Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa
File: 27A298A00C6C11EC82638A40C4F9AE02.roa (raw, json)
Hash identifier: 2kQLQw6kE7NSPMlRLkoH5WBQYX+DAijxoh/54ahkGGs=
Subject key identifier: 5C:4A:0F:50:5E:74:F6:E5:75:76:B6:EB:D9:70:06:E0:41:F2:68:01
Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial: 0F50
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa
Signing time: Thu 28 Nov 2024 17:36:12 +0000
ROA not before: Thu 28 Nov 2024 17:36:12 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 9009
IP address blocks: 103.131.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3920 (0xf50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Validity
Not Before: Nov 28 17:36:12 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6748aa0c-fe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3a:ce:f5:f5:18:c5:9b:d2:41:c9:6c:9c:9a:
71:89:05:f2:d7:e8:6f:12:6b:b7:8a:b3:ea:86:02:
b5:53:c3:0e:16:b5:7f:29:de:c4:a4:e1:cc:4d:40:
e3:df:91:5f:b5:55:2f:95:9d:16:8a:a0:c9:f4:ea:
a1:66:0d:d0:58:0a:f5:92:cb:51:ff:6b:c1:6e:42:
72:bf:b5:b0:7b:ec:21:9c:ee:fd:e8:28:a9:0d:a8:
31:ce:0e:7d:d7:31:1d:e3:49:03:48:aa:17:c6:57:
87:61:62:b7:3d:96:24:62:50:d6:bd:62:28:68:dd:
98:21:93:20:53:b2:ab:6e:b4:93:1b:27:fd:cd:02:
6d:43:e2:bd:29:08:61:c2:18:9c:a1:a1:05:33:09:
9c:ea:dd:f3:aa:31:5e:4f:4c:d8:56:22:5d:a1:2b:
69:6f:90:a3:44:30:81:6a:44:d1:1f:9c:49:b6:e3:
5a:c4:45:cf:46:3f:bd:c7:9c:40:47:39:7b:c6:67:
0a:f5:c1:15:20:76:61:5f:bb:c3:1c:6d:7e:0a:54:
55:10:e3:58:32:a9:44:88:49:b3:a6:2b:58:60:98:
c7:71:17:fe:de:58:e0:e9:a1:2d:a4:55:0f:47:09:
06:73:5e:76:57:5e:55:e7:4a:fb:c8:29:1b:a5:c3:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:0F:50:5E:74:F6:E5:75:76:B6:EB:D9:70:06:E0:41:F2:68:01
X509v3 Authority Key Identifier:
keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e6:5f:fd:8c:cd:4b:d4:52:0d:23:b0:0b:fc:0d:11:ee:db:
75:01:8d:79:64:5d:26:a8:e8:df:77:ef:62:3f:f6:3b:67:8a:
38:4c:fa:9b:9a:a3:12:3f:16:3e:e3:40:61:ae:17:59:6c:f1:
c1:68:38:a9:7b:ab:75:a3:a2:01:0d:78:c3:c1:71:d0:25:c7:
01:3c:d5:62:82:b5:44:01:ac:60:b3:69:bd:d8:b7:cb:4f:e7:
b1:7c:d5:b6:d2:c8:f5:f2:8f:d9:2b:20:69:57:3b:7e:93:6e:
d9:a7:01:66:12:82:46:ab:e2:95:27:c6:8c:4f:d8:84:2e:73:
cb:81:90:09:30:ba:b2:9e:ed:68:88:db:ef:5b:81:e8:7a:29:
e2:30:d7:3b:48:d6:60:82:3f:83:26:1a:9f:0c:a1:26:f7:f8:
66:b7:4d:fa:16:d9:34:45:5c:a9:f5:32:89:71:53:b1:30:de:
ef:9e:54:ba:05:79:d0:98:b5:e4:3e:83:b2:d4:57:51:61:59:
42:70:f6:5a:38:14:8e:d3:f5:00:b1:34:c5:08:f6:76:cd:80:
7f:54:3a:12:38:88:02:c1:d1:ee:95:7b:a9:98:6c:c3:83:66:
51:09:f2:14:16:d4:09:51:63:2e:ba:ca:d6:f5:2d:f1:15:93:
73:81:1f:4a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky
NkM0NUM0ODQwHhcNMjQxMTI4MTczNjEyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQ4YWEwYy1mZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9zrO9fUYxZvSQclsnJpxiQXy1+hvEmu3irPqhgK1U8MOFrV/Kd7EpOHMTUDj
35FftVUvlZ0WiqDJ9OqhZg3QWAr1kstR/2vBbkJyv7Wwe+whnO796CipDagxzg59
1zEd40kDSKoXxleHYWK3PZYkYlDWvWIoaN2YIZMgU7KrbrSTGyf9zQJtQ+K9KQhh
whicoaEFMwmc6t3zqjFeT0zYViJdoStpb5CjRDCBakTRH5xJtuNaxEXPRj+9x5xA
Rzl7xmcK9cEVIHZhX7vDHG1+ClRVEONYMqlEiEmzpitYYJjHcRf+3ljg6aEtpFUP
RwkGc152V15V50r7yCkbpcOFlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFxKD1Be
dPbldXa269lwBuBB8mgBMB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC
M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTRFNTEvODlGODZGMEE1QjNCMTFFOTg2OUFBNjQxQzRGOUFFMDIvMjdBMjk4QTAw
QzZDMTFFQzgyNjM4QTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABng+swDQYJKoZIhvcNAQELBQADggEBAC3mX/2MzUvUUg0j
sAv8DRHu23UBjXlkXSao6N9372I/9jtnijhM+puaoxI/Fj7jQGGuF1ls8cFoOKl7
q3WjogENeMPBcdAlxwE81WKCtUQBrGCzab3Yt8tP57F81bbSyPXyj9krIGlXO36T
btmnAWYSgkar4pUnxoxP2IQuc8uBkAkwurKe7WiI2+9bgeh6KeIw1ztI1mCCP4Mm
Gp8MoSb3+Ga3TfoW2TRFXKn1MolxU7Ew3u+eVLoFedCYteQ+g7LUV1FhWUJw9lo4
FI7T9QCxNMUI9nbNgH9UOhI4iALB0e6Ve6mYbMODZlEJ8hQW1AlRYy66ytb1LfEV
k3OBH0o=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:16:49 2025 by rpki-client