0x897b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:59:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a244-9684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:60:4f:ba:b8:23:cd:40:a0:b2:e9:8b:ae:
49:25:f3:5a:c9:88:7b:27:78:c0:fd:9e:08:04:cc:
70:34:f0:0e:d0:17:5b:60:c7:90:ed:89:78:2d:28:
6e:d1:f1:80:ff:cf:91:8e:02:e7:bc:dd:92:3f:2d:
a9:87:86:f1:52:80:3e:1e:dd:1a:25:9c:d2:f8:a9:
23:10:6c:ca:33:24:43:ab:96:3a:ce:0a:6f:4c:ca:
14:fc:50:58:68:f0:02:61:81:9c:0f:76:a4:9a:1f:
aa:8b:4c:ac:46:94:95:bb:35:b7:6d:71:c8:ef:93:
c6:e2:69:fe:81:d0:e6:08:8c:1f:3a:35:7c:8c:bd:
58:ba:e4:e5:fa:ea:de:9a:21:77:1d:e8:fc:a0:8b:
80:79:94:ea:64:da:17:c9:3f:0f:30:e4:43:09:c8:
fa:cf:00:ad:62:1d:9e:4e:74:2b:d3:62:9c:f7:83:
46:b1:f0:0a:0d:f8:5e:36:c4:ae:8e:db:13:e9:6d:
61:b6:f8:a3:05:7f:6f:7c:9f:49:3a:ad:ce:41:f2:
3e:0a:cc:c7:59:b1:ba:4e:5f:7e:f4:bd:0c:03:bd:
72:4d:51:d1:07:75:a2:a9:af:06:c5:28:dd:de:70:
17:9a:93:53:47:81:fb:47:a6:21:9b:2a:61:68:c7:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:93:F0:56:75:D5:02:93:72:60:7D:33:04:D2:EF:C0:DA:9D:CC:4E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C06DA67038B211EC961D5863C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.220.0/22
157.119.168.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:a8:45:b9:0a:35:40:c3:80:32:bb:2c:4c:99:5f:9f:15:57:
91:93:7c:eb:10:97:40:bd:46:78:fa:d7:0f:cc:72:05:98:92:
9f:aa:b4:fb:13:21:c4:e0:ce:ff:ae:39:cf:cb:99:85:86:07:
a2:3f:0a:15:d5:5e:16:49:11:9c:f7:15:33:61:db:e0:8b:42:
af:dd:86:01:45:70:9d:af:35:2c:6e:bc:6f:60:42:2c:6d:fb:
f2:97:9e:f0:dd:6e:3a:1f:0b:87:94:c1:f7:52:34:16:42:87:
63:b7:e5:04:31:b9:28:5e:5a:6a:f1:12:cd:cf:b5:e7:6f:06:
f1:7c:7f:77:19:ff:c4:fb:ea:5c:02:cd:74:e0:eb:a0:36:b6:
3b:ea:00:49:da:61:6b:c3:70:59:27:55:ca:0a:c0:1d:d5:07:
64:56:8a:19:bf:e2:41:80:c4:ce:95:58:90:94:62:70:66:38:
16:c5:cb:93:fe:d8:79:c5:cc:85:b1:8b:31:bc:13:37:85:fd:
3c:1f:42:b3:54:1c:7b:07:71:80:91:42:1a:8a:b1:84:92:8f:
03:3c:ae:6c:b8:5a:dc:12:f9:a9:82:c8:50:4b:3c:e9:9a:7e:
51:5f:f2:dd:71:11:8e:a6:9b:e9:17:6d:8f:50:da:4f:c5:fe:
25:46:ee:ce
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIDAIl7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE1NTkwMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGEyNDQtOTY4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALU9YE+6uCPNQKCy6YuuSSXzWsmIeyd4wP2eCATMcDTwDtAXW2DHkO2JeC0o
btHxgP/PkY4C57zdkj8tqYeG8VKAPh7dGiWc0vipIxBsyjMkQ6uWOs4Kb0zKFPxQ
WGjwAmGBnA92pJofqotMrEaUlbs1t21xyO+TxuJp/oHQ5giMHzo1fIy9WLrk5frq
3pohdx3o/KCLgHmU6mTaF8k/DzDkQwnI+s8ArWIdnk50K9NinPeDRrHwCg34XjbE
ro7bE+ltYbb4owV/b3yfSTqtzkHyPgrMx1mxuk5ffvS9DAO9ck1R0Qd1oqmvBsUo
3d5wF5qTU0eB+0emIZsqYWjHp6ECAwEAAaOCApswggKXMB0GA1UdDgQWBBSnk/BW
ddUCk3JgfTME0u/A2p3MTjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MwNkRBNjcw
MzhCMjExRUM5NjFENTg2M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/
BBYwFDASBAIAATAMAwQCZ8XcAwQCnXeoMA0GCSqGSIb3DQEBCwUAA4IBAQC0qEW5
CjVAw4AyuyxMmV+fFVeRk3zrEJdAvUZ4+tcPzHIFmJKfqrT7EyHE4M7/rjnPy5mF
hgeiPwoV1V4WSRGc9xUzYdvgi0Kv3YYBRXCdrzUsbrxvYEIsbfvyl57w3W46HwuH
lMH3UjQWQodjt+UEMbkoXlpq8RLNz7XnbwbxfH93Gf/E++pcAs104OugNrY76gBJ
2mFrw3BZJ1XKCsAd1QdkVooZv+JBgMTOlViQlGJwZjgWxcuT/th5xcyFsYsxvBM3
hf08H0KzVBx7B3GAkUIairGEko8DPK5suFrcEvmpgshQSzzpmn5RX/LdcRGOppvp
F22PUNpPxf4lRu7O
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:18 2025 by rpki-client