Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/AE01B980BE8E11EF8D54D314C4F9AE02.roa
File: AE01B980BE8E11EF8D54D314C4F9AE02.roa (raw, json)
Hash identifier: jySKdxVLv5VdAbGmxyhSsg6Ei5JER4C+wCyjmoyWcJg=
Subject key identifier: 84:A1:A4:DA:0C:B6:34:B2:42:9D:C4:45:23:5A:D4:09:6F:33:A6:64
Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Certificate serial: A2
Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/AE01B980BE8E11EF8D54D314C4F9AE02.roa
Signing time: Fri 20 Dec 2024 04:56:36 +0000
ROA not before: Fri 20 Dec 2024 04:56:36 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 63150
IP address blocks: 103.219.192.0/24 maxlen: 24
103.219.193.0/24 maxlen: 24
103.219.194.0/24 maxlen: 24
103.219.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Validity
Not Before: Dec 20 04:56:36 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6764f903-d212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:24:42:38:5d:f3:4a:31:0e:32:09:30:3c:
22:c6:cf:7e:a1:3d:64:10:96:21:1f:95:ce:ff:ce:
27:8e:7d:d5:ba:eb:e5:63:b8:1b:4e:6b:8a:28:32:
44:a0:38:e5:b9:c1:0a:f8:f4:59:ec:ab:3e:5f:7d:
68:47:75:94:d1:e4:77:05:15:b1:05:78:ab:18:60:
50:ad:e9:ba:8a:45:5c:d0:f9:24:99:a0:bf:65:e0:
05:b1:7b:7b:6a:43:14:3e:1c:a0:ee:10:d0:b6:14:
3b:0b:8f:d4:2b:02:fd:04:2a:42:3a:d4:88:33:de:
d1:44:16:e5:9a:0b:02:7a:db:0c:0c:15:60:b4:09:
5c:da:f7:a3:ac:84:3c:b3:2b:2f:15:18:c3:0d:8b:
df:a5:4e:f6:8b:9d:9b:3f:dd:5f:ef:03:fa:8c:5b:
6f:be:bb:a4:3b:e3:f4:37:ac:aa:e3:49:d9:83:9a:
67:15:8d:18:d4:2e:e1:06:4b:da:eb:89:4f:38:bf:
5e:f2:0c:d6:70:49:b6:89:67:6d:35:e8:cd:ad:ef:
a8:7e:fb:67:bf:6b:fe:b3:4f:f1:98:81:d9:a2:97:
6c:89:21:45:aa:18:0f:38:bf:ab:0d:75:c1:d8:a8:
c0:f3:0e:74:3b:67:7b:58:3c:12:53:8c:38:d3:e9:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A1:A4:DA:0C:B6:34:B2:42:9D:C4:45:23:5A:D4:09:6F:33:A6:64
X509v3 Authority Key Identifier:
keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/AE01B980BE8E11EF8D54D314C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.219.192.0/22
Signature Algorithm: sha256WithRSAEncryption
71:bc:a4:0d:07:b6:5f:87:a0:55:99:64:68:58:1a:ea:84:fa:
70:4a:59:e3:ba:33:a7:61:49:9c:77:98:bc:21:04:29:9d:32:
04:ec:9c:74:3e:09:72:74:0a:55:aa:46:e6:3e:d9:75:64:9b:
b9:25:f5:d3:aa:ef:23:d7:c7:85:b1:0b:41:7c:c3:3c:69:da:
f8:61:41:0f:10:8b:7b:81:fd:93:a5:75:06:96:af:cf:25:5e:
98:a2:4a:7f:7e:cb:f0:c1:ac:50:14:a4:d2:1a:67:6d:54:b4:
b7:16:be:d8:65:8d:80:4c:57:bb:47:fe:a5:6e:01:14:9f:de:
ab:b1:3e:81:ef:b5:7d:e6:15:35:05:fe:6f:39:b4:49:e2:84:
25:c3:b7:f6:39:9d:43:f4:bc:7c:c1:93:3c:90:47:a6:77:6c:
da:8e:52:26:23:91:eb:0a:85:68:cf:a6:36:5d:1a:80:75:4f:
88:90:51:43:9f:25:45:98:da:ea:42:04:f2:cf:75:51:49:1f:
18:d8:f9:0e:5c:4e:ab:50:b6:c5:25:a7:86:ce:24:b7:a3:01:
19:e2:e3:33:93:b0:01:75:0f:92:06:51:be:2a:e1:35:64:9f:
87:75:e3:0e:77:8e:9f:29:c3:d2:9a:16:ba:b4:82:e9:fe:e9:
92:36:fa:dc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgzNDcxMTAvBgNVBAUTKDJBREJCNzFCMTE1MjNDQTMzOTJFNUYzN0Q5REM3NkIy
MTFEQkUwODMwHhcNMjQxMjIwMDQ1NjM2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY0ZjkwMy1kMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmuskQjhd80oxDjIJMDwixs9+oT1kEJYhH5XO/84njn3VuuvlY7gbTmuKKDJE
oDjlucEK+PRZ7Ks+X31oR3WU0eR3BRWxBXirGGBQrem6ikVc0PkkmaC/ZeAFsXt7
akMUPhyg7hDQthQ7C4/UKwL9BCpCOtSIM97RRBblmgsCetsMDBVgtAlc2vejrIQ8
sysvFRjDDYvfpU72i52bP91f7wP6jFtvvrukO+P0N6yq40nZg5pnFY0Y1C7hBkva
64lPOL9e8gzWcEm2iWdtNejNre+ofvtnv2v+s0/xmIHZopdsiSFFqhgPOL+rDXXB
2KjA8w50O2d7WDwSU4w40+n/JQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIShpNoM
tjSyQp3ERSNa1AlvM6ZkMB8GA1UdIwQYMBaAFCrbtxsRUjyjOS5fN9ncdrIR2+CD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODM0Ny9DM0U3MjE5MEY5
QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BLTTVMbDgzMmR4MnNoSGI0
SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t0dTNHeEZTUEtNNUxsODMyZHgyc2hIYjRJTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzgzNDcvQzNFNzIxOTBGOUE5MTFFRUE4MkE3OTFBQzRGOUFFMDIvQUUwMUI5ODBC
RThFMTFFRjhENTREMzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn28AwDQYJKoZIhvcNAQELBQADggEBAHG8pA0Htl+HoFWZ
ZGhYGuqE+nBKWeO6M6dhSZx3mLwhBCmdMgTsnHQ+CXJ0ClWqRuY+2XVkm7kl9dOq
7yPXx4WxC0F8wzxp2vhhQQ8Qi3uB/ZOldQaWr88lXpiiSn9+y/DBrFAUpNIaZ21U
tLcWvthljYBMV7tH/qVuARSf3quxPoHvtX3mFTUF/m85tEnihCXDt/Y5nUP0vHzB
kzyQR6Z3bNqOUiYjkesKhWjPpjZdGoB1T4iQUUOfJUWY2upCBPLPdVFJHxjY+Q5c
TqtQtsUlp4bOJLejARni4zOTsAF1D5IGUb4q4TVkn4d14w53jp8pw9KaFrq0gun+
6ZI2+tw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:33:50 2025 by rpki-client