Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/E481FBD6F2A611EF8F8C0C51C4F9AE02.roa
File: E481FBD6F2A611EF8F8C0C51C4F9AE02.roa (raw, json)
Hash identifier: rOlmx7NLEb+/6Z0WaNegvvWuYLCZ13Lf0KRMYjNeM8w=
Subject key identifier: AA:AF:12:39:2D:9B:EE:18:C1:71:41:38:C2:F4:DA:76:4D:39:CD:D9
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 0573
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/E481FBD6F2A611EF8F8C0C51C4F9AE02.roa
Signing time: Mon 24 Feb 2025 12:00:48 +0000
ROA not before: Mon 24 Feb 2025 12:00:48 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 147002
IP address blocks: 103.172.134.0/24 maxlen: 24
103.172.135.0/24 maxlen: 24
2407:d340::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395 (0x573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E
Validity
Not Before: Feb 24 12:00:48 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67bc5f70-12d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:8e:cc:e5:99:74:36:9e:db:0d:58:53:ac:
85:56:97:b6:04:2b:87:ed:18:4e:cf:4c:ec:ec:16:
04:93:ea:dc:b7:ed:03:ed:c5:c0:1d:4a:ec:8f:5c:
3f:f2:28:ce:31:3c:94:a7:0e:cb:1b:d8:be:44:72:
6a:20:1d:9b:56:62:98:fb:74:f3:06:6c:6b:fa:11:
b6:d4:fe:2c:95:a1:e3:00:8a:f8:00:31:d9:77:d6:
21:83:fa:2c:a0:77:24:83:b9:2b:75:fe:98:61:11:
13:26:ab:8c:95:6f:6d:0c:94:45:78:f8:f1:97:a8:
36:a3:d7:c6:7f:0b:b5:ff:cf:f2:6f:1e:38:0e:b2:
e5:12:91:ac:24:c6:cc:2a:26:d6:09:b2:a6:e9:9c:
60:9f:d4:e1:80:68:55:74:af:29:a0:91:a4:ff:66:
a9:98:62:60:a3:d4:5c:ca:5c:32:10:7a:11:54:f1:
c1:7b:76:8a:af:28:33:d3:4c:0e:cf:79:a3:17:fa:
66:30:e4:be:3b:ab:83:f1:0f:c2:33:4e:6e:7d:90:
3b:47:ba:9a:9b:de:73:c0:9d:92:e4:16:61:39:fb:
27:76:f5:dd:f4:a3:88:9b:4d:1f:dd:3a:7f:00:c1:
c0:9b:0e:25:7b:42:b1:9d:a4:ca:36:a6:37:ac:eb:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:12:39:2D:9B:EE:18:C1:71:41:38:C2:F4:DA:76:4D:39:CD:D9
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/E481FBD6F2A611EF8F8C0C51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.134.0/23
IPv6:
2407:d340::/32
Signature Algorithm: sha256WithRSAEncryption
8e:ad:fb:ad:a1:f9:f1:3a:e5:ef:49:6b:a1:c0:cc:94:fe:c0:
b9:35:49:8b:a0:cf:70:f4:4e:26:c0:35:2f:7b:15:57:53:54:
21:da:45:a7:83:60:b7:8a:89:be:e0:55:73:9d:31:bc:e8:e4:
03:e8:47:90:ab:5b:09:3a:f5:7c:a1:5f:fc:05:13:ca:5d:44:
79:c9:a0:c2:25:a4:1c:31:53:ac:4f:84:bd:cf:3c:ae:59:9f:
3e:11:34:9b:92:b5:a1:6e:1f:1d:45:9b:d8:33:8c:15:4c:27:
eb:be:d3:c8:70:59:03:94:83:bd:b1:e3:00:ef:7d:74:df:11:
18:ec:35:2d:7d:02:94:be:20:97:29:c2:da:c4:0a:ab:9a:90:
ec:93:d1:98:56:64:7f:5d:7c:2a:b2:0b:78:c7:82:ab:a5:80:
61:84:95:34:38:b9:2c:0a:5e:9b:5f:7c:8a:d9:ab:d2:84:93:
88:0e:e7:7d:f4:9b:15:e1:44:70:3c:b0:71:50:e0:17:79:ca:
74:83:28:66:86:40:a8:a0:13:c5:33:74:88:c7:b7:61:13:7c:
d3:4b:08:27:16:0c:c3:ee:29:71:b0:ce:1f:ff:ad:09:4c:58:
72:b5:62:89:41:a7:18:b9:15:5f:c3:44:74:9b:e8:b5:e4:a8:
be:54:20:5b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2
QzY2MkFGRDUwHhcNMjUwMjI0MTIwMDQ4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2JjNWY3MC0xMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+OOzOWZdDae2w1YU6yFVpe2BCuH7RhOz0zs7BYEk+rct+0D7cXAHUrsj1w/
8ijOMTyUpw7LG9i+RHJqIB2bVmKY+3TzBmxr+hG21P4slaHjAIr4ADHZd9Yhg/os
oHckg7krdf6YYRETJquMlW9tDJRFePjxl6g2o9fGfwu1/8/ybx44DrLlEpGsJMbM
KibWCbKm6Zxgn9ThgGhVdK8poJGk/2apmGJgo9RcylwyEHoRVPHBe3aKrygz00wO
z3mjF/pmMOS+O6uD8Q/CM05ufZA7R7qam95zwJ2S5BZhOfsndvXd9KOIm00f3Tp/
AMHAmw4le0KxnaTKNqY3rOuCZwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKqvEjkt
m+4YwXFBOML02nZNOc3ZMB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC
MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvRTQ4MUZCRDZG
MkE2MTFFRjhGOEMwQzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnrIYwDQQCAAIwBwMFACQH00AwDQYJKoZIhvcNAQELBQAD
ggEBAI6t+62h+fE65e9Ja6HAzJT+wLk1SYugz3D0TibANS97FVdTVCHaRaeDYLeK
ib7gVXOdMbzo5APoR5CrWwk69XyhX/wFE8pdRHnJoMIlpBwxU6xPhL3PPK5Znz4R
NJuStaFuHx1Fm9gzjBVMJ+u+08hwWQOUg72x4wDvfXTfERjsNS19ApS+IJcpwtrE
CquakOyT0ZhWZH9dfCqyC3jHgqulgGGElTQ4uSwKXptffIrZq9KEk4gO5330mxXh
RHA8sHFQ4Bd5ynSDKGaGQKigE8UzdIjHt2ETfNNLCCcWDMPuKXGwzh//rQlMWHK1
YolBpxi5FV/DRHSb6LXkqL5UIFs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 13:22:19 2025 by rpki-client