Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/CE042A841E5611EFBEDD1F39C4F9AE02.roa
File: CE042A841E5611EFBEDD1F39C4F9AE02.roa (raw, json)
Hash identifier: JB0KjJ0CYggpPTh2yx0KHgkWZKP0lJUbgO7Q4giWozY=
Subject key identifier: E2:18:48:BA:D4:30:B3:2E:F1:16:EB:62:7C:94:40:0B:A4:3E:DD:B9
Certificate issuer: /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703
Certificate serial: 37
Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/CE042A841E5611EFBEDD1F39C4F9AE02.roa
Signing time: Sat 31 Aug 2024 08:28:57 +0000
ROA not before: Sat 31 Aug 2024 08:28:57 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 17893
IP address blocks: 103.159.28.0/23 maxlen: 24
202.124.224.0/20 maxlen: 24
2404:7800::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192698
Validity
Not Before: Aug 31 08:28:57 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d2d449-08aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:de:63:48:50:e4:56:a4:f5:ee:e8:bb:48:
b1:31:e8:b9:8f:91:ca:88:26:79:c0:a7:ea:50:a8:
b1:27:d5:c3:17:c5:da:71:16:4b:45:96:46:65:09:
2c:59:80:bb:0b:ae:ec:dd:97:50:c6:7a:46:fd:6c:
28:a2:56:bc:e6:ed:d4:4b:1a:8c:b0:7a:08:85:3d:
d6:98:ab:d8:e8:c5:75:51:6b:2d:84:a6:0c:41:12:
8f:fd:15:6d:72:89:1a:d1:95:47:e4:de:ce:11:e0:
c1:82:72:e1:f5:a8:94:c4:94:11:0f:da:32:3a:92:
db:f8:b0:33:ef:40:27:14:40:98:7b:2a:20:e2:91:
05:d0:b4:9b:3a:c2:5c:41:38:42:7b:90:fa:84:2a:
d6:c9:62:c4:cd:3d:f8:83:46:8a:ca:26:3d:56:1a:
e7:5a:18:62:ec:1f:1a:ac:37:3e:9d:f3:9d:66:7f:
2c:56:6e:25:80:97:e2:50:50:da:b9:25:2c:63:7f:
52:22:fa:f7:26:87:12:6d:88:fe:82:49:a4:f0:b1:
53:d5:e1:b3:79:53:39:3a:aa:b0:c7:7d:aa:b7:2b:
07:da:f7:aa:81:81:54:be:be:1a:2f:8b:65:dc:d8:
40:06:c1:03:c0:f3:61:c9:d3:25:69:7a:a9:86:5b:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:18:48:BA:D4:30:B3:2E:F1:16:EB:62:7C:94:40:0B:A4:3E:DD:B9
X509v3 Authority Key Identifier:
keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/CE042A841E5611EFBEDD1F39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.28.0/23
202.124.224.0/20
IPv6:
2404:7800::/32
Signature Algorithm: sha256WithRSAEncryption
9a:6c:ad:97:88:5a:43:19:b3:72:74:b4:62:aa:3a:ee:71:fb:
24:42:9f:6b:af:82:bb:c8:76:f3:00:9b:6d:a4:8e:3b:33:cc:
2e:da:f9:30:38:c1:d9:77:00:e3:99:df:fe:da:ad:a1:6e:93:
68:d9:e2:94:85:c5:a3:92:58:f5:73:db:5f:41:c4:ac:f6:14:
2f:21:7d:09:5d:21:39:93:00:d8:ab:30:a7:6e:70:7f:39:60:
e2:9b:c7:94:24:b7:4e:bd:68:a3:0d:0c:88:dc:db:be:59:5b:
0c:d6:e9:ee:09:f4:9a:c1:6f:7c:56:99:a4:5d:54:7d:af:c6:
59:00:2a:a5:02:09:71:ef:0b:17:44:49:7e:fa:db:82:51:e5:
7e:4f:a0:64:65:02:4b:8a:fd:3e:c7:60:f2:07:81:8a:5b:8a:
2b:4a:a0:4a:e5:11:df:93:d1:66:04:a1:6a:2a:cc:74:63:93:
20:77:dc:1a:77:3d:08:1b:f2:e8:c9:bb:df:a0:d0:40:78:23:
5b:cd:fc:16:73:12:2c:dd:04:86:15:a4:76:bf:f8:0c:0e:93:
ae:c3:6d:20:b9:af:8c:62:43:de:73:db:9e:28:e4:c9:9a:eb:
b8:6e:5a:f8:28:b1:61:52:4a:4d:92:46:a7:d2:4d:1b:5f:59:
50:e6:4f:0a
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MjY5ODExMC8GA1UEBRMoREIwNjMwNzhGN0I5Nzc1MkZCODFEMDBGQTlCRDdDNTIz
QjFDOTcwMzAeFw0yNDA4MzEwODI4NTdaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZDJkNDQ5LTA4YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBi95jSFDkVqT17ui7SLEx6LmPkcqIJnnAp+pQqLEn1cMXxdpxFktFlkZlCSxZ
gLsLruzdl1DGekb9bCiiVrzm7dRLGoywegiFPdaYq9joxXVRay2EpgxBEo/9FW1y
iRrRlUfk3s4R4MGCcuH1qJTElBEP2jI6ktv4sDPvQCcUQJh7KiDikQXQtJs6wlxB
OEJ7kPqEKtbJYsTNPfiDRorKJj1WGudaGGLsHxqsNz6d851mfyxWbiWAl+JQUNq5
JSxjf1Ii+vcmhxJtiP6CSaTwsVPV4bN5Uzk6qrDHfaq3Kwfa96qBgVS+vhovi2Xc
2EAGwQPA82HJ0yVpeqmGW1g3AgMBAAGjggKqMIICpjAdBgNVHQ4EFgQU4hhIutQw
sy7xFutifJRAC6Q+3bkwHwYDVR0jBBgwFoAU2wYwePe5d1L7gdAPqb18UjsclwMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNjk4L0QzQzBFQ0UyMUU1
NTExRUZBQzk1OUYxOUM0RjlBRTAyLzJ3WXdlUGU1ZDFMN2dkQVBxYjE4VWpzY2x3
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMndZd2VQZTVkMUw3Z2RBUHFiMThVanNjbHdNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjY5OC9EM0MwRUNFMjFFNTUxMUVGQUM5NTlGMTlDNEY5QUUwMi9DRTA0MkE4NDFF
NTYxMUVGQkVERDFGMzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAWefHAMEBMp84DANBAIAAjAHAwUAJAR4ADANBgkqhkiG9w0B
AQsFAAOCAQEAmmytl4haQxmzcnS0Yqo67nH7JEKfa6+Cu8h28wCbbaSOOzPMLtr5
MDjB2XcA45nf/tqtoW6TaNnilIXFo5JY9XPbX0HErPYULyF9CV0hOZMA2Kswp25w
fzlg4pvHlCS3Tr1oow0MiNzbvllbDNbp7gn0msFvfFaZpF1Ufa/GWQAqpQIJce8L
F0RJfvrbglHlfk+gZGUCS4r9Psdg8geBiluKK0qgSuUR35PRZgShairMdGOTIHfc
Gnc9CBvy6Mm736DQQHgjW838FnMSLN0EhhWkdr/4DA6TrsNtILmvjGJD3nPbnijk
yZrruG5a+CixYVJKTZJGp9JNG19ZUOZPCg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:16:58 2025 by rpki-client