Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa
File: CA4C06CA976711EAA651F944C4F9AE02.roa (raw, json)
Hash identifier: bloQYzrAn+4ONkIrVOLLF4mqOoi8QLeVq0prE6sonCo=
Subject key identifier: 09:2A:63:FA:20:6F:1F:AE:04:8F:23:D4:EE:A7:C4:56:21:68:00:85
Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial: 0885
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa
Signing time: Thu 04 Apr 2024 22:00:20 +0000
ROA not before: Thu 04 Apr 2024 22:00:20 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 138165
IP address blocks: 103.113.1.0/24 maxlen: 24
103.146.39.0/24 maxlen: 24
2407:40c0:2000::/36 maxlen: 36
2407:40c0:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Validity
Not Before: Apr 4 22:00:20 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660f22f4-0685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1f:60:d4:d8:db:cf:40:d2:e3:67:5e:d9:02:
7f:74:a7:df:68:b1:7f:77:d3:2d:8c:b6:f5:d0:f1:
65:6c:7d:61:1a:f3:c1:0e:4f:d4:02:32:2f:2f:ce:
f0:d6:67:ab:5c:7d:bb:c1:30:05:f1:f0:fd:47:5b:
bc:c5:42:bc:56:e7:02:5a:85:df:ca:59:87:8a:ff:
84:9c:8b:48:cc:fb:8c:b7:0d:76:01:14:a1:62:35:
8e:f7:93:d9:43:95:2a:65:9b:51:74:10:db:3b:39:
3e:7b:09:87:0f:f4:b0:9f:c7:a4:ad:d7:20:e7:e8:
c4:28:91:6f:94:82:f5:8f:7e:1e:f1:2f:51:1c:eb:
3b:7d:ed:2e:a2:1b:95:8a:c8:da:aa:91:d1:f7:46:
4c:b2:e3:b0:64:08:61:c2:b6:24:25:ff:92:5c:b5:
bb:4a:d3:ee:5b:8f:7d:2b:65:62:e2:80:a9:c0:ed:
70:a8:5d:fd:5d:23:1b:ca:76:ab:5e:85:db:cf:50:
35:98:53:5a:5d:e8:f9:26:4e:f3:59:23:65:4f:83:
81:b0:c5:9d:b0:85:9d:31:78:a7:d7:0a:f3:a7:5e:
36:fc:b9:5c:23:08:17:6e:93:fe:27:30:d9:af:29:
05:91:75:7a:9a:8e:19:2a:1e:17:a1:88:6a:77:7c:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2A:63:FA:20:6F:1F:AE:04:8F:23:D4:EE:A7:C4:56:21:68:00:85
X509v3 Authority Key Identifier:
keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.1.0/24
103.146.39.0/24
IPv6:
2407:40c0:2000::/36
2407:40c0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
9d:65:af:82:ce:bc:a0:9d:40:b0:53:6b:26:c1:d5:6f:fc:e4:
f0:44:f5:53:df:e5:2b:4e:b8:73:a3:d9:38:a6:6b:96:24:1b:
88:a8:b4:14:d7:63:f7:8b:dd:dd:9b:92:70:d5:64:6f:52:fe:
02:27:5e:17:9d:4a:e1:01:83:2c:e5:16:ee:f7:d3:25:53:29:
72:a2:51:eb:97:3e:2a:b5:0a:c5:bd:ea:42:7f:85:a1:81:f9:
2e:4e:3a:1a:4b:af:5a:33:81:74:d5:c0:6d:bd:56:de:1e:81:
bf:f6:f8:09:10:18:57:11:3a:4b:07:78:f6:8d:c4:62:ab:7c:
74:23:98:f2:0d:b0:9d:6c:f8:f5:e6:3a:93:fc:83:5b:4a:31:
f9:d9:71:b8:ea:36:8b:74:c6:32:21:00:99:2e:16:f7:c5:49:
71:51:cf:32:92:7a:4d:13:9a:d2:05:40:a1:b6:6a:b6:23:92:
7b:25:25:8a:39:c3:87:95:c6:84:65:df:33:d8:82:1c:7a:f3:
60:42:ea:78:5a:36:18:f1:7b:b6:18:9c:5f:69:46:3e:02:63:
94:e8:a4:58:0f:37:3d:3b:89:5f:91:d2:b5:8a:60:3d:53:72:
e1:7b:3a:b3:23:e2:fc:8e:df:1f:6c:dc:bb:92:57:c8:53:a8:
9d:0c:08:8c
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF
MjEzMjIzNDkwHhcNMjQwNDA0MjIwMDIwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBmMjJmNC0wNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8B9g1Njbz0DS42de2QJ/dKffaLF/d9MtjLb10PFlbH1hGvPBDk/UAjIvL87w
1merXH27wTAF8fD9R1u8xUK8VucCWoXfylmHiv+EnItIzPuMtw12ARShYjWO95PZ
Q5UqZZtRdBDbOzk+ewmHD/Swn8ekrdcg5+jEKJFvlIL1j34e8S9RHOs7fe0uohuV
isjaqpHR90ZMsuOwZAhhwrYkJf+SXLW7StPuW499K2Vi4oCpwO1wqF39XSMbynar
XoXbz1A1mFNaXej5Jk7zWSNlT4OBsMWdsIWdMXin1wrzp142/LlcIwgXbpP+JzDZ
rykFkXV6mo4ZKh4XoYhqd3x1QwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFAkqY/og
bx+uBI8j1O6nxFYhaACFMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3
NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg5NjYvM0VGMjI0MDI5NzY2MTFFQTlFQjQ5NTQyQzRGOUFFMDIvQ0E0QzA2Q0E5
NzY3MTFFQUE2NTFGOTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMBIEAgABMAwDBABncQEDBABnkicwFgQCAAIwEAMGBCQHQMAgAwYEJAdAwEAw
DQYJKoZIhvcNAQELBQADggEBAJ1lr4LOvKCdQLBTaybB1W/85PBE9VPf5StOuHOj
2Tima5YkG4iotBTXY/eL3d2bknDVZG9S/gInXhedSuEBgyzlFu730yVTKXKiUeuX
Piq1CsW96kJ/haGB+S5OOhpLr1ozgXTVwG29Vt4egb/2+AkQGFcROksHePaNxGKr
fHQjmPINsJ1s+PXmOpP8g1tKMfnZcbjqNot0xjIhAJkuFvfFSXFRzzKSek0TmtIF
QKG2arYjknslJYo5w4eVxoRl3zPYghx682BC6nhaNhjxe7YYnF9pRj4CY5TopFgP
Nz07iV+R0rWKYD1TcuF7OrMj4vyO3x9s3LuSV8hTqJ0MCIw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:21:05 2025 by rpki-client