Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa
File: 10EB4F2CC04811ECA5D31D72C4F9AE02.roa (raw, json)
Hash identifier: e7kmKfmvHJritB3ZOiTxFs45wUmPvKdNCszQgaIQpPg=
Subject key identifier: F1:D4:57:6D:CB:4C:20:B7:56:57:EC:14:4B:97:4A:64:E9:90:CC:E7
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4545
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:02 +0000
ROA not before: Thu 05 Sep 2024 03:32:02 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131401
IP address blocks: 103.228.20.0/22 maxlen: 24
2001:df0:8380::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17733 (0x4545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:32:02 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92631-7268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:ea:a0:92:40:02:cf:a4:f7:fb:48:30:69:
e2:d9:98:6a:ec:c9:e4:b9:ff:67:36:0f:7d:60:b8:
ff:b8:08:0c:05:e2:76:88:54:0d:3e:da:f2:df:26:
3d:d8:b9:3e:42:3b:7c:b5:6a:68:75:c7:70:7f:fd:
bd:a6:e3:45:32:cc:47:ad:54:88:5e:a2:3f:5d:f5:
23:43:70:3e:73:27:e2:11:57:d5:b2:c5:b6:60:ef:
45:0b:5e:8a:2f:95:38:e8:d2:78:35:7a:bd:9b:90:
3a:56:61:80:95:da:ac:ac:06:68:1a:53:89:40:46:
11:12:26:f1:05:e6:9c:85:44:43:b2:a8:c9:a2:91:
25:67:03:65:89:de:32:48:6c:a4:ef:d1:55:b1:2a:
85:93:af:c2:bd:89:26:3c:8e:5b:cb:31:a5:3a:fa:
75:f6:f1:ba:f1:8f:18:87:58:f9:ff:a0:38:fa:9b:
e7:44:47:82:1b:f9:60:b0:d6:6f:1b:bd:9d:c2:2b:
cb:51:ec:fb:36:81:5a:f9:8b:40:a1:10:7c:01:b5:
5e:a5:43:a1:dc:8e:79:51:f7:6c:90:31:f9:13:18:
ca:aa:e8:2d:36:15:a9:1a:fc:4d:08:54:6e:38:ba:
7b:b1:cb:13:14:fd:b9:66:7b:3f:10:50:47:80:c4:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:57:6D:CB:4C:20:B7:56:57:EC:14:4B:97:4A:64:E9:90:CC:E7
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.228.20.0/22
IPv6:
2001:df0:8380::/48
Signature Algorithm: sha256WithRSAEncryption
59:8c:63:23:04:85:bb:0e:93:c9:9e:f8:59:b0:6e:cf:a7:64:
89:5d:a0:89:6f:0f:09:94:4b:84:64:97:44:b9:0f:7d:7e:b0:
23:58:f2:18:40:a0:26:f6:ef:d6:77:8f:b2:5c:c9:6c:af:fb:
52:1e:60:59:d0:5f:bc:04:c1:32:3c:27:d9:4a:83:d1:59:68:
12:e6:9f:55:45:e3:3d:2b:82:35:bd:35:2c:60:19:81:58:79:
b2:b6:a6:cc:bb:a3:17:1e:e4:f9:0a:f6:20:da:d1:88:6c:2f:
0d:d1:bf:b0:04:25:25:a5:5a:18:a2:04:3f:7b:e3:6d:19:ca:
10:05:f5:cf:2f:d4:3a:89:82:9d:3f:f8:91:76:e4:6b:17:64:
f9:e9:59:51:42:07:b1:db:5c:87:5e:08:34:4d:66:7e:5f:89:
dd:d2:de:59:ae:ac:04:ee:66:45:6e:78:2a:a8:99:56:ad:15:
8e:12:78:34:4f:ba:75:72:76:be:f6:d0:ed:be:27:03:4b:29:
29:7d:f6:88:23:e4:60:df:69:ed:b1:44:87:81:7d:dc:cf:4d:
ca:fc:86:79:d1:ec:92:1e:48:26:43:ee:f2:72:bb:1f:a1:fa:
96:9a:cb:25:09:44:ee:7a:47:00:b7:b4:9c:2b:95:23:6d:7a:
9e:50:d0:27
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICRUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjAyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjYzMS03MjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3gLqoJJAAs+k9/tIMGni2Zhq7Mnkuf9nNg99YLj/uAgMBeJ2iFQNPtry3yY9
2Lk+Qjt8tWpodcdwf/29puNFMsxHrVSIXqI/XfUjQ3A+cyfiEVfVssW2YO9FC16K
L5U46NJ4NXq9m5A6VmGAldqsrAZoGlOJQEYREibxBeachURDsqjJopElZwNlid4y
SGyk79FVsSqFk6/CvYkmPI5byzGlOvp19vG68Y8Yh1j5/6A4+pvnREeCG/lgsNZv
G72dwivLUez7NoFa+YtAoRB8AbVepUOh3I55UfdskDH5ExjKqugtNhWpGvxNCFRu
OLp7scsTFP25Zns/EFBHgMRcSwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPHUV23L
TCC3VlfsFEuXSmTpkMznMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTBFQjRGMkND
MDQ4MTFFQ0E1RDMxRDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAJn5BQwDwQCAAIwCQMHACABDfCDgDANBgkqhkiG9w0BAQsF
AAOCAQEAWYxjIwSFuw6TyZ74WbBuz6dkiV2giW8PCZRLhGSXRLkPfX6wI1jyGECg
Jvbv1nePslzJbK/7Uh5gWdBfvATBMjwn2UqD0VloEuafVUXjPSuCNb01LGAZgVh5
sramzLujFx7k+Qr2INrRiGwvDdG/sAQlJaVaGKIEP3vjbRnKEAX1zy/UOomCnT/4
kXbkaxdk+elZUUIHsdtch14INE1mfl+J3dLeWa6sBO5mRW54KqiZVq0VjhJ4NE+6
dXJ2vvbQ7b4nA0spKX32iCPkYN9p7bFEh4F93M9NyvyGedHskh5IJkPu8nK7H6H6
lprLJQlE7npHALe0nCuVI216nlDQJw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:32 2025 by rpki-client