Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa
File: 710A095EB62A11EF9D01E53DC4F9AE02.roa (raw, json)
Hash identifier: 5lEL9eS9yJhHrkaY87CyfNgKHrW5Wh6Msg6SUfVkO2Q=
Subject key identifier: 0D:9D:93:80:67:72:B6:C2:45:6A:21:A6:A5:D3:64:E4:3E:50:1A:AD
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 01B1
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa
Signing time: Mon 09 Dec 2024 12:38:08 +0000
ROA not before: Mon 09 Dec 2024 12:38:08 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 395793
IP address blocks: 103.62.1.0/24 maxlen: 24
103.62.2.0/24 maxlen: 24
103.62.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814
Validity
Not Before: Dec 9 12:38:08 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6756e4af-2f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:43:50:f3:5d:5d:d6:1f:88:25:ad:95:fc:
10:8e:bd:4d:1f:48:22:f9:78:57:4b:52:47:30:40:
a5:72:0e:0a:b6:e0:b2:d4:86:65:22:7f:7a:98:53:
c7:ac:78:a2:ad:5c:c2:0a:1d:8f:05:d9:51:c4:be:
68:67:c8:db:25:15:a2:ae:84:9e:f1:85:e8:5e:d5:
1b:df:90:f4:7e:aa:90:b3:11:37:37:bb:c9:de:8b:
5a:4e:7d:5b:5e:ce:88:74:fa:52:87:c0:98:24:5f:
9f:03:6e:5a:e1:a8:eb:d1:cd:f5:71:ec:5d:c5:cd:
4c:ad:18:9b:56:c6:b1:f1:48:d4:5d:6a:46:bd:d6:
ae:cc:2c:ca:c2:e4:3b:5f:56:8b:47:12:ec:bd:e8:
fc:0a:70:03:0e:3c:0d:7b:05:8e:49:10:7d:fa:0b:
83:10:00:67:f5:f3:ac:c1:1e:df:06:da:4f:23:4d:
ff:28:f1:10:2b:84:17:20:59:af:ae:d5:4d:13:7f:
79:03:64:60:7d:72:90:bd:bf:f9:57:7b:7c:e1:dd:
c8:83:83:2e:1b:c3:1b:00:a4:a8:fa:0f:d7:4c:0c:
4f:ee:a9:c9:4d:28:f1:e4:ec:de:97:4f:99:c6:8a:
06:ef:09:ba:ba:05:f6:22:84:f5:cf:48:cd:e6:d1:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:93:80:67:72:B6:C2:45:6A:21:A6:A5:D3:64:E4:3E:50:1A:AD
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/710A095EB62A11EF9D01E53DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.1.0-103.62.3.255
Signature Algorithm: sha256WithRSAEncryption
af:02:9a:7e:ee:c6:81:a9:66:fa:84:e5:e9:a9:db:38:a2:0d:
92:c3:8a:9e:34:d1:ae:89:6e:6d:9e:00:6b:66:68:b6:98:d4:
aa:b5:92:f8:23:81:44:14:73:a9:98:7f:0e:14:b8:5a:46:e1:
1c:1b:b7:bf:54:b8:c3:3a:02:86:6f:a2:13:3c:9f:7f:5a:27:
c3:53:1b:52:ac:92:71:29:2b:cd:af:77:d2:e3:7b:99:5a:ea:
58:d4:1d:bf:3f:d4:b9:00:60:b7:d5:d4:c8:25:6c:b3:77:47:
30:bc:3d:c8:84:5c:83:bb:2a:e9:d1:b3:b1:f8:70:f4:12:2e:
4b:73:c4:be:cb:59:d8:9d:e3:ef:ea:3d:5f:a4:ea:ff:50:43:
ab:c9:5c:62:21:06:87:ed:bb:81:df:18:1a:e3:45:67:9f:d9:
db:29:e4:f6:54:58:a6:69:b1:66:fa:2d:19:fd:5a:f3:7f:bd:
25:fc:83:aa:a4:28:f2:ea:81:42:17:23:02:7a:88:20:8c:f2:
9b:65:0c:87:fe:86:44:31:2a:d9:0a:1d:1e:71:58:7f:26:65:
03:d2:e8:c0:89:85:a6:f8:83:c9:a3:0d:3e:6a:5f:fe:6a:20:
d1:81:4a:34:15:dc:0a:fd:e7:e2:37:94:f9:d6:c6:ed:b7:50:
fb:3e:fb:49
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2
MTM2MTRCQ0EwHhcNMjQxMjA5MTIzODA4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzU2ZTRhZi0yZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1/ZDUPNdXdYfiCWtlfwQjr1NH0gi+XhXS1JHMEClcg4KtuCy1IZlIn96mFPH
rHiirVzCCh2PBdlRxL5oZ8jbJRWiroSe8YXoXtUb35D0fqqQsxE3N7vJ3otaTn1b
Xs6IdPpSh8CYJF+fA25a4ajr0c31cexdxc1MrRibVsax8UjUXWpGvdauzCzKwuQ7
X1aLRxLsvej8CnADDjwNewWOSRB9+guDEABn9fOswR7fBtpPI03/KPEQK4QXIFmv
rtVNE395A2RgfXKQvb/5V3t84d3Ig4MuG8MbAKSo+g/XTAxP7qnJTSjx5Ozel0+Z
xooG7wm6ugX2IoT1z0jN5tHjEwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFA2dk4Bn
crbCRWohpqXTZOQ+UBqtMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0
NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE4MTQvRDM4QTE5MTI3NDVFMTFFREJBNjg4NTE0QzRGOUFFMDIvNzEwQTA5NUVC
NjJBMTFFRjlEMDFFNTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAGc+AQMEAmc+ADANBgkqhkiG9w0BAQsFAAOCAQEArwKa
fu7Ggalm+oTl6anbOKINksOKnjTRrolubZ4Aa2ZotpjUqrWS+COBRBRzqZh/DhS4
WkbhHBu3v1S4wzoChm+iEzyff1onw1MbUqyScSkrza930uN7mVrqWNQdvz/UuQBg
t9XUyCVss3dHMLw9yIRcg7sq6dGzsfhw9BIuS3PEvstZ2J3j7+o9X6Tq/1BDq8lc
YiEGh+27gd8YGuNFZ5/Z2ynk9lRYpmmxZvotGf1a83+9JfyDqqQo8uqBQhcjAnqI
IIzym2UMh/6GRDEq2QodHnFYfyZlA9LowImFpviDyaMNPmpf/mog0YFKNBXcCv3n
4jeU+dbG7bdQ+z77SQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:07:51 2025 by rpki-client