Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
File: 5B5592F07B0711ED9D595969C4F9AE02.roa (raw, json)
Hash identifier: X3za7tb012nQ35aH6QmGQxHCcdo71+UHrc8XplSbxaA=
Subject key identifier: 2A:92:B1:7E:6E:97:C9:2C:19:2E:25:21:EF:8D:58:B2:A5:41:6E:5E
Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Certificate serial: 0828
Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
Signing time: Tue 30 Jul 2024 21:38:45 +0000
ROA not before: Tue 30 Jul 2024 21:38:45 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 136429
IP address blocks: 103.152.106.0/24 maxlen: 24
103.152.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EDAC
Validity
Not Before: Jul 30 21:38:45 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a95d65-cabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:67:86:e5:7a:11:40:27:33:09:79:1b:a6:
11:76:32:7e:d2:e8:34:54:86:92:ea:e9:f7:87:61:
fb:d9:ae:80:42:d2:8d:eb:f4:db:b0:b0:ee:b8:4f:
cf:92:78:fd:98:ff:3e:87:35:49:82:0b:ac:fd:e8:
ab:e2:8e:47:19:b9:2a:eb:43:9a:f8:be:0c:8b:0a:
28:36:0e:d3:27:9b:54:d9:8d:a9:e6:e0:81:87:59:
8e:3c:89:97:cc:9c:96:ce:ab:8a:5e:82:ef:b8:f2:
ef:38:5c:a6:29:74:7b:19:5b:92:22:a7:3e:a5:d7:
ed:69:03:d5:d5:fd:74:91:4d:f3:1f:2c:83:da:67:
b9:d5:52:d4:25:5c:a4:ee:c0:14:fb:e9:49:7c:f5:
9e:f5:56:9c:47:5f:3c:bd:c3:22:7d:f9:ea:1b:4e:
e7:4d:ff:6e:a4:dc:0a:a7:fd:0d:54:21:a2:77:67:
c8:50:76:5d:52:7c:ff:9a:db:88:25:12:23:01:3d:
dc:6c:cb:7c:ec:90:3a:3b:f2:08:14:37:c0:62:3b:
db:99:8f:57:a5:95:73:d8:f5:20:d4:d4:4d:09:84:
2a:c1:3e:59:6a:4d:f4:6b:f0:a5:05:ee:3d:38:9b:
35:c9:35:56:13:d0:92:04:88:0f:30:fe:bb:7c:21:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:92:B1:7E:6E:97:C9:2C:19:2E:25:21:EF:8D:58:B2:A5:41:6E:5E
X509v3 Authority Key Identifier:
keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.106.0/23
Signature Algorithm: sha256WithRSAEncryption
96:f7:4a:0c:80:06:e3:cf:00:0e:40:85:85:b2:be:88:a9:94:
50:30:93:4f:48:07:8c:d5:36:2a:3c:7d:0a:09:37:c6:81:1e:
0f:06:60:5a:5e:2e:86:35:88:2b:c0:d1:63:a1:f8:35:c3:88:
bd:bf:1f:92:50:a0:9c:43:72:6e:1e:b4:0c:9a:5e:e4:96:96:
18:c4:f6:30:9e:16:63:9e:52:da:2d:e9:55:26:b6:66:49:7d:
2c:20:ce:55:38:14:fc:ee:15:bc:07:37:13:9f:c0:01:92:6b:
8d:0b:be:d3:a9:d1:8c:c5:0f:84:2f:1f:ed:46:29:8f:79:84:
d7:5c:e6:ad:6a:cc:03:37:9b:66:fd:08:ae:eb:f1:bc:24:14:
23:fd:7c:db:a7:84:2f:cf:28:c2:cb:13:cd:32:68:1b:e0:52:
81:e8:b9:74:97:81:d1:a9:6b:26:25:e7:01:05:55:25:3f:7c:
54:5f:04:cd:83:23:e3:db:64:62:a8:8a:0d:59:4c:0d:ce:85:
08:17:8a:ab:a4:b3:55:3f:2a:5a:40:af:75:c5:89:79:ef:27:
db:f5:33:cc:62:81:80:18:31:65:a8:24:06:4f:44:e8:81:ed:
b8:2e:50:22:d7:88:fa:c9:ea:70:08:ba:62:e8:f7:34:a4:0d:
7b:2b:0b:ae
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3
MUYyOURGNzcwHhcNMjQwNzMwMjEzODQ1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5NWQ2NS1jYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxF9nhuV6EUAnMwl5G6YRdjJ+0ug0VIaS6un3h2H72a6AQtKN6/TbsLDuuE/P
knj9mP8+hzVJggus/eir4o5HGbkq60Oa+L4MiwooNg7TJ5tU2Y2p5uCBh1mOPImX
zJyWzquKXoLvuPLvOFymKXR7GVuSIqc+pdftaQPV1f10kU3zHyyD2me51VLUJVyk
7sAU++lJfPWe9VacR188vcMiffnqG07nTf9upNwKp/0NVCGid2fIUHZdUnz/mtuI
JRIjAT3cbMt87JA6O/IIFDfAYjvbmY9XpZVz2PUg1NRNCYQqwT5Zak30a/ClBe49
OJs1yTVWE9CSBIgPMP67fCHWYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCqSsX5u
l8ksGS4lIe+NWLKlQW5eMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1
MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VEQUMvNTgzQUYyMDRCNTA3MTFFQUJDQzg5NDBEQzRGOUFFMDIvNUI1NTkyRjA3
QjA3MTFFRDlENTk1OTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmGowDQYJKoZIhvcNAQELBQADggEBAJb3SgyABuPPAA5A
hYWyvoiplFAwk09IB4zVNio8fQoJN8aBHg8GYFpeLoY1iCvA0WOh+DXDiL2/H5JQ
oJxDcm4etAyaXuSWlhjE9jCeFmOeUtot6VUmtmZJfSwgzlU4FPzuFbwHNxOfwAGS
a40LvtOp0YzFD4QvH+1GKY95hNdc5q1qzAM3m2b9CK7r8bwkFCP9fNunhC/PKMLL
E80yaBvgUoHouXSXgdGpayYl5wEFVSU/fFRfBM2DI+PbZGKoig1ZTA3OhQgXiquk
s1U/KlpAr3XFiXnvJ9v1M8xigYAYMWWoJAZPROiB7bguUCLXiPrJ6nAIumLo9zSk
DXsrC64=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:34:01 2025 by rpki-client