Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/58B9330CC39F11EFA3B1A43BC4F9AE02.roa
File: 58B9330CC39F11EFA3B1A43BC4F9AE02.roa (raw, json)
Hash identifier: Sw8SUp++GQgdEP4JtD0KmQ2gm2NVNhVuk+DEN8OwUTw=
Subject key identifier: 5D:DA:EF:0B:04:2F:55:7F:3D:0E:CF:B6:28:21:E9:B2:F5:1F:F8:A3
Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial: 07D1
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/58B9330CC39F11EFA3B1A43BC4F9AE02.roa
Signing time: Thu 26 Dec 2024 15:37:43 +0000
ROA not before: Thu 26 Dec 2024 15:37:43 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.72.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EFDF
Validity
Not Before: Dec 26 15:37:43 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=676d7847-11e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:18:6d:f8:30:47:44:a3:4a:60:8b:29:4a:
39:91:23:2c:53:ad:e5:b1:39:0e:6f:9d:b4:c6:96:
9c:e8:ff:20:29:e0:f2:f1:3a:39:fa:cc:7f:29:b0:
5a:cb:be:22:50:68:be:93:94:4b:f1:99:c2:e1:1b:
02:ba:69:28:ec:25:18:b7:5e:35:3e:61:5e:4b:70:
b2:df:29:31:17:25:e7:30:2e:c4:2a:aa:ed:b7:3f:
bb:ff:fe:b2:f6:56:c6:be:4c:c1:6f:e4:cc:29:4d:
86:bd:e5:15:f5:78:9b:ab:ef:5e:58:fc:7a:14:2e:
78:21:ae:11:84:9d:ff:f8:d3:0e:8a:90:8b:cd:50:
0d:7c:2a:79:ad:b9:96:87:1b:ee:66:78:3e:aa:67:
78:de:7e:10:2f:19:00:cd:cf:17:19:f2:17:65:61:
2a:63:88:69:74:86:8c:57:0d:50:f3:6e:7b:b3:6a:
9f:46:5f:ab:ea:73:4b:e4:01:a6:d0:94:62:8b:1d:
c9:44:91:e5:7e:99:50:51:21:a8:26:77:e5:37:d2:
9b:e2:98:48:79:46:24:4e:17:2d:6e:2f:f2:bf:5f:
ae:b4:2c:2b:36:0a:72:6d:0b:6d:43:3b:56:28:4b:
0f:e0:35:fc:f7:be:f9:62:2e:e4:02:54:bc:e2:e8:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DA:EF:0B:04:2F:55:7F:3D:0E:CF:B6:28:21:E9:B2:F5:1F:F8:A3
X509v3 Authority Key Identifier:
keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/58B9330CC39F11EFA3B1A43BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.102.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:2c:a8:fb:56:5c:03:c4:d6:01:f9:4d:02:f4:cc:96:25:bb:
e1:1e:54:ad:7d:36:ed:93:9d:4b:06:fe:26:08:18:1b:af:90:
f1:35:70:28:7a:ca:10:05:9f:57:1b:b4:dc:0a:72:f7:42:ec:
18:ca:77:f6:29:f3:9d:e1:28:bf:76:50:a2:af:42:ff:7a:86:
cf:c7:e3:fb:5e:7f:d6:fa:a5:9a:cb:11:1c:94:ea:b5:ff:db:
5a:f5:48:38:81:fa:62:92:56:22:91:55:62:8b:1a:e1:92:46:
73:4f:f6:6a:eb:75:bd:1d:14:d2:87:d2:b4:e5:47:5f:e1:10:
1c:53:97:96:bb:0f:01:70:25:f0:42:67:81:c2:f0:12:c9:69:
74:0c:a3:89:2c:f2:b9:fe:8c:0e:01:eb:c1:ce:0a:84:e5:1f:
d7:50:52:7e:a4:4a:94:34:f0:9f:0b:51:72:4a:d0:ef:32:56:
45:2d:8d:2e:6a:dd:e0:54:5f:e6:cb:60:37:ed:e9:e2:eb:b7:
38:c9:bf:f9:bc:6a:d6:f7:db:0f:28:e8:d5:1f:63:70:2f:61:
75:70:6d:c3:91:8b:e2:d2:2d:40:0b:46:be:37:fe:0f:f6:8f:
ee:15:67:74:af:4d:b3:a1:b8:f6:33:8b:a6:a3:3c:75:8f:d9:
58:ed:6a:01
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVGREYxMTAvBgNVBAUTKEU4QzIxQjAzQjY1MDgzQjIxQkZBMzc1MjZEMTJCMzQx
RjI0OUNDOEIwHhcNMjQxMjI2MTUzNzQzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzZkNzg0Ny0xMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQEYbfgwR0SjSmCLKUo5kSMsU63lsTkOb520xpac6P8gKeDy8To5+sx/KbBa
y74iUGi+k5RL8ZnC4RsCumko7CUYt141PmFeS3Cy3ykxFyXnMC7EKqrttz+7//6y
9lbGvkzBb+TMKU2GveUV9Xibq+9eWPx6FC54Ia4RhJ3/+NMOipCLzVANfCp5rbmW
hxvuZng+qmd43n4QLxkAzc8XGfIXZWEqY4hpdIaMVw1Q8257s2qfRl+r6nNL5AGm
0JRiix3JRJHlfplQUSGoJnflN9Kb4phIeUYkThctbi/yv1+utCwrNgpybQttQztW
KEsP4DX89775Yi7kAlS84ujUOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF3a7wsE
L1V/PQ7Ptigh6bL1H/ijMB8GA1UdIwQYMBaAFOjCGwO2UIOyG/o3Um0Ss0HyScyL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUZERi8wQkREN0VBMkU5
MEMxMUVBOTY1QzJBMkZDNEY5QUUwMi82TUliQTdaUWc3SWItamRTYlJLelFmSkp6
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZNSWJBN1pRZzdJYi1qZFNiUkt6UWZKSnpJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUVGREYvMEJERDdFQTJFOTBDMTFFQTk2NUMyQTJGQzRGOUFFMDIvNThCOTMzMEND
MzlGMTFFRkEzQjFBNDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnSGYwDQYJKoZIhvcNAQELBQADggEBALssqPtWXAPE1gH5
TQL0zJYlu+EeVK19Nu2TnUsG/iYIGBuvkPE1cCh6yhAFn1cbtNwKcvdC7BjKd/Yp
853hKL92UKKvQv96hs/H4/tef9b6pZrLERyU6rX/21r1SDiB+mKSViKRVWKLGuGS
RnNP9mrrdb0dFNKH0rTlR1/hEBxTl5a7DwFwJfBCZ4HC8BLJaXQMo4ks8rn+jA4B
68HOCoTlH9dQUn6kSpQ08J8LUXJK0O8yVkUtjS5q3eBUX+bLYDft6eLrtzjJv/m8
atb32w8o6NUfY3AvYXVwbcORi+LSLUALRr43/g/2j+4VZ3SvTbOhuPYzi6ajPHWP
2VjtagE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:13:41 2025 by rpki-client