Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/B5D4A156598B11EC82C8685CC4F9AE02.roa
File: B5D4A156598B11EC82C8685CC4F9AE02.roa (raw, json)
Hash identifier: 9N5REIY+2HrtITjoJdJhm20sPzs6LfTpozJyTEhJPKI=
Subject key identifier: DD:AB:F6:60:2B:AC:0B:7B:F2:9D:B8:03:E6:AA:DC:E9:E1:12:CE:F0
Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E
Certificate serial: 0D44
Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/B5D4A156598B11EC82C8685CC4F9AE02.roa
Signing time: Tue 14 May 2024 18:57:32 +0000
ROA not before: Tue 14 May 2024 18:57:32 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 23860
IP address blocks: 103.215.224.0/22 maxlen: 24
157.119.104.0/22 maxlen: 24
2400:3840::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3396 (0xd44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191DF4
Validity
Not Before: May 14 18:57:32 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6643b41b-82a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:97:7d:49:40:56:4c:63:be:92:da:ba:90:
f0:86:f5:02:4d:4d:c5:a5:48:58:df:55:09:2f:0a:
af:e9:73:a8:5a:bd:70:d7:31:0f:ca:f6:6c:9e:e0:
a8:eb:e8:86:4f:38:21:b5:9f:d9:51:7a:be:85:a5:
8e:df:90:50:81:0f:64:5f:11:88:93:3f:0d:f8:49:
6c:33:e0:f2:b5:5a:f7:5f:1b:f8:5c:3e:5a:38:ab:
d5:25:17:78:9a:9c:85:e8:4f:19:3f:97:52:e1:4e:
5e:e8:72:04:01:a7:a5:f5:1c:71:60:77:fd:f5:b3:
b2:02:f1:60:2e:73:70:6d:87:2d:96:a6:0e:4c:34:
3c:c5:2c:33:27:fa:39:78:21:2e:6d:4d:a8:07:14:
40:90:9e:af:a3:69:08:a3:53:6c:16:fc:cb:69:ef:
b6:4e:73:c2:9d:a0:8a:64:1f:ab:3d:bd:44:b6:46:
54:30:b7:5b:43:b2:43:ad:f9:ba:62:26:71:ac:e8:
5e:e2:68:6c:76:25:9a:a9:24:fd:b9:53:25:8c:eb:
41:69:0d:6d:b4:30:cc:1b:6d:7b:44:33:35:ef:b3:
dd:e0:53:b8:5b:33:15:00:9a:5e:cd:8a:85:bb:55:
fa:b3:dd:2f:99:fc:04:ae:f0:22:58:fd:ac:35:56:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:F6:60:2B:AC:0B:7B:F2:9D:B8:03:E6:AA:DC:E9:E1:12:CE:F0
X509v3 Authority Key Identifier:
keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/B5D4A156598B11EC82C8685CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.224.0/22
157.119.104.0/22
IPv6:
2400:3840::/32
Signature Algorithm: sha256WithRSAEncryption
0f:cc:d4:25:9f:ea:17:15:e3:c0:a6:3c:f3:57:9b:fc:c4:ea:
51:3d:d7:38:e5:80:dd:1f:0d:59:dc:ee:71:27:bb:ab:47:c4:
1a:cb:01:dd:f7:38:5d:ef:31:3a:09:08:b2:48:aa:01:f9:3b:
6f:77:39:98:c2:e2:11:9a:cc:54:28:71:85:b8:02:53:31:36:
07:d8:57:46:52:61:be:51:73:09:14:91:39:54:c0:dd:bd:7f:
53:bf:ea:29:75:c6:8f:e1:5c:e0:6a:90:11:24:c0:1c:c9:1d:
c0:01:c5:9f:e5:d0:0f:ce:00:5d:b3:3f:7e:25:6d:8a:4f:de:
26:11:36:01:52:12:a3:c6:78:45:67:50:c6:6d:e1:59:6e:66:
8b:e3:8d:7f:80:d9:5a:f6:39:2c:a2:77:f0:06:d0:8e:55:4f:
d2:33:78:0d:d6:83:bc:c0:82:e9:7b:55:c2:41:94:82:b3:2f:
2f:b3:ec:b9:6c:1d:d3:06:c4:90:fc:c3:78:f0:c9:60:b6:c9:
6d:4e:07:dd:41:cb:5b:3e:14:49:08:47:91:fb:ad:6c:a7:8b:
33:da:c8:91:b6:08:78:4d:69:33:23:4c:b2:04:85:ce:69:13:
fd:f1:16:bb:ee:1d:7d:3e:26:d3:3f:16:4a:53:58:d7:3a:76:
c7:4a:7f:25
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE
MTMyOEFFMEUwHhcNMjQwNTE0MTg1NzMyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjQzYjQxYi04MmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAryGXfUlAVkxjvpLaupDwhvUCTU3FpUhY31UJLwqv6XOoWr1w1zEPyvZsnuCo
6+iGTzghtZ/ZUXq+haWO35BQgQ9kXxGIkz8N+ElsM+DytVr3Xxv4XD5aOKvVJRd4
mpyF6E8ZP5dS4U5e6HIEAael9RxxYHf99bOyAvFgLnNwbYctlqYOTDQ8xSwzJ/o5
eCEubU2oBxRAkJ6vo2kIo1NsFvzLae+2TnPCnaCKZB+rPb1EtkZUMLdbQ7JDrfm6
YiZxrOhe4mhsdiWaqST9uVMljOtBaQ1ttDDMG217RDM177Pd4FO4WzMVAJpezYqF
u1X6s90vmfwErvAiWP2sNVb5BQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFN2r9mAr
rAt78p24A+aq3OnhEs7wMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz
OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTFERjQvRjQxRDFDMThCMzhFMTFFOTg2MjgyQjczQzRGOUFFMDIvQjVENEExNTY1
OThCMTFFQzgyQzg2ODVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJn1+ADBAKdd2gwDQQCAAIwBwMFACQAOEAwDQYJKoZIhvcN
AQELBQADggEBAA/M1CWf6hcV48CmPPNXm/zE6lE91zjlgN0fDVnc7nEnu6tHxBrL
Ad33OF3vMToJCLJIqgH5O293OZjC4hGazFQocYW4AlMxNgfYV0ZSYb5RcwkUkTlU
wN29f1O/6il1xo/hXOBqkBEkwBzJHcABxZ/l0A/OAF2zP34lbYpP3iYRNgFSEqPG
eEVnUMZt4VluZovjjX+A2Vr2OSyid/AG0I5VT9IzeA3Wg7zAgul7VcJBlIKzLy+z
7LlsHdMGxJD8w3jwyWC2yW1OB91By1s+FEkIR5H7rWynizPayJG2CHhNaTMjTLIE
hc5pE/3xFrvuHX0+JtM/FkpTWNc6dsdKfyU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:31 2025 by rpki-client