Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A68B7127FEE11EB8EB4695FC4F9AE02.roa
File: 4A68B7127FEE11EB8EB4695FC4F9AE02.roa (raw, json)
Hash identifier: XMKcjlUqR7XYm06evc8vFRbEFyMhkWzvGUdfsWkh1nQ=
Subject key identifier: 0E:FA:10:74:C5:4D:F7:04:87:F5:4F:46:F6:99:49:E8:08:97:C7:AC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8986
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A68B7127FEE11EB8EB4695FC4F9AE02.roa
Signing time: Thu 30 May 2024 15:59:12 +0000
ROA not before: Thu 30 May 2024 15:59:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134276
IP address blocks: 103.163.192.0/23 maxlen: 24
2001:df1:b240::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35206 (0x8986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:59:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a24f-fb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:9c:e0:a5:e7:83:3f:46:5e:fc:5e:35:45:
e2:bb:20:04:49:2f:dc:9f:1c:e7:0d:da:93:df:80:
64:a8:21:f1:af:ff:e9:98:d3:22:0d:87:00:53:c4:
1d:43:52:9a:cc:d2:c9:d5:85:2e:30:99:20:74:9e:
45:a2:4b:f7:ff:bd:70:74:75:32:fc:a6:8c:e1:5a:
6d:d7:23:ab:fc:e3:55:39:88:c0:0a:0c:e3:ff:90:
18:f0:00:91:21:12:b0:32:3b:77:aa:41:a4:1f:a2:
d9:3a:33:70:8d:b3:54:8d:a2:67:76:c7:32:ad:77:
e0:ef:e6:53:a5:b3:64:1a:f9:95:43:9a:b4:90:7b:
e5:35:d8:14:f3:93:e9:e3:a2:cb:78:8c:67:b5:b6:
72:1e:36:41:6c:30:ca:a6:02:91:be:95:af:21:c1:
ae:2a:87:b1:98:21:c9:e4:5f:d1:57:7a:a2:45:7f:
32:85:ce:81:10:41:cb:bc:75:c6:a6:57:c5:3d:29:
fb:45:d0:98:17:10:81:8c:da:a7:4f:08:6c:03:43:
80:23:67:ba:b9:c4:5d:52:3d:25:8e:13:b7:24:19:
4d:ce:54:88:82:35:f4:5e:bc:af:24:60:80:5b:ee:
d9:df:ae:cd:0d:a3:85:58:7a:b7:a4:b0:db:6f:ed:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FA:10:74:C5:4D:F7:04:87:F5:4F:46:F6:99:49:E8:08:97:C7:AC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A68B7127FEE11EB8EB4695FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.192.0/23
IPv6:
2001:df1:b240::/48
Signature Algorithm: sha256WithRSAEncryption
0f:98:3b:ac:74:dd:41:c2:75:56:c9:78:62:68:c6:37:63:4d:
21:16:3e:6a:bc:34:ce:b9:88:51:f8:a7:fc:f9:bd:a5:60:9d:
e0:c8:6c:c1:2c:56:f4:6a:05:ed:ef:eb:e5:cc:54:5a:6d:54:
ed:2d:30:43:87:68:4e:2c:b5:c0:57:99:54:af:ff:f0:ec:e1:
66:b8:94:a6:e6:e9:94:5f:b4:25:58:c6:da:c3:6b:d8:fa:e6:
80:ae:52:fc:56:5a:df:44:cd:a1:f2:3d:c2:30:53:54:80:12:
21:a2:c4:7f:10:85:d2:3d:42:92:80:f6:4f:0e:b2:4e:fc:a0:
df:cc:53:fb:c6:85:92:2a:67:aa:38:6b:64:31:df:30:1f:21:
48:80:90:09:6a:2e:96:7c:2e:db:69:8c:a2:99:a6:a9:bf:9e:
44:d9:6e:d2:f9:57:af:e4:48:40:a2:1a:ba:81:2a:cb:04:e4:
ac:2e:e5:cd:f1:e4:ea:99:31:a6:c2:d0:09:4a:03:1e:2d:8f:
31:64:92:48:35:8a:20:21:56:d2:ca:eb:2e:24:2a:e3:96:2e:
a8:88:06:0d:ad:2f:b0:6b:d5:5a:6e:0b:1d:72:59:c3:a2:1c:
80:0b:e8:6a:67:c3:87:3b:b3:c4:3b:ee:90:f1:d2:a7:ff:4b:
3b:93:8d:f1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDAImGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE1NTkxMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGEyNGYtZmIwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANXDnOCl54M/Rl78XjVF4rsgBEkv3J8c5w3ak9+AZKgh8a//6ZjTIg2HAFPE
HUNSmszSydWFLjCZIHSeRaJL9/+9cHR1MvymjOFabdcjq/zjVTmIwAoM4/+QGPAA
kSESsDI7d6pBpB+i2TozcI2zVI2iZ3bHMq134O/mU6WzZBr5lUOatJB75TXYFPOT
6eOiy3iMZ7W2ch42QWwwyqYCkb6VryHBriqHsZghyeRf0Vd6okV/MoXOgRBBy7x1
xqZXxT0p+0XQmBcQgYzap08IbANDgCNnurnEXVI9JY4TtyQZTc5UiII19F68ryRg
gFvu2d+uzQ2jhVh6t6Sw22/tBxUCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQO+hB0
xU33BIf1T0b2mUnoCJfHrDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRBNjhCNzEy
N0ZFRTExRUI4RUI0Njk1RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/
BCEwHzAMBAIAATAGAwQBZ6PAMA8EAgACMAkDBwAgAQ3xskAwDQYJKoZIhvcNAQEL
BQADggEBAA+YO6x03UHCdVbJeGJoxjdjTSEWPmq8NM65iFH4p/z5vaVgneDIbMEs
VvRqBe3v6+XMVFptVO0tMEOHaE4stcBXmVSv//Ds4Wa4lKbm6ZRftCVYxtrDa9j6
5oCuUvxWWt9EzaHyPcIwU1SAEiGixH8QhdI9QpKA9k8Osk78oN/MU/vGhZIqZ6o4
a2Qx3zAfIUiAkAlqLpZ8LttpjKKZpqm/nkTZbtL5V6/kSECiGrqBKssE5Kwu5c3x
5OqZMabC0AlKAx4tjzFkkkg1iiAhVtLK6y4kKuOWLqiIBg2tL7Br1VpuCx1yWcOi
HIAL6Gpnw4c7s8Q77pDx0qf/SzuTjfE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:35:58 2025 by rpki-client