Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/DF0A2BF4B15E11EE8E75695CC4F9AE02.roa
File: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (raw, json)
Hash identifier: ifElV/RPk0mQE4qHDp81rbb+SMhtNRCaJPD+Kvfk10M=
Subject key identifier: 75:93:57:ED:94:45:38:22:3E:DE:79:2E:29:65:99:7C:8D:F1:3E:A6
Certificate issuer: /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
Certificate serial: 06C8
Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/DF0A2BF4B15E11EE8E75695CC4F9AE02.roa
Signing time: Tue 31 Dec 2024 21:51:13 +0000
ROA not before: Tue 31 Dec 2024 21:51:13 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136429
IP address blocks: 103.158.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1736 (0x6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40
Validity
Not Before: Dec 31 21:51:13 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67746751-9a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:ff:ae:f8:9c:b3:71:b7:ba:49:69:39:e3:
e4:e5:5e:d6:b2:ef:97:b3:85:12:40:8b:18:ef:bc:
06:e1:ca:5e:47:95:7d:4f:88:94:8f:37:41:5b:30:
b6:a3:f0:7b:a3:66:c7:49:60:b7:96:27:74:a9:ce:
c2:47:2d:c6:c7:86:ac:a9:bf:51:e2:23:6c:0b:9e:
7b:8a:d3:7f:80:90:59:81:1f:be:8b:e5:c7:f1:ea:
3f:17:81:02:25:3e:c1:38:d3:66:51:7d:c3:4a:5c:
b5:91:df:db:cd:4e:5e:3a:7e:80:b2:43:16:48:f6:
bc:e6:e5:50:b4:ca:a3:5c:75:86:94:e3:2a:c7:16:
d2:b4:63:92:7f:68:37:33:74:b5:e2:b8:ec:83:05:
fb:e9:1c:1a:c1:36:18:2d:bf:90:f4:d9:f6:64:2f:
66:75:ad:79:17:50:a2:93:bf:66:00:f3:79:de:f9:
0f:6b:5c:5e:ec:40:0f:01:b2:2b:0d:b1:40:14:70:
20:8d:83:2f:2f:ff:a2:f0:c5:2e:70:74:60:83:a2:
5e:db:45:5f:9d:85:26:36:95:89:02:9e:11:b5:fd:
79:38:24:a0:81:3d:af:72:5b:a5:73:cd:84:35:47:
1b:b7:54:a6:4b:69:8d:f5:f0:6d:9b:c5:7f:db:60:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:93:57:ED:94:45:38:22:3E:DE:79:2E:29:65:99:7C:8D:F1:3E:A6
X509v3 Authority Key Identifier:
keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/DF0A2BF4B15E11EE8E75695CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.211.0/24
Signature Algorithm: sha256WithRSAEncryption
58:eb:64:0c:ff:4a:ab:5f:48:1d:ed:8f:0e:33:a5:4a:14:ef:
b3:d0:ba:a7:b4:c5:31:e9:3b:23:d7:2c:d9:da:0a:b5:7b:38:
ed:58:0c:ed:57:62:b3:cf:5b:1a:6c:a6:ba:70:f0:48:68:f4:
c5:cb:8c:21:f9:e6:f5:65:22:de:5c:6a:9b:4a:ea:ac:b6:49:
73:9f:e8:a6:83:50:92:30:0d:48:1d:92:3d:da:f9:68:be:46:
be:32:7c:72:9e:9d:fe:e3:f3:3b:2e:02:10:d5:bc:29:e0:a4:
83:a6:7a:1a:7b:2f:65:ba:d8:27:94:9a:d7:d4:49:13:f3:5a:
ad:47:98:11:14:16:84:d6:de:89:d7:ce:db:49:a0:22:25:24:
87:11:a7:9c:7e:f1:b3:fd:15:40:0b:2c:ac:8f:c9:42:ba:0c:
50:26:e4:ff:9f:0f:b1:89:c4:a2:02:c5:a9:e0:c7:23:d6:bb:
18:ef:16:27:75:c5:12:f1:66:13:0d:e4:35:5d:f5:16:52:ab:
98:b0:8d:e1:98:9f:d9:52:7f:1b:92:df:1e:b8:13:56:a6:54:
95:67:b3:1d:b5:e5:f4:c1:bd:4e:9d:c1:9a:bd:8f:1b:79:f1:
3e:d1:e0:1d:c8:76:4d:81:5b:b7:cc:54:ab:b6:82:7a:b3:9b:
88:1e:04:93
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ2OTIxMTAvBgNVBAUTKEFGRTVCM0NEMkRDNTY3QUI4QTU4RUIzOTgwRDVFNUU3
ODQyOTBBNDAwHhcNMjQxMjMxMjE1MTEzWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc0Njc1MS05YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz/P/rvics3G3uklpOePk5V7Wsu+Xs4USQIsY77wG4cpeR5V9T4iUjzdBWzC2
o/B7o2bHSWC3lid0qc7CRy3Gx4asqb9R4iNsC557itN/gJBZgR++i+XH8eo/F4EC
JT7BONNmUX3DSly1kd/bzU5eOn6AskMWSPa85uVQtMqjXHWGlOMqxxbStGOSf2g3
M3S14rjsgwX76RwawTYYLb+Q9Nn2ZC9mda15F1Cik79mAPN53vkPa1xe7EAPAbIr
DbFAFHAgjYMvL/+i8MUucHRgg6Je20VfnYUmNpWJAp4Rtf15OCSggT2vclulc82E
NUcbt1SmS2mN9fBtm8V/22DW7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHWTV+2U
RTgiPt55LillmXyN8T6mMB8GA1UdIwQYMBaAFK/ls80txWeriljrOYDV5eeEKQpA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY5Mi84ODVBMzJGRTQy
OTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2dUtXT3M1Z05YbDU0UXBD
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ItV3p6UzNGWjZ1S1dPczVnTlhsNTRRcENrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTQ2OTIvODg1QTMyRkU0Mjk0MTFFQjkwNDkxQTM0QzRGOUFFMDIvREYwQTJCRjRC
MTVFMTFFRThFNzU2OTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnntMwDQYJKoZIhvcNAQELBQADggEBAFjrZAz/SqtfSB3t
jw4zpUoU77PQuqe0xTHpOyPXLNnaCrV7OO1YDO1XYrPPWxpsprpw8Eho9MXLjCH5
5vVlIt5captK6qy2SXOf6KaDUJIwDUgdkj3a+Wi+Rr4yfHKenf7j8zsuAhDVvCng
pIOmehp7L2W62CeUmtfUSRPzWq1HmBEUFoTW3onXzttJoCIlJIcRp5x+8bP9FUAL
LKyPyUK6DFAm5P+fD7GJxKICxangxyPWuxjvFid1xRLxZhMN5DVd9RZSq5iwjeGY
n9lSfxuS3x64E1amVJVnsx215fTBvU6dwZq9jxt58T7R4B3Idk2BW7fMVKu2gnqz
m4geBJM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:07:19 2025 by rpki-client