Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/46A569387DA911EFAC4E642AC4F9AE02.roa
File: 46A569387DA911EFAC4E642AC4F9AE02.roa (raw, json)
Hash identifier: f8XNdnN9MpGjh5uhvA20BgKfLLbWC1Eb3g7qFqX+uVY=
Subject key identifier: 96:81:F9:3E:40:09:D3:A2:0B:8C:4C:11:F3:A6:5E:78:ED:1E:DA:03
Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial: 0330
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/46A569387DA911EFAC4E642AC4F9AE02.roa
Signing time: Thu 03 Oct 2024 01:34:41 +0000
ROA not before: Thu 03 Oct 2024 01:34:41 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 133793
IP address blocks: 103.43.20.0/24 maxlen: 24
103.43.21.0/24 maxlen: 24
103.43.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816 (0x330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91799A0
Validity
Not Before: Oct 3 01:34:41 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fdf4b1-5b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:b9:61:61:16:c9:ec:dc:4b:47:23:f3:7e:
c0:3d:74:01:db:d9:c3:2d:2f:b3:3a:cc:a6:30:8c:
d4:ad:c1:6b:96:69:6b:6c:4b:62:9d:f9:76:a3:1b:
91:2d:50:7a:78:20:e0:37:83:2c:ec:e6:e3:cd:5d:
bb:26:25:32:26:0d:65:b9:91:ae:ea:ec:99:f3:ab:
19:93:c1:4a:1d:44:0e:34:16:33:55:ba:d5:c3:8c:
27:6e:2e:f9:39:91:46:ba:da:ad:49:bf:bc:07:ce:
bc:53:df:de:a6:e2:2f:5f:52:e3:7b:1c:62:2e:cb:
bd:3c:e9:ef:a7:f8:78:2b:19:4e:ae:65:02:18:75:
02:6d:2d:1e:2e:d0:e1:63:e1:21:f1:dd:3e:32:70:
84:b4:79:63:0b:db:51:6c:ad:67:09:ab:df:fe:d2:
be:d8:1b:c1:bb:aa:7d:3a:8f:58:04:25:e1:c6:57:
1e:51:6d:6e:05:1b:63:16:26:0a:05:db:a2:4c:05:
58:c4:45:dc:dd:5d:0f:93:47:a3:ed:cd:36:e5:17:
3d:f1:b2:3d:86:d1:7b:6e:de:2e:88:a8:17:1e:d7:
25:65:01:2d:2c:3e:e7:d5:d7:f2:eb:aa:30:02:d2:
7d:90:ea:36:6a:bc:1b:00:11:b0:ce:da:cd:be:92:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:81:F9:3E:40:09:D3:A2:0B:8C:4C:11:F3:A6:5E:78:ED:1E:DA:03
X509v3 Authority Key Identifier:
keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/46A569387DA911EFAC4E642AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.20.0-103.43.22.255
Signature Algorithm: sha256WithRSAEncryption
38:39:b5:08:98:af:f7:50:38:88:9c:d5:20:71:01:cf:b4:62:
66:bf:b5:e2:fa:a6:19:db:13:63:91:c7:1a:fb:26:21:b1:9b:
dd:2d:b6:31:b5:93:f8:da:79:2a:0e:f8:23:8e:ca:40:ef:2d:
84:26:0a:42:86:6f:07:41:d0:00:f1:1e:8c:f3:7f:fc:5d:09:
e7:4e:df:92:f6:24:fb:8a:56:b0:9c:f1:3f:ad:e2:30:11:04:
0b:f4:15:b1:17:2a:64:2e:9e:1b:c5:70:51:63:ed:ca:4e:bf:
75:ef:f6:f1:66:57:62:0a:8e:38:35:20:2f:e6:18:19:f6:aa:
6a:da:fa:36:26:25:d4:94:f8:89:a6:18:ca:29:9d:2d:f8:02:
ed:6e:f2:8c:b2:c0:0e:72:a8:e4:94:0f:b6:63:04:b2:f5:67:
0b:6e:5e:53:40:9f:c8:ed:6f:27:3f:58:67:87:48:5e:97:a8:
39:8a:03:25:e8:43:ed:22:83:70:aa:a7:8c:9a:dd:bd:31:27:
dc:6b:a0:74:91:f5:8d:65:34:d2:fb:fd:d4:36:94:b9:bf:8a:
cd:94:fc:b9:9a:72:22:c2:25:96:ca:94:e2:a2:3c:a5:61:e8:
d9:17:f0:ba:52:d2:10:7c:f0:85:51:3e:35:08:72:5f:bb:12:
54:4f:60:06
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk5QTAxMTAvBgNVBAUTKDM3RTAzNTI0QjU4NDdEQkVBRDAwRkUzNzhDNDZBQkQw
Q0E3MDQ1RjgwHhcNMjQxMDAzMDEzNDQxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZkZjRiMS01Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxEO5YWEWyezcS0cj837APXQB29nDLS+zOsymMIzUrcFrlmlrbEtinfl2oxuR
LVB6eCDgN4Ms7ObjzV27JiUyJg1luZGu6uyZ86sZk8FKHUQONBYzVbrVw4wnbi75
OZFGutqtSb+8B868U9/epuIvX1LjexxiLsu9POnvp/h4KxlOrmUCGHUCbS0eLtDh
Y+Eh8d0+MnCEtHljC9tRbK1nCavf/tK+2BvBu6p9Oo9YBCXhxlceUW1uBRtjFiYK
BduiTAVYxEXc3V0Pk0ej7c025Rc98bI9htF7bt4uiKgXHtclZQEtLD7n1dfy66ow
AtJ9kOo2arwbABGwztrNvpKSUwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFJaB+T5A
CdOiC4xMEfOmXnjtHtoDMB8GA1UdIwQYMBaAFDfgNSS1hH2+rQD+N4xGq9DKcEX4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTlBMC80MEVEQTExRTlB
RTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZiNnRBUDQzakVhcjBNcHdS
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04tQTFKTFdFZmI2dEFQNDNqRWFyME1wd1JmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzk5QTAvNDBFREExMUU5QUU4MTFFQzk3NEI0OTFDQzRGOUFFMDIvNDZBNTY5Mzg3
REE5MTFFRkFDNEU2NDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAmcrFAMEAGcrFjANBgkqhkiG9w0BAQsFAAOCAQEAODm1
CJiv91A4iJzVIHEBz7RiZr+14vqmGdsTY5HHGvsmIbGb3S22MbWT+Np5Kg74I47K
QO8thCYKQoZvB0HQAPEejPN//F0J507fkvYk+4pWsJzxP63iMBEEC/QVsRcqZC6e
G8VwUWPtyk6/de/28WZXYgqOODUgL+YYGfaqatr6NiYl1JT4iaYYyimdLfgC7W7y
jLLADnKo5JQPtmMEsvVnC25eU0CfyO1vJz9YZ4dIXpeoOYoDJehD7SKDcKqnjJrd
vTEn3GugdJH1jWU00vv91DaUub+KzZT8uZpyIsIllsqU4qI8pWHo2RfwulLSEHzw
hVE+NQhyX7sSVE9gBg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:39:43 2025 by rpki-client