Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/738195EEB11811ED997EA457C4F9AE02.roa
File: 738195EEB11811ED997EA457C4F9AE02.roa (raw, json)
Hash identifier: Y3uWvVWc5h8AjMOh0rbq998afPQd3Tj5ztFh5AezKOE=
Subject key identifier: 22:43:E2:8B:A8:D9:F4:27:21:98:F8:64:BF:FE:1D:31:20:1A:C2:ED
Certificate issuer: /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE
Certificate serial: 0111
Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/738195EEB11811ED997EA457C4F9AE02.roa
Signing time: Thu 25 Jul 2024 04:45:51 +0000
ROA not before: Thu 25 Jul 2024 04:45:51 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 134926
IP address blocks: 103.189.88.0/24 maxlen: 24
103.189.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E367
Validity
Not Before: Jul 25 04:45:51 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a1d87f-62b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:99:09:66:e5:84:8a:ba:62:3e:89:2a:6d:
da:ea:66:0e:88:7c:5d:e9:1a:21:4f:e7:f0:50:9d:
aa:1d:4d:83:80:b0:45:bd:d5:f9:ce:e2:ef:da:c2:
ca:37:ad:5f:20:5d:c1:59:63:38:4a:e8:c8:f6:2c:
74:56:b3:0d:0b:e2:7e:0e:73:45:05:d3:15:db:c7:
80:0e:37:22:5a:16:f1:ad:c3:e0:95:d4:56:c0:1c:
ea:75:75:4e:ae:c8:e8:85:e1:a9:7b:53:a0:83:39:
4a:0c:93:66:ed:bf:16:e6:50:3d:8f:be:02:e7:a9:
98:5a:dd:49:5b:35:6f:77:31:b5:2c:aa:01:a7:7d:
35:4e:9f:c3:45:87:5b:98:92:a8:6f:d9:f2:23:0e:
f1:9f:57:df:93:f2:e1:61:9a:67:a0:72:d8:79:af:
b0:aa:3e:70:e2:44:55:3f:e7:52:6c:61:79:8e:56:
0d:32:c2:4d:51:af:82:48:35:10:8b:a5:8e:d8:9a:
af:75:3f:c1:d5:61:6c:08:4b:50:0c:19:5b:99:98:
16:87:5a:e2:04:26:a2:b1:30:cb:02:a1:9e:16:6e:
6e:94:71:65:c6:81:60:c1:7c:bc:a2:27:4c:95:a2:
ee:a0:f9:dd:be:2c:24:5d:62:6a:47:9a:f7:af:33:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:43:E2:8B:A8:D9:F4:27:21:98:F8:64:BF:FE:1D:31:20:1A:C2:ED
X509v3 Authority Key Identifier:
keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/738195EEB11811ED997EA457C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.88.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:27:c5:b6:90:0a:ca:8e:3b:72:f0:c2:f0:d8:4b:7c:73:91:
18:ed:e3:0f:79:ea:3d:6e:e5:ae:c9:40:85:3a:84:e4:be:ca:
d2:f7:71:32:d4:25:2c:35:a7:39:d6:fc:ab:76:7d:64:99:93:
a5:e0:26:66:b8:dd:ba:80:92:8c:a3:2f:e0:79:47:2f:0a:39:
0e:87:1c:95:95:28:71:64:79:72:2d:98:ac:ff:9e:a9:8a:b6:
53:88:94:63:35:2d:99:40:55:c1:e1:9e:75:fb:86:9a:30:2f:
2c:bc:45:26:68:dc:1a:a6:f1:29:99:03:c2:15:21:df:e8:28:
01:fd:8c:55:e2:7b:21:44:63:4f:4d:f3:0b:ed:23:7e:e3:45:
1d:d0:dd:11:82:20:1f:bd:8c:01:c3:86:15:d4:c6:5f:1c:1b:
e3:18:74:b2:95:d5:96:9e:54:9e:29:06:7e:03:35:53:14:9f:
91:01:f1:1d:ae:59:bb:f3:ef:7b:02:e3:64:e0:b9:a9:4d:20:
04:48:be:1c:b1:a3:48:d6:7c:ad:7c:38:ec:1e:a0:52:8a:e6:
9c:79:b4:ef:1d:11:ec:81:b7:6f:71:cc:ec:1e:3d:46:1b:bd:
f8:7d:f3:92:89:c0:88:20:47:9d:0b:09:bd:6c:36:e8:4c:d6:
8a:9a:d3:67
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkUzNjcxMTAvBgNVBAUTKDI2MTM5MEQ3REVERTVEMUM0MEIxRjNFMjgwRjM4QTA4
REFBRkRDREUwHhcNMjQwNzI1MDQ0NTUxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmExZDg3Zi02MmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0l6ZCWblhIq6Yj6JKm3a6mYOiHxd6RohT+fwUJ2qHU2DgLBFvdX5zuLv2sLK
N61fIF3BWWM4SujI9ix0VrMNC+J+DnNFBdMV28eADjciWhbxrcPgldRWwBzqdXVO
rsjoheGpe1OggzlKDJNm7b8W5lA9j74C56mYWt1JWzVvdzG1LKoBp301Tp/DRYdb
mJKob9nyIw7xn1ffk/LhYZpnoHLYea+wqj5w4kRVP+dSbGF5jlYNMsJNUa+CSDUQ
i6WO2JqvdT/B1WFsCEtQDBlbmZgWh1riBCaisTDLAqGeFm5ulHFlxoFgwXy8oidM
laLuoPndviwkXWJqR5r3rzMVaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCJD4ouo
2fQnIZj4ZL/+HTEgGsLtMB8GA1UdIwQYMBaAFCYTkNfe3l0cQLHz4oDzigjar9ze
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTM2Ny82QkNFQ0UwQUFE
RjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhSeEFzZlBpZ1BPS0NOcXYz
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0poT1ExOTdlWFJ4QXNmUGlnUE9LQ05xdjNONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkUzNjcvNkJDRUNFMEFBREYwMTFFRDk1RDJCOTc4QzRGOUFFMDIvNzM4MTk1RUVC
MTE4MTFFRDk5N0VBNDU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnvVgwDQYJKoZIhvcNAQELBQADggEBAAwnxbaQCsqOO3Lw
wvDYS3xzkRjt4w956j1u5a7JQIU6hOS+ytL3cTLUJSw1pznW/Kt2fWSZk6XgJma4
3bqAkoyjL+B5Ry8KOQ6HHJWVKHFkeXItmKz/nqmKtlOIlGM1LZlAVcHhnnX7hpow
Lyy8RSZo3Bqm8SmZA8IVId/oKAH9jFXieyFEY09N8wvtI37jRR3Q3RGCIB+9jAHD
hhXUxl8cG+MYdLKV1ZaeVJ4pBn4DNVMUn5EB8R2uWbvz73sC42TgualNIARIvhyx
o0jWfK18OOweoFKK5px5tO8dEeyBt29xzOwePUYbvfh985KJwIggR50LCb1sNuhM
1oqa02c=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:23 2025 by rpki-client