Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/BE3E903C67E811E9ABCD3663C4F9AE02.roa
File: BE3E903C67E811E9ABCD3663C4F9AE02.roa (raw, json)
Hash identifier: ulosbB6PQg/itOLlwpZC8IHr9zDYLOCMEdSYMNOI5qc=
Subject key identifier: 5E:80:D4:8E:0F:92:25:CC:42:4D:FA:81:3D:7A:B8:03:17:E8:F9:A9
Certificate issuer: /CN=A912BE49/serialNumber=4F1782E99564C28A36EEDC19F973D1D9274781FE
Certificate serial: 1A36
Authority key identifier: 4F:17:82:E9:95:64:C2:8A:36:EE:DC:19:F9:73:D1:D9:27:47:81:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/BE3E903C67E811E9ABCD3663C4F9AE02.roa
Signing time: Sun 02 Jun 2024 17:17:08 +0000
ROA not before: Sun 02 Jun 2024 17:17:08 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138916
IP address blocks: 103.131.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6710 (0x1a36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE49
Validity
Not Before: Jun 2 17:17:08 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665ca914-2c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:45:1f:5b:d5:25:7a:53:04:e0:70:4e:da:
68:55:0d:11:8c:98:15:3b:3b:16:53:ce:c1:dc:94:
08:68:05:5e:73:c8:6c:76:81:75:db:c7:4a:d5:08:
17:06:5f:45:af:02:29:b4:61:77:7e:35:ae:00:fb:
8e:b3:48:49:28:3d:e9:d9:9f:3a:85:27:ad:ac:fd:
3a:b3:67:04:2b:ac:cf:79:5b:d0:6e:5f:f8:db:9e:
13:40:6c:1f:4b:06:f5:22:a6:c2:fe:b1:d3:91:eb:
d9:c2:99:d1:22:2f:43:d4:14:fe:a8:11:b3:88:66:
4c:9a:b8:f5:a5:05:4e:73:02:75:65:59:94:4c:f5:
c6:ec:06:e5:1b:b7:3a:11:51:90:29:23:59:fe:07:
ce:00:aa:95:4a:91:80:2d:47:62:d7:77:36:56:0f:
33:46:29:e8:63:7f:88:92:32:d1:4e:f9:c2:e9:e5:
f2:25:b4:c2:17:ca:f0:b4:be:ef:3b:d0:5f:ce:4d:
ec:37:c4:15:75:ec:e4:5e:e9:a7:72:c8:ce:5e:06:
45:81:01:eb:1d:7c:87:5c:67:97:8e:d1:64:6a:ec:
81:21:70:60:71:25:e6:bc:e8:26:04:a5:dc:b2:41:
f7:20:d6:c3:37:f5:18:c8:03:a2:43:ce:7c:83:f1:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:D4:8E:0F:92:25:CC:42:4D:FA:81:3D:7A:B8:03:17:E8:F9:A9
X509v3 Authority Key Identifier:
keyid:4F:17:82:E9:95:64:C2:8A:36:EE:DC:19:F9:73:D1:D9:27:47:81:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/BE3E903C67E811E9ABCD3663C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.192.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d1:02:a2:f4:10:42:7a:70:bd:c3:5a:50:25:67:a4:2d:55:
af:4f:a0:8d:32:95:c9:32:29:c0:c7:78:c8:dd:7d:f8:68:c4:
79:44:67:bd:4b:25:42:5b:67:c8:d1:d3:7e:e2:8f:e9:ea:8f:
12:24:71:74:c0:dc:c9:b0:dc:14:84:ca:24:99:9f:cb:4a:d4:
b5:fe:34:ed:ab:ec:22:de:81:20:9a:ce:87:17:3d:ee:88:fc:
e1:f9:44:5e:1e:b3:68:b2:bd:3c:1c:69:8e:17:11:22:1a:4b:
be:cf:c2:4f:f5:77:37:85:23:c0:f5:78:10:16:76:4c:64:0a:
9d:4a:c2:06:ee:a3:8d:58:e6:d9:4b:1b:8c:f7:3a:d2:16:dd:
88:64:33:94:80:e2:e3:5a:7c:2e:0e:ec:8f:39:2f:95:b6:af:
3e:cb:48:a6:e4:7a:8e:3b:8f:aa:b3:04:f9:4d:31:1d:aa:0f:
57:cc:50:04:90:b7:2d:8e:09:0c:25:79:9a:34:77:a9:40:a8:
52:31:2b:3b:07:22:4f:59:10:f1:e0:a0:c2:23:90:49:ea:06:
f6:db:0f:7f:3e:4f:b0:47:52:8f:81:dc:2c:f2:30:ec:8c:8e:
e3:88:79:97:58:57:47:5e:fa:cb:74:3a:f3:74:f9:66:56:07:
63:32:b4:25
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJFNDkxMTAvBgNVBAUTKDRGMTc4MkU5OTU2NEMyOEEzNkVFREMxOUY5NzNEMUQ5
Mjc0NzgxRkUwHhcNMjQwNjAyMTcxNzA4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVjYTkxNC0yYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0RFH1vVJXpTBOBwTtpoVQ0RjJgVOzsWU87B3JQIaAVec8hsdoF128dK1QgX
Bl9FrwIptGF3fjWuAPuOs0hJKD3p2Z86hSetrP06s2cEK6zPeVvQbl/4254TQGwf
Swb1IqbC/rHTkevZwpnRIi9D1BT+qBGziGZMmrj1pQVOcwJ1ZVmUTPXG7AblG7c6
EVGQKSNZ/gfOAKqVSpGALUdi13c2Vg8zRinoY3+IkjLRTvnC6eXyJbTCF8rwtL7v
O9Bfzk3sN8QVdezkXumncsjOXgZFgQHrHXyHXGeXjtFkauyBIXBgcSXmvOgmBKXc
skH3INbDN/UYyAOiQ858g/Gg5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFF6A1I4P
kiXMQk36gT16uAMX6PmpMB8GA1UdIwQYMBaAFE8XgumVZMKKNu7cGflz0dknR4H+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0OS9DM0M4QjlGQTI4
Q0IxMUU3OUJFNDMwMzZDNEY5QUUwMi9UeGVDNlpWa3dvbzI3dHdaLVhQUjJTZEhn
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R4ZUM2WlZrd29vMjd0d1otWFBSMlNkSGdmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkJFNDkvQzNDOEI5RkEyOENCMTFFNzlCRTQzMDM2QzRGOUFFMDIvQkUzRTkwM0M2
N0U4MTFFOUFCQ0QzNjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABng8AwDQYJKoZIhvcNAQELBQADggEBACTRAqL0EEJ6cL3D
WlAlZ6QtVa9PoI0ylckyKcDHeMjdffhoxHlEZ71LJUJbZ8jR037ij+nqjxIkcXTA
3Mmw3BSEyiSZn8tK1LX+NO2r7CLegSCazocXPe6I/OH5RF4es2iyvTwcaY4XESIa
S77Pwk/1dzeFI8D1eBAWdkxkCp1Kwgbuo41Y5tlLG4z3OtIW3YhkM5SA4uNafC4O
7I85L5W2rz7LSKbkeo47j6qzBPlNMR2qD1fMUASQty2OCQwleZo0d6lAqFIxKzsH
Ik9ZEPHgoMIjkEnqBvbbD38+T7BHUo+B3CzyMOyMjuOIeZdYV0de+st0OvN0+WZW
B2MytCU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:54:33 2025 by rpki-client