Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B213524C2D11ECA85EBF28C4F9AE02.roa
File: F8B213524C2D11ECA85EBF28C4F9AE02.roa (raw, json)
Hash identifier: o+iOxHqPurxn0zArJaN81mBGdLtgU0plIVE50gcWMz0=
Subject key identifier: 10:A0:82:F6:D0:ED:79:60:63:3D:B7:32:96:07:C9:54:D4:83:4B:65
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A4C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B213524C2D11ECA85EBF28C4F9AE02.roa
Signing time: Thu 30 May 2024 16:02:24 +0000
ROA not before: Thu 30 May 2024 16:02:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135692
IP address blocks: 103.71.76.0/22 maxlen: 24
103.105.152.0/22 maxlen: 24
103.160.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35404 (0x8a4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:02:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a310-f324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:fd:cb:d9:04:0e:75:d2:47:97:bb:8b:3f:
d3:98:38:b7:d2:d0:77:a6:32:94:53:e7:d7:62:9e:
4c:93:d5:ff:4e:4f:a8:9f:19:ce:b3:97:af:01:b5:
c0:6c:c3:33:1e:3c:f3:82:eb:2a:92:b8:f6:83:de:
b7:8f:f6:04:33:42:c4:4b:3d:88:5c:8c:16:0d:78:
35:00:12:9b:19:9b:88:af:c1:ac:ec:12:0e:18:2a:
4d:ef:0c:3c:f3:15:d8:8a:c5:e1:cb:34:3e:78:0c:
06:cb:34:08:e0:76:cf:88:90:39:af:7f:47:46:10:
6b:ed:c6:b6:5f:71:58:00:d0:55:62:78:6c:ad:97:
ff:c3:7a:ee:4f:d3:c0:84:93:81:38:9d:43:ed:d1:
9a:22:e3:d8:18:35:c4:9d:b0:47:09:4c:87:76:37:
87:ca:2c:34:78:10:5a:53:33:7f:2b:70:00:3c:e2:
ec:6c:13:ed:ab:cb:60:8b:31:89:43:42:13:32:77:
1f:1d:a2:9c:6a:96:d8:57:16:69:dc:32:1e:c9:5d:
ea:2f:dd:15:a8:4d:b1:41:c4:a7:24:fb:db:0d:e4:
8a:5b:31:d8:78:be:86:32:6d:08:1a:bf:bf:c7:44:
31:5b:e6:eb:64:ff:1c:9e:b5:bc:74:0e:fb:a4:39:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A0:82:F6:D0:ED:79:60:63:3D:B7:32:96:07:C9:54:D4:83:4B:65
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F8B213524C2D11ECA85EBF28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.76.0/22
103.105.152.0/22
103.160.176.0/23
Signature Algorithm: sha256WithRSAEncryption
76:94:4a:12:1e:0e:b5:5c:18:b7:91:7b:66:71:93:e8:9b:b8:
70:f6:1e:02:47:c6:a5:e1:46:f4:6d:8e:df:9b:67:93:c6:20:
25:5a:88:49:e0:a2:b8:3a:0b:94:97:b0:c5:e6:81:8b:61:8a:
d3:31:b4:9a:e0:0c:e1:f3:12:ed:4a:e4:c2:f9:c9:bd:c4:0f:
9c:52:d1:90:6c:16:33:66:df:4d:42:a6:e9:b0:83:68:0b:2b:
54:fc:fa:7e:d8:46:26:0e:18:26:a6:fb:2a:b5:a9:7e:7d:46:
46:60:31:3a:1d:df:3f:c9:1d:f3:6e:2d:8e:f6:e7:09:31:b5:
27:44:57:81:c4:5e:55:1d:65:ac:fb:af:91:49:01:4f:df:ba:
c8:be:85:0f:63:e4:e7:7a:12:39:72:43:04:31:2b:57:47:a5:
e2:13:66:b1:8f:7c:1a:26:5b:49:97:f9:4e:31:04:84:b0:fb:
ec:13:81:c2:5d:97:d9:4f:0d:a1:6f:7c:24:e9:ec:59:71:96:
73:00:fc:66:75:c7:25:c6:80:47:e3:61:85:83:9b:42:c0:68:
bd:8a:69:d8:05:f2:14:3c:36:18:6a:9d:11:7d:02:62:33:cf:
13:9e:68:36:9b:98:29:58:44:b2:d3:76:a3:df:71:f7:30:d9:
16:7b:65:8c
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIDAIpMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MDIyNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGEzMTAtZjMyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJh5/cvZBA510keXu4s/05g4t9LQd6YylFPn12KeTJPV/05PqJ8ZzrOXrwG1
wGzDMx4884LrKpK49oPet4/2BDNCxEs9iFyMFg14NQASmxmbiK/BrOwSDhgqTe8M
PPMV2IrF4cs0PngMBss0COB2z4iQOa9/R0YQa+3Gtl9xWADQVWJ4bK2X/8N67k/T
wISTgTidQ+3RmiLj2Bg1xJ2wRwlMh3Y3h8osNHgQWlMzfytwADzi7GwT7avLYIsx
iUNCEzJ3Hx2inGqW2FcWadwyHsld6i/dFahNsUHEpyT72w3kilsx2Hi+hjJtCBq/
v8dEMVvm62T/HJ61vHQO+6Q5trUCAwEAAaOCAqEwggKdMB0GA1UdDgQWBBQQoIL2
0O15YGM9tzKWB8lU1INLZTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y4QjIxMzUy
NEMyRDExRUNBODVFQkYyOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAATASAwQCZ0dMAwQCZ2mYAwQBZ6CwMA0GCSqGSIb3DQEBCwUAA4IB
AQB2lEoSHg61XBi3kXtmcZPom7hw9h4CR8al4Ub0bY7fm2eTxiAlWohJ4KK4OguU
l7DF5oGLYYrTMbSa4Azh8xLtSuTC+cm9xA+cUtGQbBYzZt9NQqbpsINoCytU/Pp+
2EYmDhgmpvsqtal+fUZGYDE6Hd8/yR3zbi2O9ucJMbUnRFeBxF5VHWWs+6+RSQFP
37rIvoUPY+TnehI5ckMEMStXR6XiE2axj3waJltJl/lOMQSEsPvsE4HCXZfZTw2h
b3wk6exZcZZzAPxmdcclxoBH42GFg5tCwGi9imnYBfIUPDYYap0RfQJiM88Tnmg2
m5gpWESy03aj33H3MNkWe2WM
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:14 2025 by rpki-client