Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/00BA1DE2BF7611EF909DC53AC4F9AE02.roa
File: 00BA1DE2BF7611EF909DC53AC4F9AE02.roa (raw, json)
Hash identifier: 6TOnQWh6Rh+leK78qFxhx/YmmJcw0Ed9TDfHGSQYc/s=
Subject key identifier: 38:4E:DB:B8:8D:3F:D4:11:53:26:F3:1C:BA:A8:26:BD:90:76:28:3C
Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial: 264A
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/00BA1DE2BF7611EF909DC53AC4F9AE02.roa
Signing time: Sat 21 Dec 2024 08:31:41 +0000
ROA not before: Sat 21 Dec 2024 08:31:41 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 139870
IP address blocks: 103.139.234.0/23 maxlen: 23
103.139.234.0/24 maxlen: 24
103.139.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9802 (0x264a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DB0
Validity
Not Before: Dec 21 08:31:41 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67667ced-bd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:9f:91:3a:ae:7b:8f:95:67:9e:05:39:c4:
d1:da:b0:cd:45:1a:91:33:b2:e3:b2:d8:60:3d:c7:
7c:e3:50:92:85:e0:e2:b2:ad:39:01:7a:be:4a:fd:
16:c6:b9:b8:24:f6:cc:cf:74:b2:21:11:0f:ab:d2:
1d:ef:cc:4a:35:f0:4f:2c:ec:a4:02:03:ff:7c:e5:
92:44:e8:a4:6c:e8:6b:c3:18:b5:c8:34:fd:7f:37:
61:66:74:6f:dd:c2:fb:5e:c2:99:79:dd:6d:4e:81:
37:4f:30:f8:f9:f5:ac:e3:64:31:9f:82:98:c8:7d:
25:a2:50:54:44:aa:0d:eb:44:54:d5:9b:05:24:5e:
89:e4:e8:3e:2e:dc:f6:62:9e:40:38:03:42:ef:c4:
bf:54:46:26:12:92:63:83:89:a3:a1:c2:5d:36:60:
15:d9:8b:28:22:b4:ee:58:82:c9:6b:16:b1:db:8c:
4a:d4:79:49:43:9c:19:67:6b:ec:1e:47:02:b5:7b:
bf:74:5a:d1:a7:20:46:72:a5:ab:91:28:84:e8:bc:
f4:49:79:a0:5f:a3:81:8b:84:ed:de:ed:c8:78:dc:
83:2b:58:5f:67:c6:c9:2c:50:0f:40:a5:b0:58:84:
47:52:63:6b:3e:de:2b:fd:26:0a:0e:5e:b8:49:c8:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:DB:B8:8D:3F:D4:11:53:26:F3:1C:BA:A8:26:BD:90:76:28:3C
X509v3 Authority Key Identifier:
keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/00BA1DE2BF7611EF909DC53AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.234.0/23
Signature Algorithm: sha256WithRSAEncryption
16:6e:62:ab:c0:a2:0d:c5:13:ca:73:18:60:89:4e:9b:b2:28:
41:50:19:4b:8b:8f:62:04:fb:f1:d7:d5:ef:f9:ea:18:43:62:
ba:e7:89:b1:e1:50:27:fe:eb:be:77:c1:ef:df:19:ae:ba:70:
88:fd:8e:1d:95:5e:6f:97:0a:ba:c1:6a:0c:38:6b:9a:d2:81:
39:25:b9:7d:5b:fd:f1:e9:58:c7:fb:ab:af:d1:5d:eb:69:38:
bc:32:9e:79:a8:ee:a7:9d:64:0b:50:b7:f4:bc:5c:bc:58:d0:
ed:f0:96:86:87:d8:49:c5:e3:2e:ce:6e:8c:62:e8:73:5c:a9:
7b:ca:f3:87:51:94:92:21:ae:96:3d:58:16:2f:b3:d2:a2:31:
1a:de:65:6b:90:1e:68:01:84:a1:92:29:d5:d3:73:c3:a0:50:
37:c0:c8:0e:df:08:50:c1:96:ca:1c:16:2e:74:6c:79:85:e4:
ea:99:2b:03:43:6b:b4:6a:11:98:3f:ff:83:d6:a0:cf:a4:ca:
f1:b2:24:f7:8b:32:7f:ee:31:63:65:0a:bf:b4:1f:f1:43:81:
2e:ed:f5:86:7b:e2:af:5c:d9:7b:4e:d9:e8:b9:73:bd:93:c8:
76:23:5d:29:2d:1a:0f:7c:ea:0e:ad:fb:57:7a:fd:70:46:51:
26:fe:43:7a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD
REE3NDZCRDQwHhcNMjQxMjIxMDgzMTQxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY2N2NlZC1iZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKSfkTque4+VZ54FOcTR2rDNRRqRM7LjsthgPcd841CSheDisq05AXq+Sv0W
xrm4JPbMz3SyIREPq9Id78xKNfBPLOykAgP/fOWSROikbOhrwxi1yDT9fzdhZnRv
3cL7XsKZed1tToE3TzD4+fWs42Qxn4KYyH0lolBURKoN60RU1ZsFJF6J5Og+Ltz2
Yp5AOANC78S/VEYmEpJjg4mjocJdNmAV2YsoIrTuWILJaxax24xK1HlJQ5wZZ2vs
HkcCtXu/dFrRpyBGcqWrkSiE6Lz0SXmgX6OBi4Tt3u3IeNyDK1hfZ8bJLFAPQKWw
WIRHUmNrPt4r/SYKDl64ScgKvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDhO27iN
P9QRUybzHLqoJr2Qdig8MB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1
MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDNEQjAvQjg5NUFGNzQwNTE1MTFFNThENDlBRTQyQzRGOUFFMDIvMDBCQTFERTJC
Rjc2MTFFRjkwOURDNTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFni+owDQYJKoZIhvcNAQELBQADggEBABZuYqvAog3FE8pz
GGCJTpuyKEFQGUuLj2IE+/HX1e/56hhDYrrnibHhUCf+6753we/fGa66cIj9jh2V
Xm+XCrrBagw4a5rSgTkluX1b/fHpWMf7q6/RXetpOLwynnmo7qedZAtQt/S8XLxY
0O3wloaH2EnF4y7Oboxi6HNcqXvK84dRlJIhrpY9WBYvs9KiMRreZWuQHmgBhKGS
KdXTc8OgUDfAyA7fCFDBlsocFi50bHmF5OqZKwNDa7RqEZg//4PWoM+kyvGyJPeL
Mn/uMWNlCr+0H/FDgS7t9YZ74q9c2XtO2ei5c72TyHYjXSktGg986g6t+1d6/XBG
USb+Q3o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:38:32 2025 by rpki-client