Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/4F1694B4C87B11ED981CC523C4F9AE02.roa
File: 4F1694B4C87B11ED981CC523C4F9AE02.roa (raw, json)
Hash identifier: FWRlVE7qxAGVhNJeQGVLW3KvlIyEGk0A9fnepbZFOKE=
Subject key identifier: FF:E4:73:F1:81:75:20:1D:9D:50:A6:26:C6:15:4A:C9:50:FB:2B:E2
Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial: 0635
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/4F1694B4C87B11ED981CC523C4F9AE02.roa
Signing time: Sun 02 Feb 2025 22:32:11 +0000
ROA not before: Sun 02 Feb 2025 22:32:11 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 149840
IP address blocks: 103.44.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BBC
Validity
Not Before: Feb 2 22:32:11 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679ff26a-8a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:24:06:78:4d:aa:39:c5:42:a2:c9:3d:59:
fa:af:5e:b1:db:16:be:13:9a:fd:81:d8:b0:5f:f3:
e9:4a:c3:ee:5e:b9:12:bf:51:17:a6:df:32:88:e1:
43:14:f7:23:a0:af:12:f1:70:a8:a3:a8:54:8e:61:
d7:ca:53:58:b1:7d:4a:b8:d0:72:fa:a9:ef:1c:0a:
1f:8c:6c:2b:4d:f5:c2:01:a7:b3:2b:4f:53:51:46:
93:8e:90:40:5e:3a:54:df:c7:f3:18:5a:9b:74:c3:
ff:61:87:4f:ab:02:99:7f:4f:04:0d:11:b0:6e:84:
ca:15:07:f5:d4:48:ad:ef:59:87:d0:a1:c5:81:65:
f0:25:c5:fb:38:13:c5:ef:34:3d:ad:b3:e5:48:94:
f1:1b:3e:b8:34:34:1a:8d:fb:58:13:78:da:df:28:
e5:37:cd:61:4c:90:a3:e7:76:65:41:3c:58:36:f6:
8e:72:f9:4a:e3:ea:9a:d1:2b:df:44:22:79:12:c4:
4b:54:81:10:08:a4:52:96:a5:bd:d6:9e:12:8e:22:
a5:3e:d2:0e:05:16:7a:c5:67:88:92:91:49:22:66:
d0:16:1e:83:36:4b:25:ec:0c:3c:d5:3e:23:d6:03:
41:d0:83:23:2b:2f:97:07:56:3e:a7:2e:f0:f7:02:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E4:73:F1:81:75:20:1D:9D:50:A6:26:C6:15:4A:C9:50:FB:2B:E2
X509v3 Authority Key Identifier:
keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/4F1694B4C87B11ED981CC523C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.44.62.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6d:f5:3c:b5:32:44:f9:93:56:9d:8a:32:aa:cb:7f:ad:e9:
ff:66:b4:a7:7a:8e:a6:9b:14:02:69:87:7e:d7:12:08:0e:fc:
24:62:0c:43:a2:83:76:75:5b:92:bb:7d:93:bf:22:53:ea:73:
fc:66:17:0d:6f:61:d6:ac:bd:67:80:65:60:eb:07:3d:c2:8a:
a5:ba:d6:d1:08:d5:53:82:79:66:fd:f1:43:7d:1f:02:53:1a:
a0:75:17:fb:76:b9:b2:58:ad:54:a1:2f:5b:ba:ad:20:56:57:
7c:3f:3e:08:ce:4e:59:f6:3d:da:15:2c:13:4e:73:25:7e:ca:
b1:66:3f:21:fd:65:46:14:67:9a:33:98:d4:36:83:7b:22:db:
d1:2f:36:e5:ac:6c:6d:6a:38:bd:41:59:d6:2f:b2:99:2e:80:
2c:f6:34:68:3e:70:94:7c:39:b8:01:c9:e0:96:73:8f:cb:88:
9e:14:81:60:ee:09:19:26:09:4d:3b:df:92:42:ba:db:2a:7d:
61:5b:9f:fd:fe:67:c6:dd:dd:61:40:ce:0d:f3:c5:7a:5d:6c:
6c:ee:23:30:a9:9a:2a:b0:12:59:b5:97:bb:77:7f:60:f2:ee:
1c:5f:ea:50:81:a2:7e:9d:0b:df:e5:c6:b0:e4:8c:a0:79:1f:
f7:00:0e:74
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCQkMxMTAvBgNVBAUTKDA2MTgxODQ5RTJDNUY5MzEzRUE2MEEzMzk3REM2MTQ3
MkFDMTFCMEQwHhcNMjUwMjAyMjIzMjExWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzlmZjI2YS04YTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnn8kBnhNqjnFQqLJPVn6r16x2xa+E5r9gdiwX/PpSsPuXrkSv1EXpt8yiOFD
FPcjoK8S8XCoo6hUjmHXylNYsX1KuNBy+qnvHAofjGwrTfXCAaezK09TUUaTjpBA
XjpU38fzGFqbdMP/YYdPqwKZf08EDRGwboTKFQf11Eit71mH0KHFgWXwJcX7OBPF
7zQ9rbPlSJTxGz64NDQajftYE3ja3yjlN81hTJCj53ZlQTxYNvaOcvlK4+qa0Svf
RCJ5EsRLVIEQCKRSlqW91p4SjiKlPtIOBRZ6xWeIkpFJImbQFh6DNksl7Aw81T4j
1gNB0IMjKy+XB1Y+py7w9wLXEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP/kc/GB
dSAdnVCmJsYVSslQ+yviMB8GA1UdIwQYMBaAFAYYGEnixfkxPqYKM5fcYUcqwRsN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JCQy8xNDBDMTc1Njg2
RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1URS1wZ296bDl4aFJ5ckJH
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JoZ1lTZUxGLVRFLXBnb3psOXhoUnlyQkd3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODNCQkMvMTQwQzE3NTY4NkQ2MTFFQkI3QjM5QzYyQzRGOUFFMDIvNEYxNjk0QjRD
ODdCMTFFRDk4MUNDNTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnLD4wDQYJKoZIhvcNAQELBQADggEBADRt9Ty1MkT5k1ad
ijKqy3+t6f9mtKd6jqabFAJph37XEggO/CRiDEOig3Z1W5K7fZO/IlPqc/xmFw1v
YdasvWeAZWDrBz3CiqW61tEI1VOCeWb98UN9HwJTGqB1F/t2ubJYrVShL1u6rSBW
V3w/PgjOTln2PdoVLBNOcyV+yrFmPyH9ZUYUZ5ozmNQ2g3si29EvNuWsbG1qOL1B
WdYvspkugCz2NGg+cJR8ObgByeCWc4/LiJ4UgWDuCRkmCU0735JCutsqfWFbn/3+
Z8bd3WFAzg3zxXpdbGzuIzCpmiqwElm1l7t3f2Dy7hxf6lCBon6dC9/lxrDkjKB5
H/cADnQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:52 2025 by rpki-client