Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/BFA3B5F81FC911EA8CF04E61C4F9AE02.roa
File: BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (raw, json)
Hash identifier: tRDPOuysTM3j6RUChVc/lZ1Ir+BGvYj0vPYVhGcTQNo=
Subject key identifier: B4:19:45:99:F2:4D:5D:A8:F7:46:05:F7:D3:31:B4:66:82:08:44:F9
Certificate issuer: /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2
Certificate serial: 0B1F
Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/BFA3B5F81FC911EA8CF04E61C4F9AE02.roa
Signing time: Fri 26 Jul 2024 19:47:34 +0000
ROA not before: Fri 26 Jul 2024 19:47:34 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 137981
IP address blocks: 103.119.75.0/24 maxlen: 24
103.143.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2847 (0xb1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E20E
Validity
Not Before: Jul 26 19:47:34 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a3fd56-78f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:89:84:93:b8:c5:05:af:6e:68:ec:53:f8:
11:16:6a:53:fe:ff:65:6c:90:1e:17:1d:a0:f3:fc:
20:23:7c:48:90:a0:da:ce:6c:1f:92:8a:5b:be:6b:
5a:e7:96:ea:7d:f0:95:57:b6:cf:f9:97:aa:bc:58:
12:2c:fc:1b:9d:ad:fa:55:cf:b5:f2:11:c8:31:cc:
da:7b:e9:12:2a:58:51:cf:16:e5:bd:9e:b9:b0:e4:
77:14:1b:27:e2:9e:46:23:1c:4a:76:02:42:38:ad:
6f:d8:cc:b6:b3:1d:9b:4a:37:de:67:80:c5:14:a1:
27:87:57:7f:4b:a7:db:b7:dc:e7:2e:86:6b:02:69:
2f:9a:6a:d6:12:f8:07:d5:e6:bd:45:a0:37:7e:2d:
f7:63:d1:86:1b:23:ae:c6:ee:1f:30:73:fd:79:3d:
23:bb:a7:09:c2:05:22:e8:47:42:39:77:21:45:7d:
3d:9d:e2:60:1b:47:fd:9c:c4:2b:b9:1e:15:7c:eb:
33:21:e0:39:59:42:d1:53:38:95:4c:c1:5b:45:1b:
9e:00:9a:31:ba:b8:06:37:18:b2:c2:13:44:91:a9:
ea:4b:b7:3b:15:94:29:c7:12:48:f0:6d:6e:46:b6:
30:79:6e:5d:58:07:ee:07:25:ef:2f:2a:17:17:11:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:19:45:99:F2:4D:5D:A8:F7:46:05:F7:D3:31:B4:66:82:08:44:F9
X509v3 Authority Key Identifier:
keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/BFA3B5F81FC911EA8CF04E61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.75.0/24
103.143.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fa:f5:a2:01:a5:25:05:f0:fc:60:54:ca:82:03:5c:e1:3f:
78:65:58:97:46:04:22:bb:e2:52:36:99:db:3b:44:21:ed:10:
ff:da:fc:5b:09:f7:2c:28:eb:6c:f4:87:c5:7f:1b:4c:58:87:
ca:71:1d:fd:24:7b:89:ab:eb:a8:71:7e:f1:26:57:c5:b9:a6:
ef:eb:c1:84:97:10:51:d8:44:aa:7a:54:ac:78:dd:0d:7e:1f:
19:e1:6b:16:d3:7f:73:3a:fe:99:be:be:12:db:c8:b7:d8:0a:
cf:bf:39:35:cc:7f:e3:af:21:74:c1:73:f9:16:d0:51:19:00:
7b:31:43:2f:83:50:29:2e:bc:3e:94:8e:14:bd:1e:1e:0e:a0:
11:01:94:24:70:c3:a5:50:30:6d:ac:cc:ca:2a:5c:f6:39:e5:
09:ae:86:b1:94:45:88:8d:cc:83:fa:7d:c5:49:9a:2d:60:d1:
56:1a:90:8c:74:60:4d:50:cb:b0:fa:74:13:40:cd:89:01:c3:
7b:87:e8:14:63:87:27:0b:12:45:d9:9e:a4:70:c6:d4:fb:ed:
9e:4d:82:ec:47:92:76:69:7d:4b:15:fd:4d:18:b1:be:5e:bd:
41:e5:d7:db:87:75:f3:97:41:e5:3e:d7:c9:94:88:37:89:33:
54:b2:83:7d
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUyMEUxMTAvBgNVBAUTKEFGNkExOERCM0EwNzFFRjE4Q0NBNUJFOEIzNTQzM0RG
NTQ0RjBGQjIwHhcNMjQwNzI2MTk0NzM0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmEzZmQ1Ni03OGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsaOJhJO4xQWvbmjsU/gRFmpT/v9lbJAeFx2g8/wgI3xIkKDazmwfkopbvmta
55bqffCVV7bP+ZeqvFgSLPwbna36Vc+18hHIMczae+kSKlhRzxblvZ65sOR3FBsn
4p5GIxxKdgJCOK1v2My2sx2bSjfeZ4DFFKEnh1d/S6fbt9znLoZrAmkvmmrWEvgH
1ea9RaA3fi33Y9GGGyOuxu4fMHP9eT0ju6cJwgUi6EdCOXchRX09neJgG0f9nMQr
uR4VfOszIeA5WULRUziVTMFbRRueAJoxurgGNxiywhNEkanqS7c7FZQpxxJI8G1u
RrYweW5dWAfuByXvLyoXFxFp0wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLQZRZny
TV2o90YF99MxtGaCCET5MB8GA1UdIwQYMBaAFK9qGNs6Bx7xjMpb6LNUM99UTw+y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTIwRS8yM0FBRDk4RTFG
QzgxMUVBODQ1OTRGNUVDNEY5QUUwMi9yMm9ZMnpvSEh2R015bHZvczFRejMxUlBE
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Iyb1kyem9ISHZHTXlsdm9zMVF6MzFSUEQ3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEUyMEUvMjNBQUQ5OEUxRkM4MTFFQTg0NTk0RjVFQzRGOUFFMDIvQkZBM0I1Rjgx
RkM5MTFFQThDRjA0RTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnd0sDBABnj/wwDQYJKoZIhvcNAQELBQADggEBAKT69aIB
pSUF8PxgVMqCA1zhP3hlWJdGBCK74lI2mds7RCHtEP/a/FsJ9ywo62z0h8V/G0xY
h8pxHf0ke4mr66hxfvEmV8W5pu/rwYSXEFHYRKp6VKx43Q1+HxnhaxbTf3M6/pm+
vhLbyLfYCs+/OTXMf+OvIXTBc/kW0FEZAHsxQy+DUCkuvD6UjhS9Hh4OoBEBlCRw
w6VQMG2szMoqXPY55QmuhrGURYiNzIP6fcVJmi1g0VYakIx0YE1Qy7D6dBNAzYkB
w3uH6BRjhycLEkXZnqRwxtT77Z5NguxHknZpfUsV/U0Ysb5evUHl19uHdfOXQeU+
18mUiDeJM1Syg30=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:25 2025 by rpki-client