Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/FAAC7098424911EFABBC7D78C4F9AE02.roa
File: FAAC7098424911EFABBC7D78C4F9AE02.roa (raw, json)
Hash identifier: 3NPXcNsi26X2NuLDFnrNuZlOxEwbtdhE/ZNaHoNQNAw=
Subject key identifier: 13:7B:2D:DB:91:5C:0C:C7:0F:1B:F3:0B:8C:60:BB:65:5F:16:85:C7
Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial: 0D73
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/FAAC7098424911EFABBC7D78C4F9AE02.roa
Signing time: Tue 10 Sep 2024 08:06:12 +0000
ROA not before: Tue 10 Sep 2024 08:06:12 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 138624
IP address blocks: 103.134.225.0/24 maxlen: 24
2001:df7:d500::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3443 (0xd73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Validity
Not Before: Sep 10 08:06:12 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66dffdf3-c90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:40:b3:60:1c:c8:80:d9:5a:76:c4:86:ad:
73:af:4c:e9:cf:ba:a8:1e:50:8c:b9:69:80:d7:bb:
eb:2d:b6:5e:ea:23:3f:e3:26:98:c7:9f:63:ea:07:
86:df:30:2a:82:fb:38:80:8a:4a:ce:ce:d1:79:a3:
0d:6f:49:b8:36:32:5b:e3:0c:95:3c:e4:01:65:f8:
f1:76:47:30:73:2e:83:ec:27:da:88:71:04:e1:95:
ef:10:1f:e9:7a:e9:26:a8:b4:fc:c2:db:4b:ff:23:
e0:a1:8e:6c:4b:b3:a6:e0:d1:21:05:bd:9a:2d:99:
de:ea:93:6d:45:b5:bd:e8:e5:ef:22:25:87:ed:09:
25:03:fb:35:3a:7d:7f:8f:66:52:03:a3:55:76:cc:
5e:09:d3:c1:89:b9:2b:e6:33:c4:c2:79:bd:93:63:
b2:72:fd:40:75:23:71:ad:e3:82:aa:26:8a:bb:63:
43:01:51:05:06:ca:08:6b:df:32:81:10:6c:84:09:
84:44:c8:53:2f:4a:4c:7d:94:eb:5a:21:ae:04:e4:
c7:8e:f4:a8:ab:35:49:63:9a:fe:ef:36:17:57:a1:
bd:e9:78:63:e5:f8:f2:05:3d:7d:87:40:b2:23:bb:
d5:7f:ec:7e:02:8a:3b:f2:f5:58:9f:3e:e3:f2:1b:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7B:2D:DB:91:5C:0C:C7:0F:1B:F3:0B:8C:60:BB:65:5F:16:85:C7
X509v3 Authority Key Identifier:
keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/FAAC7098424911EFABBC7D78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.225.0/24
IPv6:
2001:df7:d500::/48
Signature Algorithm: sha256WithRSAEncryption
98:a8:a3:54:a9:6e:e7:e8:86:44:79:8e:86:ab:da:05:2e:9e:
95:35:fa:d5:f0:be:8b:69:66:1e:66:50:05:3a:f9:10:a8:35:
dd:e3:c6:65:fb:e9:ae:b0:1c:eb:34:26:5e:95:6e:ec:da:0f:
bf:0c:d7:79:9c:8f:ff:c0:b8:4b:1e:6b:10:42:42:c7:70:51:
d6:5b:72:1f:26:20:3a:6e:8d:1d:4b:8f:56:6c:c6:65:d4:10:
0b:bf:57:29:69:92:6f:5f:a8:dc:4a:e9:f8:f3:d2:44:ab:be:
45:ac:69:3c:2f:49:d8:9f:1b:c8:60:61:63:05:85:55:24:74:
d9:19:b0:40:79:1d:83:f6:eb:3b:a5:b5:13:d9:4a:66:22:69:
3e:88:b0:0c:be:fb:e6:c8:f1:34:2e:3a:53:fc:23:47:98:c9:
46:1f:2a:65:1e:b9:52:27:84:65:03:53:a5:c0:55:d8:b6:16:
bc:ff:ad:43:9c:97:3d:27:73:9b:d4:11:55:46:e5:e3:e0:4c:
52:1e:d6:c9:05:70:91:1d:44:35:0c:2c:6c:23:c6:3c:1e:eb:
32:0b:c5:f4:92:06:1e:82:70:8a:d2:29:b3:67:37:30:47:03:
d7:e1:02:82:5a:59:eb:a5:37:0f:95:cb:95:9f:7e:b8:18:ce:
bd:4d:26:c2
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF
MEY0MDU1MzAwHhcNMjQwOTEwMDgwNjEyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NmRmZmRmMy1jOTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxl9As2AcyIDZWnbEhq1zr0zpz7qoHlCMuWmA17vrLbZe6iM/4yaYx59j6geG
3zAqgvs4gIpKzs7ReaMNb0m4NjJb4wyVPOQBZfjxdkcwcy6D7CfaiHEE4ZXvEB/p
eukmqLT8wttL/yPgoY5sS7Om4NEhBb2aLZne6pNtRbW96OXvIiWH7QklA/s1On1/
j2ZSA6NVdsxeCdPBibkr5jPEwnm9k2Oycv1AdSNxreOCqiaKu2NDAVEFBsoIa98y
gRBshAmERMhTL0pMfZTrWiGuBOTHjvSoqzVJY5r+7zYXV6G96Xhj5fjyBT19h0Cy
I7vVf+x+Aoo78vVYnz7j8huSUwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBN7LduR
XAzHDxvzC4xgu2VfFoXHMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1
ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEY4QjEvN0Q1NEEwQ0FCNTg2MTFFOUFBNUY0RDY1QzRGOUFFMDIvRkFBQzcwOTg0
MjQ5MTFFRkFCQkM3RDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnhuEwDwQCAAIwCQMHACABDffVADANBgkqhkiG9w0BAQsF
AAOCAQEAmKijVKlu5+iGRHmOhqvaBS6elTX61fC+i2lmHmZQBTr5EKg13ePGZfvp
rrAc6zQmXpVu7NoPvwzXeZyP/8C4Sx5rEEJCx3BR1ltyHyYgOm6NHUuPVmzGZdQQ
C79XKWmSb1+o3Erp+PPSRKu+RaxpPC9J2J8byGBhYwWFVSR02RmwQHkdg/brO6W1
E9lKZiJpPoiwDL775sjxNC46U/wjR5jJRh8qZR65UieEZQNTpcBV2LYWvP+tQ5yX
PSdzm9QRVUbl4+BMUh7WyQVwkR1ENQwsbCPGPB7rMgvF9JIGHoJwitIps2c3MEcD
1+ECglpZ66U3D5XLlZ9+uBjOvU0mwg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:21 2025 by rpki-client