Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/A43B3718ABC111E9A200115CC4F9AE02.roa
File: A43B3718ABC111E9A200115CC4F9AE02.roa (raw, json)
Hash identifier: rc2HKldu1pWCNCmvoKIq756wtH7kDxYrdw5/oSGbQ3M=
Subject key identifier: 98:69:2E:AC:EC:A0:66:7A:CE:8D:D9:9F:57:B1:59:7A:07:93:1F:32
Certificate issuer: /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
Certificate serial: 0D55
Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/A43B3718ABC111E9A200115CC4F9AE02.roa
Signing time: Tue 16 Apr 2024 18:57:19 +0000
ROA not before: Tue 16 Apr 2024 18:57:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59342
IP address blocks: 103.229.104.0/22 maxlen: 22
103.229.104.0/23 maxlen: 23
103.229.104.0/24 maxlen: 24
103.229.105.0/24 maxlen: 24
103.229.106.0/23 maxlen: 23
103.229.106.0/24 maxlen: 24
103.229.107.0/24 maxlen: 24
103.252.176.0/24 maxlen: 24
103.252.177.0/24 maxlen: 24
103.252.178.0/24 maxlen: 24
103.252.179.0/24 maxlen: 24
2400:bd40::/32 maxlen: 32
2400:bd40::/34 maxlen: 34
2400:bd40:4000::/34 maxlen: 34
2400:bd40:8000::/34 maxlen: 34
2400:bd40:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3413 (0xd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62
Validity
Not Before: Apr 16 18:57:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=661eca0f-aeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:e4:eb:17:38:ea:18:01:46:c7:d3:b8:f1:
fe:26:86:ab:e3:0f:b4:df:84:90:6f:30:cb:28:0c:
72:f8:07:d6:a8:04:30:d7:2f:7e:b8:aa:e4:df:67:
35:d5:55:a5:c3:d4:e9:fc:03:ff:90:05:fe:fb:9e:
ea:37:66:b7:0f:5d:ab:f5:e6:54:5d:e9:94:04:55:
d6:f0:28:a5:c3:f5:bc:b0:b9:51:f6:f2:5b:c1:00:
b6:1b:82:13:20:72:20:12:3c:c5:2e:8c:99:c4:dd:
69:12:2e:93:51:59:cd:db:b0:c4:21:b6:8d:24:c6:
60:21:9a:c0:fb:fe:d2:53:37:6d:26:08:eb:1e:10:
e6:3d:34:1c:33:8f:db:87:94:0c:bd:fe:06:e0:ed:
cf:a3:76:95:2c:be:18:76:1f:8e:57:45:52:70:93:
82:43:f9:bd:d6:7e:94:e1:42:d3:8c:84:21:f2:d3:
1a:f2:f7:bd:1f:8d:73:f7:8e:57:d9:17:61:4e:86:
70:68:2a:bd:af:4c:18:f8:7c:9c:80:75:d3:66:c3:
28:b1:8a:6f:c9:d0:3f:d3:33:36:eb:0f:cd:fe:50:
d3:15:55:21:c0:98:9b:d1:3e:08:1c:1c:6a:b0:a2:
0e:0b:ec:8d:a4:e2:fa:46:44:15:ff:9c:d9:ac:76:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:2E:AC:EC:A0:66:7A:CE:8D:D9:9F:57:B1:59:7A:07:93:1F:32
X509v3 Authority Key Identifier:
keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/A43B3718ABC111E9A200115CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.104.0/22
103.252.176.0/22
IPv6:
2400:bd40::/32
Signature Algorithm: sha256WithRSAEncryption
8d:6b:fd:a9:5b:5e:9e:f1:a2:f5:d5:3b:fc:74:91:7f:82:f9:
2e:ee:0c:a7:bd:ca:7e:b4:b8:db:2f:fb:c3:b7:a2:82:e3:75:
35:73:45:ca:4b:f9:ce:7f:8f:54:9f:36:31:74:05:2a:a7:be:
a1:21:4c:70:79:e6:19:23:f0:64:e9:d5:12:7d:41:fc:8a:ac:
fd:98:86:52:ef:94:79:7a:8e:5c:10:6a:c6:fb:bc:4b:22:45:
e5:3a:17:24:05:5c:ed:43:9e:3b:a9:49:83:92:2c:78:91:fa:
e7:e8:24:a5:83:4c:d6:0f:0d:3e:2e:5e:e0:68:e3:72:3f:b2:
ed:72:9e:2d:82:81:b0:f8:02:98:c1:ee:5f:9c:46:de:62:f7:
ef:fe:99:0f:25:f3:9a:42:82:ce:a6:c8:c5:41:8a:0e:48:33:
4c:12:b0:1e:14:28:96:77:26:6e:13:aa:f0:1c:0b:06:65:84:
40:4e:35:12:b2:6f:55:9d:2f:da:01:38:da:26:38:15:1f:63:
fd:d8:96:26:40:19:85:a5:3a:81:6d:60:c1:99:e3:c2:a0:18:
6a:00:e2:16:ad:e9:c4:41:ca:2a:20:fc:21:a7:78:2a:7f:c5:
86:6d:3e:00:e1:f4:c3:2d:8d:63:f9:92:2c:82:1f:52:74:9d:
64:9f:0b:55
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBENTcxMTAvBgNVBAUTKDdGMkIyRUI1QjhGNEY3OTU2ODk1RjEzMTJEOERDQzQy
MjM5QzlBNjIwHhcNMjQwNDE2MTg1NzE5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjFlY2EwZi1hZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbDk6xc46hgBRsfTuPH+Joar4w+034SQbzDLKAxy+AfWqAQw1y9+uKrk32c1
1VWlw9Tp/AP/kAX++57qN2a3D12r9eZUXemUBFXW8Cilw/W8sLlR9vJbwQC2G4IT
IHIgEjzFLoyZxN1pEi6TUVnN27DEIbaNJMZgIZrA+/7SUzdtJgjrHhDmPTQcM4/b
h5QMvf4G4O3Po3aVLL4Ydh+OV0VScJOCQ/m91n6U4ULTjIQh8tMa8ve9H41z945X
2RdhToZwaCq9r0wY+HycgHXTZsMosYpvydA/0zM26w/N/lDTFVUhwJib0T4IHBxq
sKIOC+yNpOL6RkQV/5zZrHahbwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJhpLqzs
oGZ6zo3Zn1exWXoHkx8yMB8GA1UdIwQYMBaAFH8rLrW49PeVaJXxMS2NzEIjnJpi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ1Ny85RkQyQzlEMEE5
MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1Vm9sZkV4TFkzTVFpT2Nt
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z5c3V0YmowOTVWb2xmRXhMWTNNUWlPY21tSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTBENTcvOUZEMkM5RDBBOTE4MTFFOThDM0VDMjRGQzRGOUFFMDIvQTQzQjM3MThB
QkMxMTFFOUEyMDAxMTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJn5WgDBAJn/LAwDQQCAAIwBwMFACQAvUAwDQYJKoZIhvcN
AQELBQADggEBAI1r/albXp7xovXVO/x0kX+C+S7uDKe9yn60uNsv+8O3ooLjdTVz
RcpL+c5/j1SfNjF0BSqnvqEhTHB55hkj8GTp1RJ9QfyKrP2YhlLvlHl6jlwQasb7
vEsiReU6FyQFXO1DnjupSYOSLHiR+ufoJKWDTNYPDT4uXuBo43I/su1yni2CgbD4
ApjB7l+cRt5i9+/+mQ8l85pCgs6myMVBig5IM0wSsB4UKJZ3Jm4TqvAcCwZlhEBO
NRKyb1WdL9oBONomOBUfY/3YliZAGYWlOoFtYMGZ48KgGGoA4hat6cRByiog/CGn
eCp/xYZtPgDh9MMtjWP5kiyCH1J0nWSfC1U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:21 2025 by rpki-client