Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/936822385BDA11EF98C26511C4F9AE02.roa
File: 936822385BDA11EF98C26511C4F9AE02.roa (raw, json)
Hash identifier: orcuIVQDXa55MgUEa+uvpleaNB+r/DtukKrLYo38vu4=
Subject key identifier: 7E:49:3F:C9:75:02:41:14:86:1F:20:9E:19:B1:47:20:CC:DB:0E:27
Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Certificate serial: 18E4
Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/936822385BDA11EF98C26511C4F9AE02.roa
Signing time: Fri 16 Aug 2024 14:19:40 +0000
ROA not before: Fri 16 Aug 2024 14:19:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136479
IP address blocks: 103.89.152.0/24 maxlen: 24
103.89.153.0/24 maxlen: 24
103.126.4.0/24 maxlen: 24
103.126.5.0/24 maxlen: 30
2001:df0:d500::/48 maxlen: 51
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6372 (0x18e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FB7F
Validity
Not Before: Aug 16 14:19:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66bf5ffc-14a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:c2:69:20:97:65:e5:5f:6f:d0:a8:db:cd:
cb:6e:4c:74:3d:66:b0:dc:40:dd:61:7e:a6:40:ef:
73:5e:27:75:92:39:15:dd:d3:e6:a4:7c:2d:e1:d1:
21:13:40:62:c2:63:ee:4e:f4:9a:9a:2d:0c:23:0f:
3f:f7:e9:82:00:41:6c:6a:c1:d5:d5:36:c5:ff:cf:
6b:86:fd:0d:6f:eb:7c:8a:68:4f:40:a8:a1:da:3b:
d9:0b:18:fe:88:38:40:5b:ec:dc:d1:88:da:ef:2a:
6e:3b:0f:c6:83:5a:87:fd:49:d4:cc:e1:d5:9d:2d:
ed:82:15:26:08:13:6a:4f:53:ce:5f:b5:fd:a7:ff:
98:11:0e:2d:5e:04:ac:e4:9b:19:b8:9c:8d:79:08:
43:f6:a4:74:f7:ef:22:7d:91:76:b5:4a:1a:8b:5a:
a1:b2:b4:54:0c:ad:2d:c5:f4:a7:a4:a7:a6:bd:af:
67:79:85:f2:dc:b7:02:c0:fa:ff:37:bf:03:a8:c6:
6e:0b:f5:03:9d:e8:b7:8c:fb:ba:f8:b8:d6:1f:89:
44:39:6a:05:a9:b5:60:f2:f3:d5:f8:d3:c0:27:12:
d7:7f:78:0c:5e:55:35:82:5c:69:0e:51:fb:3e:57:
76:90:0f:ea:86:0d:ca:d6:75:cf:64:d5:65:f8:a0:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:49:3F:C9:75:02:41:14:86:1F:20:9E:19:B1:47:20:CC:DB:0E:27
X509v3 Authority Key Identifier:
keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/936822385BDA11EF98C26511C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.152.0/23
103.126.4.0/23
IPv6:
2001:df0:d500::/48
Signature Algorithm: sha256WithRSAEncryption
58:d4:14:2b:0b:f4:be:e2:28:92:36:6e:10:27:45:58:51:9f:
23:55:73:73:d5:f5:d9:9e:42:93:4d:5b:a5:99:61:75:a7:4c:
2e:65:2d:45:d6:f0:de:25:d1:4f:e8:f9:a5:69:6f:06:9c:88:
14:01:9a:d9:e3:d6:28:0a:80:ff:5b:09:28:7b:8b:be:b0:48:
05:78:9e:52:40:ab:63:79:13:d1:57:0e:fe:5f:6c:43:59:94:
78:aa:57:47:f6:51:90:46:96:8c:2b:76:d5:08:af:da:d6:9d:
22:07:6a:66:00:65:1c:22:02:d8:20:70:19:dd:c6:0d:9e:29:
1a:e7:1a:c6:78:0a:3a:6a:85:92:74:15:70:27:16:c6:84:cf:
93:2d:dd:46:ce:81:29:4a:d0:4e:66:5c:78:90:20:d4:da:84:
16:e1:aa:0c:89:e6:8e:e0:55:b6:ed:df:08:2d:9e:9f:6d:7b:
78:1a:67:4b:a6:a3:03:dc:20:11:b9:f6:cf:63:82:44:7a:64:
04:7c:5f:a1:5a:c5:54:31:bf:37:ce:3b:8c:92:12:51:ab:19:
66:9d:56:63:80:4d:a2:a6:ff:2d:ef:68:4c:02:73:ea:b6:76:
89:be:2a:0a:44:15:f8:c3:c4:10:e9:dd:9d:a3:bb:dc:b6:f5:
7f:52:61:d2
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICGOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw
QTA0NzNCNDMwHhcNMjQwODE2MTQxOTQwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJmNWZmYy0xNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwzjCaSCXZeVfb9Co283Lbkx0PWaw3EDdYX6mQO9zXid1kjkV3dPmpHwt4dEh
E0BiwmPuTvSami0MIw8/9+mCAEFsasHV1TbF/89rhv0Nb+t8imhPQKih2jvZCxj+
iDhAW+zc0Yja7ypuOw/Gg1qH/UnUzOHVnS3tghUmCBNqT1POX7X9p/+YEQ4tXgSs
5JsZuJyNeQhD9qR09+8ifZF2tUoai1qhsrRUDK0txfSnpKemva9neYXy3LcCwPr/
N78DqMZuC/UDnei3jPu6+LjWH4lEOWoFqbVg8vPV+NPAJxLXf3gMXlU1glxpDlH7
Pld2kA/qhg3K1nXPZNVl+KACoQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFH5JP8l1
AkEUhh8gnhmxRyDM2w4nMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD
QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZCN0YvMUJBRTI2NTQ3Q0M5MTFFNzkyQ0JBOTQ0QzRGOUFFMDIvOTM2ODIyMzg1
QkRBMTFFRjk4QzI2NTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBAFnWZgDBAFnfgQwDwQCAAIwCQMHACABDfDVADANBgkqhkiG
9w0BAQsFAAOCAQEAWNQUKwv0vuIokjZuECdFWFGfI1Vzc9X12Z5Ck01bpZlhdadM
LmUtRdbw3iXRT+j5pWlvBpyIFAGa2ePWKAqA/1sJKHuLvrBIBXieUkCrY3kT0VcO
/l9sQ1mUeKpXR/ZRkEaWjCt21Qiv2tadIgdqZgBlHCIC2CBwGd3GDZ4pGucaxngK
OmqFknQVcCcWxoTPky3dRs6BKUrQTmZceJAg1NqEFuGqDInmjuBVtu3fCC2en217
eBpnS6ajA9wgEbn2z2OCRHpkBHxfoVrFVDG/N847jJISUasZZp1WY4BNoqb/Le9o
TAJz6rZ2ib4qCkQV+MPEEOndnaO73Lb1f1Jh0g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:51:24 2025 by rpki-client