Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/3B0E8BD2292211ED93341915C4F9AE02.roa
File: 3B0E8BD2292211ED93341915C4F9AE02.roa (raw, json)
Hash identifier: nIc0DzbDh/PwNmfiEtRIcpTiu7BnHHbJ2kvWsihcckg=
Subject key identifier: F0:63:32:95:49:70:99:00:C4:95:BD:07:9F:7D:FC:40:7E:70:40:42
Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial: 01B7
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/3B0E8BD2292211ED93341915C4F9AE02.roa
Signing time: Wed 25 Sep 2024 02:36:09 +0000
ROA not before: Wed 25 Sep 2024 02:36:09 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 150170
IP address blocks: 103.138.254.0/23 maxlen: 23
103.138.254.0/24 maxlen: 24
103.138.255.0/24 maxlen: 24
2001:df1:2bc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118F69
Validity
Not Before: Sep 25 02:36:09 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f37718-4b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:26:e8:6b:b3:b2:5f:7d:30:77:16:7c:2d:
35:2f:17:49:75:2f:94:b3:cc:83:08:89:a0:6e:85:
d3:81:0d:30:12:e0:07:ea:71:a5:cc:d2:09:d6:a5:
cb:6e:bf:ab:86:95:88:3b:18:2d:ac:90:f9:13:10:
28:f1:58:ea:d1:9f:78:59:a8:58:3c:2d:b6:ba:65:
f4:e2:3c:e2:6e:be:0b:6c:67:ca:45:aa:0a:39:c0:
c1:1c:c9:ab:51:d1:79:a6:d7:88:14:99:f2:64:de:
b8:33:20:16:83:73:96:43:bd:56:81:b7:01:c8:c1:
e5:69:5d:fe:8b:8c:d9:ca:2a:40:94:d9:2f:8d:f6:
69:a9:cd:e1:20:66:e9:27:11:36:09:19:4e:74:c3:
89:1a:55:bb:1e:3e:fd:8b:14:10:ed:89:61:ce:37:
e3:a2:ae:f9:05:86:6f:bb:7d:1a:ca:ca:e0:af:bf:
cd:ca:f4:ca:4f:cd:0a:a9:4c:14:44:29:39:4c:b2:
69:34:70:39:82:99:f5:4c:ec:98:fe:7f:54:08:97:
f4:c8:17:0d:c5:19:b0:0f:7b:c8:e5:2d:aa:a6:67:
f8:7a:22:4c:c2:f2:1c:00:1c:37:72:fc:2b:9c:d1:
0b:a0:b5:8b:03:9a:97:1f:f2:56:3b:2e:8e:3b:c0:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:32:95:49:70:99:00:C4:95:BD:07:9F:7D:FC:40:7E:70:40:42
X509v3 Authority Key Identifier:
keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/3B0E8BD2292211ED93341915C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.254.0/23
IPv6:
2001:df1:2bc0::/48
Signature Algorithm: sha256WithRSAEncryption
aa:27:82:5d:b0:26:d4:4b:e9:e0:04:23:75:21:c9:55:8a:41:
b3:e1:86:c6:21:9a:0c:60:c3:c7:87:78:81:e5:76:cd:19:c4:
3a:70:d6:ed:1b:e6:d4:20:5d:1a:71:6c:14:9e:da:ab:8f:79:
81:eb:42:a6:a0:f3:47:5c:5c:6c:af:ad:d7:2a:4b:80:00:68:
a5:52:73:78:b2:54:21:b1:15:f7:49:24:51:8a:74:19:dc:5c:
08:52:92:69:62:97:9b:bc:07:bc:fe:70:99:7c:17:74:65:c0:
4f:8e:40:96:12:ca:f2:b4:7c:49:c2:c2:38:14:b7:ad:4a:e8:
87:fe:f8:1f:51:63:92:f3:81:b8:1f:0f:61:6c:94:ee:c7:82:
3a:e2:fb:66:91:b1:1d:8a:51:8c:46:50:52:a2:50:ae:4d:77:
b7:34:a3:92:b0:d3:9b:de:90:42:d7:97:40:48:57:bf:81:4c:
b7:7e:48:6a:71:10:a8:83:87:1f:00:07:2d:66:de:e0:08:56:
04:3f:cd:1b:96:43:e3:18:37:b5:ed:19:db:4c:bb:ff:bc:aa:
0b:4a:c3:70:1d:e1:c5:80:0c:9f:c9:a7:fd:79:c9:a3:6f:59:
37:49:ad:3e:56:a9:2e:a5:24:93:0e:d6:a3:64:af:ce:17:53:
c8:6f:50:a8
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB
M0MwREU0N0QwHhcNMjQwOTI1MDIzNjA5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmYzNzcxOC00YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu10m6Guzsl99MHcWfC01LxdJdS+Us8yDCImgboXTgQ0wEuAH6nGlzNIJ1qXL
br+rhpWIOxgtrJD5ExAo8Vjq0Z94WahYPC22umX04jzibr4LbGfKRaoKOcDBHMmr
UdF5pteIFJnyZN64MyAWg3OWQ71WgbcByMHlaV3+i4zZyipAlNkvjfZpqc3hIGbp
JxE2CRlOdMOJGlW7Hj79ixQQ7Ylhzjfjoq75BYZvu30aysrgr7/NyvTKT80KqUwU
RCk5TLJpNHA5gpn1TOyY/n9UCJf0yBcNxRmwD3vI5S2qpmf4eiJMwvIcABw3cvwr
nNELoLWLA5qXH/JWOy6OO8CNCQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPBjMpVJ
cJkAxJW9B599/EB+cEBCMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5
MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041
SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MThGNjkvQjk5OEREM0MyOTA4MTFFREJEMjYyQjI4QzRGOUFFMDIvM0IwRThCRDIy
OTIyMTFFRDkzMzQxOTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFniv4wDwQCAAIwCQMHACABDfErwDANBgkqhkiG9w0BAQsF
AAOCAQEAqieCXbAm1Evp4AQjdSHJVYpBs+GGxiGaDGDDx4d4geV2zRnEOnDW7Rvm
1CBdGnFsFJ7aq495getCpqDzR1xcbK+t1ypLgABopVJzeLJUIbEV90kkUYp0Gdxc
CFKSaWKXm7wHvP5wmXwXdGXAT45AlhLK8rR8ScLCOBS3rUroh/74H1FjkvOBuB8P
YWyU7seCOuL7ZpGxHYpRjEZQUqJQrk13tzSjkrDTm96QQteXQEhXv4FMt35IanEQ
qIOHHwAHLWbe4AhWBD/NG5ZD4xg3te0Z20y7/7yqC0rDcB3hxYAMn8mn/XnJo29Z
N0mtPlapLqUkkw7Wo2SvzhdTyG9QqA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:06:18 2025 by rpki-client