Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa
File: EB292D8A6BF811EB8E899650C4F9AE02.roa (raw, json)
Hash identifier: haQ1wVHCjiOBIUnT4Cwar2Iew7eXxoRUFslAJoKYOBs=
Subject key identifier: 2E:32:69:3D:EC:74:33:0D:1E:E2:66:7B:0A:0C:DE:E8:3A:E4:FD:34
Certificate issuer: /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Certificate serial: 05C8
Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa
Signing time: Mon 01 Apr 2024 01:02:40 +0000
ROA not before: Mon 01 Apr 2024 01:02:40 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 132745
IP address blocks: 103.24.140.0/22 maxlen: 22
103.162.176.0/24 maxlen: 24
103.162.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1480 (0x5c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820CE
Validity
Not Before: Apr 1 01:02:40 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660a07b0-ff49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:95:cc:e2:21:43:a0:1f:d8:33:dc:90:8b:
81:50:ee:e4:18:b9:7e:01:9f:0f:97:57:e9:c4:72:
36:62:61:1c:50:c0:aa:d5:32:19:9d:18:07:13:58:
97:e6:f0:2a:a4:46:c7:ae:05:4b:c4:dd:67:f5:8f:
5e:fe:e1:da:d3:5d:b5:30:be:7a:e6:c9:a0:62:a6:
1f:50:8d:a6:21:73:37:b1:7f:55:05:6f:00:b8:b2:
67:4d:fc:45:85:e5:73:8a:32:57:f6:df:22:5b:48:
06:c1:66:83:71:b6:aa:dc:fb:cc:7e:2e:55:6b:34:
fc:d7:a1:19:09:65:07:c7:e9:b0:da:f7:77:e3:b6:
db:47:4d:66:20:0c:a6:e3:22:7a:43:2d:5e:88:ab:
47:19:32:76:03:65:0e:3f:ee:df:38:5e:af:4d:05:
bc:92:33:49:1b:66:47:c8:6c:4d:e7:09:9b:d5:ab:
0b:85:a4:fd:1f:8f:9c:28:9c:07:49:4c:c7:f4:07:
be:7b:ce:0c:df:1f:1a:b6:25:8b:39:60:09:41:c1:
45:60:21:85:c0:04:e0:9a:6a:7b:a5:39:bb:65:8d:
1c:32:32:96:6c:d3:6c:2a:fa:97:dd:0c:74:1b:2e:
91:98:9c:51:7e:d3:6a:f4:e1:22:06:58:22:89:f5:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:32:69:3D:EC:74:33:0D:1E:E2:66:7B:0A:0C:DE:E8:3A:E4:FD:34
X509v3 Authority Key Identifier:
keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.140.0/22
103.162.176.0/23
Signature Algorithm: sha256WithRSAEncryption
89:27:5b:0c:1e:76:2c:03:2f:1f:ef:c4:29:b4:31:e1:7f:b9:
85:1b:36:9a:0c:c6:cc:8a:1c:a0:d3:01:0d:11:2b:a6:ec:6f:
92:65:73:c1:31:98:33:fb:a1:01:08:f3:ae:6d:bf:57:f2:bc:
d3:e3:b0:ba:22:fa:a5:23:b4:df:c7:8c:98:3f:3a:76:33:f2:
74:33:14:46:26:65:25:38:34:09:98:c0:08:7e:86:66:f6:14:
d1:36:6b:71:7a:07:7d:d4:f5:ce:6c:c4:8a:fb:27:9f:0e:f6:
de:85:bb:a0:e3:33:d8:70:73:28:20:d4:e2:d9:94:7d:c2:72:
18:25:2e:61:3d:65:ab:66:7f:0c:67:ad:b1:b2:8d:e7:01:9d:
d4:82:53:26:0c:e1:77:8c:2c:00:54:29:77:9f:a9:9c:30:3b:
97:e8:17:28:9d:29:68:c7:00:dd:3b:9a:e8:2a:fe:0d:71:40:
25:a2:a8:2f:eb:a2:83:a0:31:bc:68:85:8b:7b:74:4a:6c:05:
4b:2d:07:d1:a8:59:e5:70:5d:33:60:c3:5f:46:22:42:7c:ac:
a6:09:6e:c9:f6:67:85:ca:fc:5a:69:08:ea:23:c6:27:3c:96:
21:78:76:7e:32:34:07:93:0e:04:ea:3f:f7:c5:df:a5:6c:40:
e9:30:15:a1
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIwQ0UxMTAvBgNVBAUTKDcyQzFCQzlDM0RCNzlCNDNGMzU2RjIzRjk1Njg4NDhD
OUNGQjhERDUwHhcNMjQwNDAxMDEwMjQwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBhMDdiMC1mZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy9yVzOIhQ6Af2DPckIuBUO7kGLl+AZ8Pl1fpxHI2YmEcUMCq1TIZnRgHE1iX
5vAqpEbHrgVLxN1n9Y9e/uHa0121ML565smgYqYfUI2mIXM3sX9VBW8AuLJnTfxF
heVzijJX9t8iW0gGwWaDcbaq3PvMfi5VazT816EZCWUHx+mw2vd347bbR01mIAym
4yJ6Qy1eiKtHGTJ2A2UOP+7fOF6vTQW8kjNJG2ZHyGxN5wmb1asLhaT9H4+cKJwH
SUzH9Ae+e84M3x8atiWLOWAJQcFFYCGFwATgmmp7pTm7ZY0cMjKWbNNsKvqX3Qx0
Gy6RmJxRftNq9OEiBlgiifW6vQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC4yaT3s
dDMNHuJmewoM3ug65P00MB8GA1UdIwQYMBaAFHLBvJw9t5tD81byP5VohIyc+43V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDRS9CNzMwNjlDNjZC
RTkxMUVCQjdENTU2MERDNEY5QUUwMi9jc0c4bkQyM20wUHpWdklfbFdpRWpKejdq
ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NzRzhuRDIzbTBQelZ2SV9sV2lFakp6N2pkVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODIwQ0UvQjczMDY5QzY2QkU5MTFFQkI3RDU1NjBEQzRGOUFFMDIvRUIyOTJEOEE2
QkY4MTFFQjhFODk5NjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnGIwDBAFnorAwDQYJKoZIhvcNAQELBQADggEBAIknWwwe
diwDLx/vxCm0MeF/uYUbNpoMxsyKHKDTAQ0RK6bsb5Jlc8ExmDP7oQEI865tv1fy
vNPjsLoi+qUjtN/HjJg/OnYz8nQzFEYmZSU4NAmYwAh+hmb2FNE2a3F6B33U9c5s
xIr7J58O9t6Fu6DjM9hwcygg1OLZlH3CchglLmE9ZatmfwxnrbGyjecBndSCUyYM
4XeMLABUKXefqZwwO5foFyidKWjHAN07mugq/g1xQCWiqC/rooOgMbxohYt7dEps
BUstB9GoWeVwXTNgw19GIkJ8rKYJbsn2Z4XK/FppCOojxic8liF4dn4yNAeTDgTq
P/fF36VsQOkwFaE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:31:46 2025 by rpki-client