Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7DBF7F483F511EC8F363811C4F9AE02.roa
File: F7DBF7F483F511EC8F363811C4F9AE02.roa (raw, json)
Hash identifier: M5/3ojqAVCMkAz4kIZsloTTHiWBNbHi8ie66Qetl76o=
Subject key identifier: 37:3D:13:4D:B9:2C:BB:99:AE:68:69:DA:14:20:43:BB:E2:7B:BF:2F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 829E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7DBF7F483F511EC8F363811C4F9AE02.roa
Signing time: Fri 09 Feb 2024 08:05:39 +0000
ROA not before: Fri 09 Feb 2024 08:05:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147277
IP address blocks: 103.109.44.0/22 maxlen: 22
103.109.44.0/24 maxlen: 24
103.109.45.0/24 maxlen: 24
103.109.46.0/24 maxlen: 24
103.109.47.0/24 maxlen: 24
103.176.188.0/24 maxlen: 24
2001:df2:140::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33438 (0x829e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 9 08:05:39 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65c5dcd3-ac4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:fc:40:21:6f:9a:6a:5e:53:b0:48:4b:35:
8b:3a:b4:46:8f:a1:13:c6:c2:79:7d:a1:63:ab:4c:
0a:b8:96:cd:ea:a6:bb:ac:17:0d:6f:80:30:8b:f8:
4e:13:22:8e:c1:57:cc:e4:a5:3d:e1:f7:ac:24:75:
06:f5:df:6d:f7:be:65:af:cf:7c:3e:84:ed:08:b4:
e9:c5:d5:93:6e:28:da:b5:de:b0:b7:be:c4:7c:7f:
8c:fa:25:d3:ea:0c:e0:c0:2c:d5:71:9b:2a:ea:44:
e1:09:d1:de:83:6e:4a:f1:9a:bd:58:0c:8b:12:d4:
be:31:ab:73:7d:27:00:56:e5:cd:1e:a7:6e:2e:74:
d8:70:6e:93:e3:13:1b:56:9c:82:98:27:7b:25:0a:
a1:82:d6:e1:83:8d:e7:d4:a1:fd:f7:66:6b:9a:7d:
01:9c:fa:bf:db:9b:aa:c6:ed:1d:e8:6e:33:a8:e6:
65:de:a8:1b:ca:74:3a:cd:8e:32:83:83:17:c9:b4:
23:a6:cf:d3:20:6e:1a:dd:f7:87:5c:83:48:3c:b0:
3f:5b:7f:e1:b6:20:38:4f:80:9e:b7:53:99:06:a2:
7a:bb:d6:d0:13:6d:33:d7:2c:7a:ea:63:24:cc:d8:
3a:e7:6b:be:93:c0:4b:96:29:03:b1:3e:7c:f8:8a:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:13:4D:B9:2C:BB:99:AE:68:69:DA:14:20:43:BB:E2:7B:BF:2F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7DBF7F483F511EC8F363811C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.44.0/22
103.176.188.0/24
IPv6:
2001:df2:140::/48
Signature Algorithm: sha256WithRSAEncryption
91:1c:13:f3:47:5d:3e:ea:88:fa:8d:0c:86:c6:dd:6b:f7:22:
54:8f:f9:e2:7d:2d:d6:84:5b:48:58:21:74:b5:39:97:24:f4:
a3:19:44:96:d1:46:db:0f:a2:ce:df:a3:61:ad:13:42:73:96:
31:9d:65:f2:1c:dd:9e:ff:98:33:4e:b1:a1:60:9f:e5:70:aa:
91:6e:63:ab:cc:f6:3c:e7:04:91:82:fe:41:f9:2c:9e:90:4a:
38:99:7f:84:6a:e0:34:dd:03:a9:e1:ac:4b:d6:73:fc:10:95:
01:be:f5:6f:e9:5a:7a:e8:ee:1e:71:4c:7b:9f:f9:73:b8:38:
81:46:b4:be:67:a5:ae:59:be:3b:e0:25:85:65:79:3a:e4:cf:
fc:d9:d6:3b:8c:a0:1b:83:f7:4c:8f:5e:a9:e9:7f:e3:02:b0:
5e:50:7a:eb:e0:40:e8:f1:1d:67:ac:67:51:76:20:1f:23:8c:
10:37:e2:a5:df:2e:91:48:0d:ba:22:d0:82:b5:32:94:f8:22:
10:58:76:29:ad:96:4f:cf:82:0d:aa:9e:81:b8:8f:36:29:ee:
8c:7a:93:e8:95:4b:cc:33:63:7b:70:74:48:7e:33:4c:8f:eb:
7a:3f:56:d4:11:ce:b4:62:34:51:15:6c:46:4f:d9:11:fb:52:
ab:42:f7:d6
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAIKeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDIwOTA4MDUzOVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjVjNWRjZDMtYWM0ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALC2/EAhb5pqXlOwSEs1izq0Ro+hE8bCeX2hY6tMCriWzeqmu6wXDW+AMIv4
ThMijsFXzOSlPeH3rCR1BvXfbfe+Za/PfD6E7Qi06cXVk24o2rXesLe+xHx/jPol
0+oM4MAs1XGbKupE4QnR3oNuSvGavVgMixLUvjGrc30nAFblzR6nbi502HBuk+MT
G1acgpgneyUKoYLW4YON59Sh/fdma5p9AZz6v9ubqsbtHehuM6jmZd6oG8p0Os2O
MoODF8m0I6bP0yBuGt33h1yDSDywP1t/4bYgOE+AnrdTmQaiervW0BNtM9cseupj
JMzYOudrvpPAS5YpA7E+fPiKOG8CAwEAAaOCAqwwggKoMB0GA1UdDgQWBBQ3PRNN
uSy7ma5oadoUIEO74nu/LzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y3REJGN0Y0
ODNGNTExRUM4RjM2MzgxMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/
BCcwJTASBAIAATAMAwQCZ20sAwQAZ7C8MA8EAgACMAkDBwAgAQ3yAUAwDQYJKoZI
hvcNAQELBQADggEBAJEcE/NHXT7qiPqNDIbG3Wv3IlSP+eJ9LdaEW0hYIXS1OZck
9KMZRJbRRtsPos7fo2GtE0JzljGdZfIc3Z7/mDNOsaFgn+VwqpFuY6vM9jznBJGC
/kH5LJ6QSjiZf4Rq4DTdA6nhrEvWc/wQlQG+9W/pWnro7h5xTHuf+XO4OIFGtL5n
pa5ZvjvgJYVleTrkz/zZ1juMoBuD90yPXqnpf+MCsF5QeuvgQOjxHWesZ1F2IB8j
jBA34qXfLpFIDboi0IK1MpT4IhBYdimtlk/Pgg2qnoG4jzYp7ox6k+iVS8wzY3tw
dEh+M0yP63o/VtQRzrRiNFEVbEZP2RH7UqtC99Y=
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:12:35 2025 by rpki-client