Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/5E0253B6232111EB9896B783C4F9AE02.roa
File: 5E0253B6232111EB9896B783C4F9AE02.roa (raw, json)
Hash identifier: S7XAN9hoPkMQD1dwIo9UheEK0CbHpWptDyxJHPNt49g=
Subject key identifier: 09:FF:EE:A2:71:E5:43:82:6A:C8:DA:80:38:DF:5B:01:89:EC:F2:FE
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 0F75
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/5E0253B6232111EB9896B783C4F9AE02.roa
Signing time: Thu 06 Mar 2025 18:06:23 +0000
ROA not before: Thu 06 Mar 2025 18:06:23 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137969
IP address blocks: 103.133.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3957 (0xf75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690
Validity
Not Before: Mar 6 18:06:23 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c9e41f-c47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:41:3d:f0:88:cb:ac:eb:83:77:12:10:74:25:
0c:8c:53:fb:31:4d:4b:86:8d:04:bb:9b:53:3f:de:
90:22:00:33:d5:34:22:a3:e9:4b:49:eb:2f:9d:19:
47:a8:3a:97:39:7f:64:05:e0:b6:09:bc:38:f9:d6:
dd:3c:c8:19:f6:ca:f7:d1:18:40:ff:c2:1f:b7:73:
b7:9e:ba:fc:03:8d:20:df:5b:a2:cf:46:16:fe:3a:
67:41:4d:9e:03:a2:82:88:35:ca:19:b1:4e:1d:47:
9a:a1:a1:c8:78:76:6e:bb:e6:a5:be:1c:11:b8:7c:
d9:59:7c:1c:f7:f5:85:0b:23:41:a4:fd:4f:3b:6d:
5d:55:3e:b0:37:7d:bb:76:5b:0a:82:eb:f6:0d:45:
c4:b1:df:d1:1b:00:9d:da:e0:32:7f:0e:22:d7:02:
74:df:fc:42:0d:0d:7f:80:f3:dd:1c:e5:bb:dc:05:
15:a8:58:85:23:f5:1d:7f:58:03:bd:a7:c9:13:f1:
63:49:c2:b6:d0:14:57:67:97:44:13:ca:32:9a:b7:
3e:e3:d0:48:67:26:1c:ce:8e:dc:2e:79:fe:14:8a:
7a:d1:6b:2b:4e:8e:8c:50:7c:27:77:65:d1:71:5a:
39:c1:1f:4e:bd:a1:fc:cc:74:fc:ce:a5:79:51:99:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:EE:A2:71:E5:43:82:6A:C8:DA:80:38:DF:5B:01:89:EC:F2:FE
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/5E0253B6232111EB9896B783C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.176.0/22
Signature Algorithm: sha256WithRSAEncryption
20:17:04:f6:61:3a:89:5a:54:b3:ab:5d:ad:dc:5a:4a:56:5e:
1b:21:52:22:ee:14:1a:53:38:32:57:f4:ab:f6:36:61:59:df:
52:aa:37:08:b3:85:0c:1b:ef:fa:62:48:18:50:9e:c9:6c:5e:
2a:59:7e:7c:61:79:c8:47:e5:3e:e8:29:90:c5:04:c5:81:86:
85:ca:0b:44:e2:0e:4a:cc:dc:a2:df:e6:16:a1:64:a2:b3:39:
e4:32:b6:7e:07:4e:5e:79:62:bf:c9:b4:97:48:19:5c:c2:79:
98:0e:2e:f6:40:7d:2e:17:a7:d9:2f:52:66:bd:5d:5d:cc:b1:
a8:1c:af:8e:57:35:18:f6:48:0d:db:7f:02:70:6e:4e:da:b8:
5a:86:cb:af:c2:a7:ea:fc:5e:82:76:c1:d3:2c:24:be:8d:15:
2d:3d:9b:9a:d0:e4:47:76:df:5c:8c:d2:31:d4:8a:6a:44:d0:
9c:70:df:3b:17:2d:92:e1:3d:5d:4f:69:d1:96:82:97:e4:fb:
a2:2f:e3:9d:e0:2a:11:4e:a5:1a:a8:03:9c:e9:56:b2:23:f3:
cd:96:62:fd:6d:29:ce:73:c0:ca:88:76:bb:83:f8:9e:54:bf:
f0:68:bc:17:7d:88:69:3e:19:ba:f2:af:56:ea:b9:cc:45:c6:
b1:ad:07:2b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD
RDM0MEFCMjgwHhcNMjUwMzA2MTgwNjIzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2M5ZTQxZi1jNDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4UE98IjLrOuDdxIQdCUMjFP7MU1Lho0Eu5tTP96QIgAz1TQio+lLSesvnRlH
qDqXOX9kBeC2Cbw4+dbdPMgZ9sr30RhA/8Ift3O3nrr8A40g31uiz0YW/jpnQU2e
A6KCiDXKGbFOHUeaoaHIeHZuu+alvhwRuHzZWXwc9/WFCyNBpP1PO21dVT6wN327
dlsKguv2DUXEsd/RGwCd2uAyfw4i1wJ03/xCDQ1/gPPdHOW73AUVqFiFI/Udf1gD
vafJE/FjScK20BRXZ5dEE8oymrc+49BIZyYczo7cLnn+FIp60WsrTo6MUHwnd2XR
cVo5wR9OvaH8zHT8zqV5UZnPswIDAQABo4IClTCCApEwHQYDVR0OBBYEFAn/7qJx
5UOCasjagDjfWwGJ7PL+MB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz
RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzE2OTAvMTVCNDFCODg2M0YzMTFFOUEwODU0QzQ3QzRGOUFFMDIvNUUwMjUzQjYy
MzIxMTFFQjk4OTZCNzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnhbAwDQYJKoZIhvcNAQELBQADggEBACAXBPZhOolaVLOr
Xa3cWkpWXhshUiLuFBpTODJX9Kv2NmFZ31KqNwizhQwb7/piSBhQnslsXipZfnxh
echH5T7oKZDFBMWBhoXKC0TiDkrM3KLf5hahZKKzOeQytn4HTl55Yr/JtJdIGVzC
eZgOLvZAfS4Xp9kvUma9XV3Msagcr45XNRj2SA3bfwJwbk7auFqGy6/Cp+r8XoJ2
wdMsJL6NFS09m5rQ5Ed231yM0jHUimpE0Jxw3zsXLZLhPV1PadGWgpfk+6Iv453g
KhFOpRqoA5zpVrIj882WYv1tKc5zwMqIdruD+J5Uv/BovBd9iGk+Gbryr1bqucxF
xrGtBys=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:55:15 2025 by rpki-client