Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa
File: BEB276EECCE311EAA397205EC4F9AE02.roa (raw, json)
Hash identifier: jgTYi57dnGXhFEZx8F96LVtuauTCfgLefdSP5U2KTns=
Subject key identifier: 53:49:E5:C4:F2:9E:39:DD:6B:CA:03:22:70:DC:D1:61:81:F0:F0:A2
Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
Certificate serial: 07A5
Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa
Signing time: Tue 16 Jul 2024 21:39:34 +0000
ROA not before: Tue 16 Jul 2024 21:39:34 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 45437
IP address blocks: 103.57.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
Validity
Not Before: Jul 16 21:39:34 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6696e896-de2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:a3:55:97:47:ea:f8:c6:e4:af:9c:d8:e9:
70:6a:80:96:a8:1a:25:4c:21:7f:e7:ea:e8:e2:ce:
b1:8f:a5:8a:38:91:26:29:71:3f:58:8e:91:bd:8e:
69:71:a3:6a:71:64:5c:a3:85:97:00:92:e2:20:7b:
99:5e:fc:17:41:0f:49:b4:f4:d5:a9:f2:f8:e1:cb:
61:b7:bb:1b:66:f7:f1:f2:63:cf:68:ac:d6:bb:07:
43:89:a3:a2:e8:27:26:f4:a0:76:ff:9f:f8:30:48:
31:c6:a1:8a:d5:57:0c:36:3f:2e:f8:9b:82:d8:30:
62:95:ad:1a:b1:ac:ac:fb:41:45:f0:9f:89:12:a2:
c6:70:77:85:a9:74:3f:14:5f:db:bf:0c:34:2c:f3:
5f:c8:2d:24:a7:66:e1:d6:2a:69:f6:93:8f:76:ac:
5f:9e:c9:d1:8d:85:54:7c:d3:51:48:ad:3a:02:83:
f1:0d:08:4c:59:b2:d3:00:a2:65:ac:60:7e:00:55:
a5:ea:be:24:c6:f7:75:01:17:b4:99:9f:16:08:2f:
c8:6a:b6:47:09:e1:d6:86:9e:05:30:32:85:7f:18:
6d:6f:85:f2:eb:c7:7d:c1:db:35:0f:f4:aa:c3:3e:
38:5a:bf:44:d7:65:38:d2:4f:89:ca:84:f4:80:bb:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:49:E5:C4:F2:9E:39:DD:6B:CA:03:22:70:DC:D1:61:81:F0:F0:A2
X509v3 Authority Key Identifier:
keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.57.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:95:15:c3:9f:28:b2:be:6c:99:7b:f2:1b:d8:27:4f:80:4d:
05:a0:5b:b8:e5:3f:17:8e:f6:bc:30:7d:11:7d:f7:c5:19:aa:
5b:f0:61:b7:60:64:f0:89:d4:39:7b:15:eb:92:04:4b:62:8c:
84:32:e4:35:a7:ab:50:b1:88:41:72:f1:4c:c4:26:a0:f4:37:
52:51:b3:fe:2c:e9:9a:57:06:62:14:e0:2d:aa:45:c0:74:80:
7f:f1:86:0e:ae:79:c9:b4:60:97:60:d1:3f:3a:ec:6f:66:6b:
90:86:b1:d3:45:61:78:08:79:be:c9:e8:68:4e:c1:65:34:36:
40:d2:56:ea:3d:3c:23:c3:b0:d8:de:44:40:29:0b:7f:9f:fb:
05:23:27:1b:1a:f9:21:78:22:39:5f:34:6e:78:26:95:b8:bc:
eb:ac:30:55:68:92:d0:57:f7:90:74:71:c6:ac:79:6e:9d:0a:
5b:20:45:52:c4:55:fa:05:ff:eb:5e:4b:b6:7e:7e:08:78:68:
d6:84:bc:e3:a9:1b:40:c3:7f:ce:3f:dd:ae:81:b7:90:41:8c:
3f:cb:1e:12:bf:49:8c:5a:97:97:e4:b6:52:c6:fc:65:9f:d0:
f2:c9:6d:21:fc:10:45:21:06:31:7b:5a:85:ae:60:7f:9b:80:
a2:c9:b0:65
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5
Q0UyRkUzMDMwHhcNMjQwNzE2MjEzOTM0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njk2ZTg5Ni1kZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYqjVZdH6vjG5K+c2OlwaoCWqBolTCF/5+ro4s6xj6WKOJEmKXE/WI6RvY5p
caNqcWRco4WXAJLiIHuZXvwXQQ9JtPTVqfL44ctht7sbZvfx8mPPaKzWuwdDiaOi
6Ccm9KB2/5/4MEgxxqGK1VcMNj8u+JuC2DBila0asays+0FF8J+JEqLGcHeFqXQ/
FF/bvww0LPNfyC0kp2bh1ipp9pOPdqxfnsnRjYVUfNNRSK06AoPxDQhMWbLTAKJl
rGB+AFWl6r4kxvd1ARe0mZ8WCC/IarZHCeHWhp4FMDKFfxhtb4Xy68d9wds1D/Sq
wz44Wr9E12U40k+JyoT0gLsC1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFNJ5cTy
njnda8oDInDc0WGB8PCiMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND
RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REMwQzAvMDIyREJDQTRDQ0UzMTFFQUFGNzNGQzVEQzRGOUFFMDIvQkVCMjc2RUVD
Q0UzMTFFQUEzOTcyMDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnOQMwDQYJKoZIhvcNAQELBQADggEBAF+VFcOfKLK+bJl7
8hvYJ0+ATQWgW7jlPxeO9rwwfRF998UZqlvwYbdgZPCJ1Dl7FeuSBEtijIQy5DWn
q1CxiEFy8UzEJqD0N1JRs/4s6ZpXBmIU4C2qRcB0gH/xhg6uecm0YJdg0T867G9m
a5CGsdNFYXgIeb7J6GhOwWU0NkDSVuo9PCPDsNjeREApC3+f+wUjJxsa+SF4Ijlf
NG54JpW4vOusMFVoktBX95B0ccaseW6dClsgRVLEVfoF/+teS7Z+fgh4aNaEvOOp
G0DDf84/3a6Bt5BBjD/LHhK/SYxal5fktlLG/GWf0PLJbSH8EEUhBjF7WoWuYH+b
gKLJsGU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:04:16 2025 by rpki-client