Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/7B1B8A282C9A11EEA63E871BC4F9AE02.roa
File: 7B1B8A282C9A11EEA63E871BC4F9AE02.roa (raw, json)
Hash identifier: bHeVG7OvM+9zMvejagtEQWjQ8YmQOJIU6uIF8dEF45I=
Subject key identifier: D8:F2:F9:62:15:5C:D3:B0:81:0F:8D:6F:A7:B6:12:98:CE:AB:C2:48
Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial: 15
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/7B1B8A282C9A11EEA63E871BC4F9AE02.roa
Signing time: Thu 27 Jul 2023 16:27:30 +0000
ROA not before: Thu 27 Jul 2023 16:27:30 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 135615
IP address blocks: 103.175.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143848
Validity
Not Before: Jul 27 16:27:30 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64c29af1-b8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:03:fb:94:b1:71:c7:4f:df:a0:5d:a4:66:
ab:38:2b:be:b7:ce:31:c4:da:73:72:cf:1b:40:0d:
47:2b:82:74:d8:b0:63:38:de:cd:0a:cf:e1:b8:2e:
4d:df:e2:ad:a4:b0:61:f3:61:c5:36:6a:a2:e6:1f:
5d:88:f7:a2:a2:a7:f7:f3:39:ca:0c:2f:51:0d:f3:
48:1a:90:25:23:43:f6:c6:57:10:41:0f:45:e9:f9:
1b:83:c0:37:94:b2:29:8f:0c:be:49:73:fc:13:4f:
f8:7b:ee:f8:15:41:f5:b6:81:da:b3:00:2a:be:68:
41:56:f1:97:d0:4c:ea:4b:76:50:ea:2e:41:19:cc:
86:3a:1e:fe:9b:bb:a1:3f:2d:83:ff:fc:6f:0c:8f:
c4:ca:2d:66:e7:95:39:49:86:c3:8b:0d:b1:f5:d8:
2d:00:bf:fe:2f:a6:48:db:5b:ee:67:14:bd:61:c8:
87:ad:81:98:bc:17:0d:11:21:2f:d1:74:44:23:1d:
41:96:80:0d:98:0f:ab:78:5c:0a:d8:93:17:61:50:
aa:a8:63:a3:19:d1:55:a2:02:79:12:d5:67:2e:ee:
8b:a4:ea:4d:2e:ac:9b:e3:18:28:10:74:9c:44:8d:
f3:98:02:9d:26:6f:16:fa:4a:51:a8:22:90:0b:0c:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F2:F9:62:15:5C:D3:B0:81:0F:8D:6F:A7:B6:12:98:CE:AB:C2:48
X509v3 Authority Key Identifier:
keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/7B1B8A282C9A11EEA63E871BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:09:c4:88:d6:8f:36:62:3c:57:1d:1e:85:d2:23:6b:a9:d9:
77:8f:ae:d7:d2:50:be:a7:6c:b4:b2:11:34:bc:60:e7:c7:b1:
46:a5:7a:c7:98:06:fe:e7:56:51:05:0b:fc:51:4d:27:91:d1:
85:05:9d:3c:b2:24:53:2c:e0:97:49:13:fe:73:66:d8:b6:f7:
cc:1d:2b:0a:e9:8b:64:ea:da:0c:78:bf:d2:cb:47:8e:ea:d5:
71:fc:fd:30:c1:5a:94:c8:e1:cf:bc:fe:2d:a0:bc:cd:3e:2d:
45:f1:6e:e1:af:5f:01:56:c6:6c:de:b3:94:5e:e7:fe:ca:c8:
45:ff:e3:8b:b4:2d:a5:f5:f7:62:7c:70:26:29:bf:70:02:eb:
39:21:ba:77:57:a6:b7:0c:04:ef:4d:f6:24:c9:f6:2b:13:db:
41:a9:5b:8f:85:0b:8d:b8:c8:46:e0:3d:5b:61:5c:f5:da:83:
b7:f8:cc:8d:b1:93:40:f4:44:08:11:e7:d7:c6:06:60:83:86:
1b:39:f0:4f:a1:cc:86:6e:24:49:ad:ea:ce:a7:65:ef:6f:38:
64:e8:75:90:45:bc:96:70:52:99:c0:1a:42:76:3f:52:8c:c0:
5a:42:88:78:bc:98:d9:d8:ad:a1:a0:52:f7:1a:03:14:2b:d3:
c9:c1:87:4d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Mzg0ODExMC8GA1UEBRMoNDgyRDNFNzAwRUU1RjFBNEFEQTc1MTZGMkU1Njc4MzRF
NzEwRDEzNTAeFw0yMzA3MjcxNjI3MzBaFw0yNDAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0YzI5YWYxLWI4ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVbAP7lLFxx0/foF2kZqs4K763zjHE2nNyzxtADUcrgnTYsGM43s0Kz+G4Lk3f
4q2ksGHzYcU2aqLmH12I96Kip/fzOcoML1EN80gakCUjQ/bGVxBBD0Xp+RuDwDeU
simPDL5Jc/wTT/h77vgVQfW2gdqzACq+aEFW8ZfQTOpLdlDqLkEZzIY6Hv6bu6E/
LYP//G8Mj8TKLWbnlTlJhsOLDbH12C0Av/4vpkjbW+5nFL1hyIetgZi8Fw0RIS/R
dEQjHUGWgA2YD6t4XArYkxdhUKqoY6MZ0VWiAnkS1Wcu7ouk6k0urJvjGCgQdJxE
jfOYAp0mbxb6SlGoIpALDOhzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU2PL5YhVc
07CBD41vp7YSmM6rwkgwHwYDVR0jBBgwFoAUSC0+cA7l8aStp1FvLlZ4NOcQ0TUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzODQ4LzE2MThEQjc0MkJC
NjExRUVCQjdENTI2QUM0RjlBRTAyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBU
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU0MwLWNBN2w4YVN0cDFGdkxsWjROT2NRMFRVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi83QjFCOEEyODJD
OUExMUVFQTYzRTg3MUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGevODANBgkqhkiG9w0BAQsFAAOCAQEASwnEiNaPNmI8Vx0e
hdIja6nZd4+u19JQvqdstLIRNLxg58exRqV6x5gG/udWUQUL/FFNJ5HRhQWdPLIk
Uyzgl0kT/nNm2Lb3zB0rCumLZOraDHi/0stHjurVcfz9MMFalMjhz7z+LaC8zT4t
RfFu4a9fAVbGbN6zlF7n/srIRf/ji7QtpfX3YnxwJim/cALrOSG6d1emtwwE7032
JMn2KxPbQalbj4ULjbjIRuA9W2Fc9dqDt/jMjbGTQPRECBHn18YGYIOGGznwT6HM
hm4kSa3qzqdl7284ZOh1kEW8lnBSmcAaQnY/UozAWkKIeLyY2ditoaBS9xoDFCvT
ycGHTQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:37:14 2025 by rpki-client