Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/0218C21E261711EE9AEA7674C4F9AE02.roa
File: 0218C21E261711EE9AEA7674C4F9AE02.roa (raw, json)
Hash identifier: f3Z+Plktu1vEK5J7Cr0wnZHXTAmT6g0Q0RBssxjNlNw=
Subject key identifier: FA:43:58:5B:64:DD:FC:F3:40:D1:33:B1:3F:A1:77:C5:00:60:F6:E1
Certificate issuer: /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Certificate serial: AA
Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/0218C21E261711EE9AEA7674C4F9AE02.roa
Signing time: Mon 03 Jun 2024 07:48:04 +0000
ROA not before: Mon 03 Jun 2024 07:48:04 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9230
IP address blocks: 103.137.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Validity
Not Before: Jun 3 07:48:04 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665d7534-b793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f7:91:94:bc:5f:20:76:af:b0:9e:6d:d6:c0:
f0:d1:b7:6b:50:20:e3:0b:3d:12:1d:16:00:25:df:
60:eb:76:57:18:85:d5:51:27:92:96:88:63:96:70:
81:dd:df:8d:e3:c8:2d:aa:62:91:6a:86:50:fc:20:
65:03:f6:2f:12:76:4d:80:81:80:23:91:9c:a1:c3:
fe:56:75:77:a7:e7:30:7f:4e:bd:c1:32:47:7c:0a:
9b:16:60:2d:eb:6c:f9:c9:fb:09:21:1d:b1:87:04:
91:ec:b0:3b:7c:5d:3a:ee:4d:01:d8:82:c4:ee:a2:
0a:c6:6b:a4:6c:5a:53:b8:b8:b4:6d:8b:9e:d5:3f:
d1:48:42:cb:50:e9:8b:12:27:9d:d6:4e:74:17:5c:
d7:c0:e0:5b:9b:e1:a9:4b:18:c6:23:32:45:28:66:
98:ec:2f:85:dd:78:75:77:7f:d9:53:fc:94:a1:6b:
b5:4a:e1:a4:9d:3c:17:40:ec:75:60:ca:5b:f8:0b:
11:71:fc:10:70:80:b8:31:95:86:57:7a:b1:ce:47:
cd:02:88:5b:39:6a:3a:9f:7c:39:a2:36:ab:b2:c5:
27:81:07:62:c6:c1:a6:4e:64:d5:da:18:b8:b4:84:
ec:ce:06:81:26:cc:01:eb:38:8d:e0:04:da:4d:0f:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:43:58:5B:64:DD:FC:F3:40:D1:33:B1:3F:A1:77:C5:00:60:F6:E1
X509v3 Authority Key Identifier:
keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/0218C21E261711EE9AEA7674C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2d:7e:04:2d:56:26:00:25:95:4d:2b:2f:01:20:5c:70:c7:
b6:df:91:32:74:97:a0:ad:db:92:31:ed:0d:e9:52:d7:0b:a9:
06:b1:36:48:94:fa:cd:46:ab:74:2b:d9:d9:ed:4e:be:78:6f:
17:4d:f2:64:3e:79:33:67:ac:c7:4e:32:ec:85:0d:14:f8:bf:
ac:53:e8:d5:ac:ea:2f:54:86:04:80:a4:de:ab:c0:6b:c1:b8:
1e:ab:25:7a:81:d3:4c:1b:02:cd:c8:65:11:4a:fb:e7:bb:4d:
6d:27:cd:2b:e1:70:6f:00:3d:f1:63:d5:8a:66:5c:ca:4b:43:
62:94:ac:db:22:48:4d:6b:29:ba:7a:11:23:40:1b:56:59:65:
bc:08:70:3a:28:37:d8:95:97:f9:de:02:85:e4:43:c6:59:d6:
fd:b4:a9:c6:75:20:1b:64:a9:a8:be:26:de:9f:aa:0e:3c:71:
b4:55:08:39:29:f0:97:74:6b:9f:23:4e:b2:57:e5:1b:24:b9:
b9:28:51:5f:2c:2a:2d:a1:1c:d4:15:e7:66:7c:78:a9:a3:60:
bd:81:93:5f:35:f4:da:7c:f8:19:7b:e6:20:f5:34:dd:00:43:
94:86:ee:5c:e9:1a:3e:f9:38:4d:0e:a7:14:8f:70:53:e7:76:
a4:23:b4:c8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBM0IxMTAvBgNVBAUTKDQyQUMxODg3REYyQzlGRjQ2OEMwMEVCQzA2NTU5QUUx
NzkwQjdENDEwHhcNMjQwNjAzMDc0ODA0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVkNzUzNC1iNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4feRlLxfIHavsJ5t1sDw0bdrUCDjCz0SHRYAJd9g63ZXGIXVUSeSlohjlnCB
3d+N48gtqmKRaoZQ/CBlA/YvEnZNgIGAI5GcocP+VnV3p+cwf069wTJHfAqbFmAt
62z5yfsJIR2xhwSR7LA7fF067k0B2ILE7qIKxmukbFpTuLi0bYue1T/RSELLUOmL
Eied1k50F1zXwOBbm+GpSxjGIzJFKGaY7C+F3Xh1d3/ZU/yUoWu1SuGknTwXQOx1
YMpb+AsRcfwQcIC4MZWGV3qxzkfNAohbOWo6n3w5ojarssUngQdixsGmTmTV2hi4
tITszgaBJswB6ziN4ATaTQ9SGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPpDWFtk
3fzzQNEzsT+hd8UAYPbhMB8GA1UdIwQYMBaAFEKsGIffLJ/0aMAOvAZVmuF5C31B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUEzQi84OUQwMDYwQTI2
MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25fUm93QTY4QmxXYTRYa0xm
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Fxd1loOThzbl9Sb3dBNjhCbFdhNFhrTGZVRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVBM0IvODlEMDA2MEEyNjE2MTFFRUJFNzYxMDVDQzRGOUFFMDIvMDIxOEMyMUUy
NjE3MTFFRTlBRUE3Njc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnicQwDQYJKoZIhvcNAQELBQADggEBAJ8tfgQtViYAJZVN
Ky8BIFxwx7bfkTJ0l6Ct25Ix7Q3pUtcLqQaxNkiU+s1Gq3Qr2dntTr54bxdN8mQ+
eTNnrMdOMuyFDRT4v6xT6NWs6i9UhgSApN6rwGvBuB6rJXqB00wbAs3IZRFK++e7
TW0nzSvhcG8APfFj1YpmXMpLQ2KUrNsiSE1rKbp6ESNAG1ZZZbwIcDooN9iVl/ne
AoXkQ8ZZ1v20qcZ1IBtkqai+Jt6fqg48cbRVCDkp8Jd0a58jTrJX5RskubkoUV8s
Ki2hHNQV52Z8eKmjYL2Bk1819Np8+Bl75iD1NN0AQ5SG7lzpGj75OE0OpxSPcFPn
dqQjtMg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:36:09 2025 by rpki-client