Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/2599865A016D11F09E828E10C4F9AE02.roa
File: 2599865A016D11F09E828E10C4F9AE02.roa (raw, json)
Hash identifier: xi1rRbapx0KHm+m4DHK2Z3ILYETQ2bKMCwEi9KpS7S8=
Subject key identifier: 2D:B7:FE:22:4A:13:17:5A:7C:8F:63:0F:43:FE:A7:9A:22:60:0D:81
Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial: 0AF2
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/2599865A016D11F09E828E10C4F9AE02.roa
Signing time: Sat 15 Mar 2025 07:14:34 +0000
ROA not before: Sat 15 Mar 2025 07:14:34 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38082
IP address blocks: 103.13.212.0/24 maxlen: 24
103.13.213.0/24 maxlen: 24
103.13.214.0/24 maxlen: 24
103.13.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2802 (0xaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A016
Validity
Not Before: Mar 15 07:14:34 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67d528da-9339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:28:af:a8:d7:c9:1f:aa:a4:e9:73:38:ef:
46:6b:63:bd:7d:6a:68:55:c3:9d:9c:78:eb:03:73:
bf:77:09:be:ad:7e:eb:3e:2d:d3:77:b7:5c:84:dc:
7d:0b:7a:b5:56:01:d1:31:48:95:c8:e6:6f:b7:6c:
27:a9:58:ff:5a:c0:68:4c:a3:91:32:ba:03:67:13:
1f:b0:02:9a:b9:aa:90:5d:be:db:9c:cf:25:30:ee:
25:ba:45:b2:9e:90:ae:ec:5a:e0:b8:1f:69:a9:64:
67:1d:18:59:05:d1:c2:c9:bc:13:0b:68:69:b2:21:
c1:37:c6:fc:7f:4a:22:2f:cb:3b:ed:45:74:66:9d:
07:aa:1e:31:df:33:59:62:e3:5d:49:e7:e9:c4:a5:
5a:a5:c0:6b:a9:82:00:0f:e2:fb:f1:57:2a:2a:b3:
d3:f2:4b:cf:b5:ef:20:df:df:ae:aa:c1:b1:e9:09:
9e:3b:b4:c9:c3:45:25:c0:ea:ad:a8:a4:44:15:36:
1c:10:fb:9a:d1:f3:91:d0:6e:f4:90:42:53:fe:ea:
02:c1:3a:56:f7:19:91:df:90:ec:92:54:a1:50:10:
4f:e0:bc:c0:13:fe:a5:39:21:62:da:e2:26:0a:08:
b1:9a:04:2b:bc:ec:c3:c1:08:05:84:23:bf:c1:54:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:FE:22:4A:13:17:5A:7C:8F:63:0F:43:FE:A7:9A:22:60:0D:81
X509v3 Authority Key Identifier:
keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/2599865A016D11F09E828E10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.212.0/22
Signature Algorithm: sha256WithRSAEncryption
31:d5:bf:82:40:02:00:6a:9a:55:d9:57:c5:63:be:fb:25:45:
21:11:1d:4d:d3:33:b2:dc:56:16:7a:0a:7a:17:da:dc:1a:9f:
2c:c9:63:f3:17:6d:f6:97:d4:01:ce:58:7e:1a:d0:50:6d:b9:
87:3b:62:8d:fc:bc:49:17:4e:bd:da:82:46:c1:4c:24:6d:03:
d6:4f:f3:1b:1e:83:c3:ab:45:81:53:f6:be:6e:c5:34:f1:f5:
ec:43:cf:b2:bf:b9:e8:32:27:47:53:8a:a1:e0:d9:79:ad:13:
40:c6:d0:93:e9:b8:47:56:29:3c:5b:a2:df:21:cd:1c:1f:f7:
14:46:65:2c:a4:20:a7:48:ee:8f:e7:e8:f3:84:33:ca:ae:36:
32:20:15:6f:0c:98:6a:cf:cd:80:ae:81:02:b7:de:3a:bf:a9:
db:88:10:a3:85:23:05:1b:99:85:e8:d4:95:56:97:14:ec:30:
df:3d:d9:ec:98:e9:dc:0a:e6:2c:d0:72:26:a8:a9:cc:72:1e:
46:26:a6:36:a8:b2:84:ce:c0:b6:db:58:7e:44:1f:42:1a:1b:
68:57:dc:94:38:fe:6b:03:8e:af:22:14:82:3c:90:f3:d6:8b:
32:57:5f:09:62:97:a9:51:80:48:15:50:6d:5b:33:06:ab:80:
70:53:4c:b1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3
OTExQkU1QjUwHhcNMjUwMzE1MDcxNDM0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Q1MjhkYS05MzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAraYor6jXyR+qpOlzOO9Ga2O9fWpoVcOdnHjrA3O/dwm+rX7rPi3Td7dchNx9
C3q1VgHRMUiVyOZvt2wnqVj/WsBoTKORMroDZxMfsAKauaqQXb7bnM8lMO4lukWy
npCu7FrguB9pqWRnHRhZBdHCybwTC2hpsiHBN8b8f0oiL8s77UV0Zp0Hqh4x3zNZ
YuNdSefpxKVapcBrqYIAD+L78VcqKrPT8kvPte8g39+uqsGx6QmeO7TJw0UlwOqt
qKREFTYcEPua0fOR0G70kEJT/uoCwTpW9xmR35DsklShUBBP4LzAE/6lOSFi2uIm
CgixmgQrvOzDwQgFhCO/wVR2hQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC23/iJK
ExdafI9jD0P+p5oiYA2BMB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx
NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUEwMTYvQzA2NzcyMjY0MTcxMTFFQUFBRDI2QTZDQzRGOUFFMDIvMjU5OTg2NUEw
MTZEMTFGMDlFODI4RTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnDdQwDQYJKoZIhvcNAQELBQADggEBADHVv4JAAgBqmlXZ
V8VjvvslRSERHU3TM7LcVhZ6CnoX2twanyzJY/MXbfaX1AHOWH4a0FBtuYc7Yo38
vEkXTr3agkbBTCRtA9ZP8xseg8OrRYFT9r5uxTTx9exDz7K/uegyJ0dTiqHg2Xmt
E0DG0JPpuEdWKTxbot8hzRwf9xRGZSykIKdI7o/n6POEM8quNjIgFW8MmGrPzYCu
gQK33jq/qduIEKOFIwUbmYXo1JVWlxTsMN892eyY6dwK5izQciaoqcxyHkYmpjao
soTOwLbbWH5EH0IaG2hX3JQ4/msDjq8iFII8kPPWizJXXwlil6lRgEgVUG1bMwar
gHBTTLE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:40:04 2025 by rpki-client