Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa
File: D25A6970F40911EA8A5C9E70C4F9AE02.roa (raw, json)
Hash identifier: Ka3pUjVhAjV8Jw2bqRS1fw1Jl4NqlRDOjR/Fjs/H0+M=
Subject key identifier: 0B:01:40:25:3A:62:B3:6B:02:3D:0B:38:C1:CB:B3:5B:8A:F7:36:CC
Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
Certificate serial: 0752
Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa
Signing time: Fri 06 Sep 2024 22:10:59 +0000
ROA not before: Fri 06 Sep 2024 22:10:59 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 141155
IP address blocks: 103.155.119.0/24 maxlen: 24
2406:6dc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874 (0x752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ED2B
Validity
Not Before: Sep 6 22:10:59 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66db7df2-8801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3c:f5:9a:9f:8b:74:1e:b2:9f:65:4e:6b:27:
5c:b2:c0:4f:48:c4:2f:01:be:31:a4:55:7d:5e:41:
88:a7:09:5f:b8:8d:64:3a:cb:f7:95:a0:8c:a6:2e:
63:a4:d2:95:a4:39:24:69:44:fb:8e:6c:9c:9e:92:
53:cc:94:7a:f3:10:be:9a:73:75:64:b7:f1:31:b1:
0c:08:5e:1e:d4:5c:6d:19:9a:33:c6:a6:83:f6:77:
b0:1f:8e:56:3a:16:e5:d1:01:e7:02:84:dc:3b:d7:
7d:45:ac:2f:dd:b1:d3:4f:b3:58:a0:28:c2:f4:e8:
6c:81:4e:fc:f1:66:38:ab:94:97:32:4f:48:3e:fa:
87:a0:e7:ad:bd:04:72:c2:04:1e:e1:da:54:79:cf:
58:f8:bf:5b:00:6a:33:89:46:c1:74:13:c3:e0:6a:
ac:1d:dd:e9:5a:33:0e:37:f4:22:d5:bf:89:44:c9:
76:4d:dd:7d:97:b5:2a:9d:52:73:04:b1:b8:84:20:
31:d1:d9:47:87:cd:bd:bf:f8:2c:68:a1:9b:be:64:
fe:62:f7:06:c1:e2:f4:6b:63:d6:fb:a2:13:96:7e:
76:3a:3f:92:99:a7:89:68:de:33:f2:86:45:d0:2f:
5e:cc:44:48:4d:c4:f0:9f:24:e5:9a:2d:e3:82:58:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:01:40:25:3A:62:B3:6B:02:3D:0B:38:C1:CB:B3:5B:8A:F7:36:CC
X509v3 Authority Key Identifier:
keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.119.0/24
IPv6:
2406:6dc0::/32
Signature Algorithm: sha256WithRSAEncryption
94:93:05:ff:8c:cd:78:a8:aa:df:3d:23:46:6f:c3:12:24:ac:
80:99:ed:94:e0:b2:8a:d0:7c:4d:6e:4e:76:ee:57:cb:c4:2a:
0a:8b:2f:eb:c4:cc:5a:b4:97:ae:39:b7:5c:59:ca:77:d9:59:
9f:a8:03:d8:eb:27:8d:8e:ee:d6:b2:5b:e4:4f:e9:00:e3:f8:
fd:2d:5b:5e:eb:a6:2e:38:c0:d7:68:4c:34:85:f9:f1:83:7f:
a0:ad:e1:43:cf:6b:84:e8:68:0b:6c:af:fa:f9:cd:d9:54:ce:
e6:b6:28:06:a1:6d:cb:0e:9e:b1:1b:99:ba:cc:c1:99:23:61:
b2:97:2a:91:4e:80:72:7c:fa:7a:7e:07:ca:86:2d:08:01:24:
b3:09:5a:8e:19:37:a2:4c:c3:ae:b5:d4:04:86:19:57:3b:dc:
e4:99:d8:4c:0a:96:e1:0b:00:b7:e7:5d:62:bb:ae:c6:26:7a:
44:50:0b:4d:a4:96:93:b1:0e:2a:91:ba:db:04:ff:e6:b8:e4:
c0:b6:87:01:bc:10:7f:11:2e:0f:52:50:76:66:67:e3:72:15:
b8:da:47:07:1d:be:11:e9:86:3b:4a:10:f1:88:10:24:74:53:
6f:eb:7f:13:4c:e8:1a:56:ab:ea:d2:e3:ee:a2:4d:45:d8:23:
f7:33:cf:7f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0
MjFBQUU1RkUwHhcNMjQwOTA2MjIxMDU5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmRiN2RmMi04ODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Dz1mp+LdB6yn2VOaydcssBPSMQvAb4xpFV9XkGIpwlfuI1kOsv3laCMpi5j
pNKVpDkkaUT7jmycnpJTzJR68xC+mnN1ZLfxMbEMCF4e1FxtGZozxqaD9newH45W
Ohbl0QHnAoTcO9d9Rawv3bHTT7NYoCjC9OhsgU788WY4q5SXMk9IPvqHoOetvQRy
wgQe4dpUec9Y+L9bAGoziUbBdBPD4GqsHd3pWjMON/Qi1b+JRMl2Td19l7UqnVJz
BLG4hCAx0dlHh829v/gsaKGbvmT+YvcGweL0a2PW+6ITln52Oj+SmaeJaN4z8oZF
0C9ezERITcTwnyTlmi3jglh7qwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAsBQCU6
YrNrAj0LOMHLs1uK9zbMMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0
MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVEMkIvOEI2NzAwQTZGNDA4MTFFQTkwQUM1NjZGQzRGOUFFMDIvRDI1QTY5NzBG
NDA5MTFFQThBNUM5RTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBABnm3cwDQQCAAIwBwMFACQGbcAwDQYJKoZIhvcNAQELBQAD
ggEBAJSTBf+MzXioqt89I0ZvwxIkrICZ7ZTgsorQfE1uTnbuV8vEKgqLL+vEzFq0
l645t1xZynfZWZ+oA9jrJ42O7tayW+RP6QDj+P0tW17rpi44wNdoTDSF+fGDf6Ct
4UPPa4ToaAtsr/r5zdlUzua2KAahbcsOnrEbmbrMwZkjYbKXKpFOgHJ8+np+B8qG
LQgBJLMJWo4ZN6JMw6611ASGGVc73OSZ2EwKluELALfnXWK7rsYmekRQC02klpOx
DiqRutsE/+a45MC2hwG8EH8RLg9SUHZmZ+NyFbjaRwcdvhHphjtKEPGIECR0U2/r
fxNM6BpWq+rS4+6iTUXYI/czz38=
-----END CERTIFICATE-----
Generated at Fri Apr 11 20:46:59 2025 by rpki-client