Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F47561669C3B11EABC59DA11C4F9AE02.roa
File: F47561669C3B11EABC59DA11C4F9AE02.roa (raw, json)
Hash identifier: FCS4+GL7rUUdkFrPp6f659LL++EemtPAULuJfkO/esc=
Subject key identifier: BF:BD:19:43:64:68:BB:A0:99:98:9A:DE:B0:45:6D:F9:4A:3E:D8:8C
Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial: 1024
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F47561669C3B11EABC59DA11C4F9AE02.roa
Signing time: Wed 12 Feb 2025 18:06:05 +0000
ROA not before: Wed 12 Feb 2025 18:06:05 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138576
IP address blocks: 103.136.184.0/24 maxlen: 24
103.136.185.0/24 maxlen: 24
103.136.186.0/24 maxlen: 24
103.136.187.0/24 maxlen: 24
2404:9ec0::/32 maxlen: 32
2404:9ec0:100::/48 maxlen: 48
2404:9ec0:101::/48 maxlen: 48
2404:9ec0:102::/48 maxlen: 48
2404:9ec0:103::/48 maxlen: 48
2404:9ec0:104::/48 maxlen: 48
2404:9ec0:105::/48 maxlen: 48
2404:9ec0:106::/48 maxlen: 48
2404:9ec0:107::/48 maxlen: 48
2404:9ec0:108::/48 maxlen: 48
2404:9ec0:109::/48 maxlen: 48
2404:9ec0:110::/48 maxlen: 48
2404:9ec0:111::/48 maxlen: 48
2404:9ec0:112::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4132 (0x1024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123D9C
Validity
Not Before: Feb 12 18:06:05 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ace30c-fbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:36:1f:93:e8:e0:47:9e:80:29:0c:ff:22:
dd:9c:60:fa:35:c6:75:f9:f2:e1:bc:a2:21:68:c0:
d2:4a:df:95:88:4b:10:94:11:f3:fe:a7:70:e1:53:
1f:9d:70:c6:af:09:63:25:83:17:29:5e:f8:88:6e:
3d:aa:58:29:8f:aa:62:49:86:c5:69:f1:e1:58:e3:
ef:e2:5a:5d:7c:fb:a7:4b:a3:2c:10:77:e2:67:41:
0e:eb:0d:52:cb:c0:83:ad:b7:8a:2b:62:67:46:cc:
a6:03:a5:01:60:b5:5d:97:47:3e:6f:e8:5f:d9:97:
bb:23:d9:55:f7:f2:2e:41:dc:7b:b0:34:ca:c9:9b:
52:f7:92:98:e4:dd:54:df:0d:b1:83:8e:06:57:f8:
ab:a8:7e:fa:81:be:bb:09:2b:49:3b:f6:8c:0a:9f:
7e:af:12:34:38:d2:81:d6:7b:a6:be:77:f2:93:fa:
1e:75:ef:53:6b:74:b2:ac:c8:3f:f9:72:5c:0b:10:
0c:5c:fe:f5:64:4d:b3:e9:4d:91:3a:8a:62:39:d7:
d1:57:01:89:82:85:bd:84:81:8a:f2:ea:16:e9:44:
65:00:86:2f:11:9f:60:58:1a:90:83:04:9f:0e:7e:
a0:cd:c6:8e:1f:8b:b1:d4:9d:7e:ab:09:9f:ae:d8:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BD:19:43:64:68:BB:A0:99:98:9A:DE:B0:45:6D:F9:4A:3E:D8:8C
X509v3 Authority Key Identifier:
keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/F47561669C3B11EABC59DA11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.184.0/22
IPv6:
2404:9ec0::/32
Signature Algorithm: sha256WithRSAEncryption
53:34:dc:b7:98:95:01:52:4e:3a:53:8e:02:33:4d:47:33:43:
a2:dd:ea:1f:8d:c5:38:25:48:19:73:34:29:f1:8a:f1:84:eb:
9d:d1:d3:ac:a0:6d:6d:45:f0:ee:44:93:10:b7:a3:04:67:f7:
4d:0d:1c:28:67:d2:3f:38:96:65:48:3e:ec:88:86:c5:cd:ea:
30:c5:68:ac:d0:dd:f2:69:af:d8:08:35:ab:79:ad:e8:55:6b:
5a:6f:a6:b5:f1:a8:e7:54:33:97:27:62:60:36:8a:97:e2:a4:
99:1b:0a:f4:5f:80:78:c9:5c:17:72:0d:ce:52:53:77:f6:b0:
19:d8:4d:3c:e7:93:ce:f7:6d:2e:79:62:26:d7:32:b8:04:a1:
50:2b:c4:5b:13:79:c2:08:c7:ec:5a:a0:0c:6f:f7:68:26:52:
5a:26:1c:eb:60:5b:8f:d6:b0:d2:d2:2f:35:76:cf:75:a2:cd:
11:4a:89:f0:33:f9:fb:8d:ae:fe:f8:de:32:ab:5b:e0:80:24:
fd:c9:21:b4:62:02:44:72:4e:fc:0d:0a:fb:d7:d5:6d:b4:22:
3b:fb:81:31:c5:f8:af:39:f1:99:a3:0d:25:2c:ec:e2:20:f7:
81:d8:99:35:a7:3a:d2:dc:a2:c0:14:c3:c7:90:cc:5c:75:0b:
31:c8:9a:38
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICECQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNEOUMxMTAvBgNVBAUTKDVCMkNGMEZCNjJGMTYwRjE4MzhBRUUzRTZDREUwNzU0
NERGRjhCRkYwHhcNMjUwMjEyMTgwNjA1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2FjZTMwYy1mYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsu82H5Po4EeegCkM/yLdnGD6NcZ1+fLhvKIhaMDSSt+ViEsQlBHz/qdw4VMf
nXDGrwljJYMXKV74iG49qlgpj6piSYbFafHhWOPv4lpdfPunS6MsEHfiZ0EO6w1S
y8CDrbeKK2JnRsymA6UBYLVdl0c+b+hf2Ze7I9lV9/IuQdx7sDTKyZtS95KY5N1U
3w2xg44GV/irqH76gb67CStJO/aMCp9+rxI0ONKB1numvnfyk/oede9Ta3SyrMg/
+XJcCxAMXP71ZE2z6U2ROopiOdfRVwGJgoW9hIGK8uoW6URlAIYvEZ9gWBqQgwSf
Dn6gzcaOH4ux1J1+qwmfrthxPwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFL+9GUNk
aLugmZia3rBFbflKPtiMMB8GA1UdIwQYMBaAFFss8Pti8WDxg4ruPmzeB1RN/4v/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Q5Qy80NTU5NDJENjUw
QjIxMUU5QjVEQjZBNkJDNEY5QUUwMi9XeXp3LTJMeFlQR0RpdTQtYk40SFZFM19p
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1d5enctMkx4WVBHRGl1NC1iTjRIVkUzX2lfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjNEOUMvNDU1OTQyRDY1MEIyMTFFOUI1REI2QTZCQzRGOUFFMDIvRjQ3NTYxNjY5
QzNCMTFFQUJDNTlEQTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJniLgwDQQCAAIwBwMFACQEnsAwDQYJKoZIhvcNAQELBQAD
ggEBAFM03LeYlQFSTjpTjgIzTUczQ6Ld6h+NxTglSBlzNCnxivGE653R06ygbW1F
8O5EkxC3owRn900NHChn0j84lmVIPuyIhsXN6jDFaKzQ3fJpr9gINat5rehVa1pv
prXxqOdUM5cnYmA2ipfipJkbCvRfgHjJXBdyDc5SU3f2sBnYTTznk873bS55YibX
MrgEoVArxFsTecIIx+xaoAxv92gmUlomHOtgW4/WsNLSLzV2z3WizRFKifAz+fuN
rv743jKrW+CAJP3JIbRiAkRyTvwNCvvX1W20Ijv7gTHF+K858ZmjDSUs7OIg94HY
mTWnOtLcosAUw8eQzFx1CzHImjg=
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:20:38 2025 by rpki-client