Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa
File: 2FD106D2B92711E99D48BA23C4F9AE02.roa (raw, json)
Hash identifier: yxTidIFVAK1Xt0kWWO33LdfZQBwy5DfkOK/lacH9eUo=
Subject key identifier: 80:66:E3:87:98:6F:FD:2F:E4:85:47:B1:D7:10:DA:4F:6E:D8:CD:2B
Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965
Certificate serial: 0D2E
Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa
Signing time: Fri 02 Aug 2024 18:56:36 +0000
ROA not before: Fri 02 Aug 2024 18:56:36 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 133936
IP address blocks: 103.140.138.0/24 maxlen: 24
103.140.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3374 (0xd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A9B1
Validity
Not Before: Aug 2 18:56:36 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66ad2be4-3335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f0:76:54:c7:b2:37:1f:b4:fd:0d:7c:a2:c6:
0b:20:e0:1b:a4:f5:91:bf:8e:37:17:03:18:33:35:
e1:d3:60:bd:da:0b:d9:47:16:ce:95:86:59:c1:eb:
d0:ef:3d:31:0a:59:16:eb:a6:fd:0c:a2:80:c9:64:
53:0f:26:35:57:63:76:51:48:bc:ee:d7:cf:b9:0e:
09:f6:b5:04:10:31:ad:98:9b:c6:11:8f:ef:4d:51:
56:e9:8f:38:47:f2:b7:82:5d:5e:3d:5a:a6:3b:43:
75:9e:9a:82:4d:2e:fe:33:4e:2d:b1:75:42:f8:31:
00:79:b2:3e:2d:90:a5:d4:50:0c:89:0c:2b:a3:bc:
dc:47:7e:a6:9e:d7:12:bb:ea:57:21:a9:17:75:c2:
1a:71:c7:a3:8f:99:3f:04:fc:7b:89:b1:60:03:4c:
a6:5c:4b:6c:0e:b2:14:50:12:c0:0a:92:b8:8d:4c:
7f:50:f9:be:5c:4c:fa:9d:93:59:e1:0b:ea:3c:f1:
1e:8b:43:57:ad:62:85:9b:3f:c9:06:22:61:7f:5f:
14:b4:9d:59:f3:87:cb:51:db:1b:e8:7c:ec:e7:56:
8d:2e:ee:87:1d:67:de:2d:ef:de:68:e4:c6:3c:f7:
cb:ba:d4:33:0b:65:81:90:b6:e9:53:7e:29:68:33:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:66:E3:87:98:6F:FD:2F:E4:85:47:B1:D7:10:DA:4F:6E:D8:CD:2B
X509v3 Authority Key Identifier:
keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.138.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:79:b8:bc:8a:db:cc:be:9c:a8:a0:34:d5:7e:bb:ac:39:e3:
db:f1:8f:10:11:da:4a:fb:7e:56:ea:ab:b9:b2:01:4f:05:ee:
a7:dd:e9:95:39:3d:5b:cb:8b:73:bb:e2:de:46:8b:7d:c1:88:
a8:6c:64:07:d8:d1:c0:dd:e5:df:34:37:59:f6:e3:1e:7d:ce:
70:81:bb:b6:82:3c:b1:cf:18:7a:21:38:94:c1:e4:db:47:a5:
ef:4a:b7:cb:cd:0c:b4:58:db:28:c7:9d:ab:ac:e5:ac:00:7f:
de:35:29:ed:85:5e:df:57:55:87:50:75:f7:aa:16:4b:7c:bf:
a7:49:7e:5e:f8:34:07:64:c8:fc:1b:78:b7:1d:59:b5:2c:cd:
9b:fd:15:6c:5f:a2:cc:f2:41:9d:ef:0c:79:12:0c:d7:0c:33:
6b:fe:28:c3:0c:df:d3:ad:57:f8:fe:11:d3:60:ba:5d:f4:6b:
82:e8:f2:dd:db:95:cd:37:51:29:e4:83:41:11:7e:ba:f1:0c:
33:5c:85:4d:f5:92:9b:c2:1b:1c:ed:fd:40:22:c7:f1:29:c7:
00:f6:e0:b1:96:22:57:e5:80:b4:f3:b3:5f:8c:0f:eb:d1:d6:
53:4a:af:59:9b:63:01:61:f4:c8:6f:cf:3a:a0:e9:dd:d6:0e:
e1:8f:9e:8d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4
QzVGNjE5NjUwHhcNMjQwODAyMTg1NjM2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmFkMmJlNC0zMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4/B2VMeyNx+0/Q18osYLIOAbpPWRv443FwMYMzXh02C92gvZRxbOlYZZwevQ
7z0xClkW66b9DKKAyWRTDyY1V2N2UUi87tfPuQ4J9rUEEDGtmJvGEY/vTVFW6Y84
R/K3gl1ePVqmO0N1npqCTS7+M04tsXVC+DEAebI+LZCl1FAMiQwro7zcR36mntcS
u+pXIakXdcIaccejj5k/BPx7ibFgA0ymXEtsDrIUUBLACpK4jUx/UPm+XEz6nZNZ
4QvqPPEei0NXrWKFmz/JBiJhf18UtJ1Z84fLUdsb6Hzs51aNLu6HHWfeLe/eaOTG
PPfLutQzC2WBkLbpU34paDM0CQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIBm44eY
b/0v5IVHsdcQ2k9u2M0rMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5
MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH
V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkE5QjEvNUNBQ0Y2QThCOTI2MTFFOTk3NTI4OTIyQzRGOUFFMDIvMkZEMTA2RDJC
OTI3MTFFOTlENDhCQTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnjIowDQYJKoZIhvcNAQELBQADggEBAEx5uLyK28y+nKig
NNV+u6w549vxjxAR2kr7flbqq7myAU8F7qfd6ZU5PVvLi3O74t5Gi33BiKhsZAfY
0cDd5d80N1n24x59znCBu7aCPLHPGHohOJTB5NtHpe9Kt8vNDLRY2yjHnaus5awA
f941Ke2FXt9XVYdQdfeqFkt8v6dJfl74NAdkyPwbeLcdWbUszZv9FWxfoszyQZ3v
DHkSDNcMM2v+KMMM39OtV/j+EdNgul30a4Lo8t3blc03USnkg0ERfrrxDDNchU31
kpvCGxzt/UAix/EpxwD24LGWIlflgLTzs1+MD+vR1lNKr1mbYwFh9Mhvzzqg6d3W
DuGPno0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:37 2025 by rpki-client