Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/F0208B2012BC11EBB3294950C4F9AE02.roa
File: F0208B2012BC11EBB3294950C4F9AE02.roa (raw, json)
Hash identifier: eaM5ERmLR+NewtcyA9NoXbFVJmh3ke0mtpONHl7mYGQ=
Subject key identifier: 39:74:CD:80:59:3E:AD:70:BE:A7:18:74:1A:62:9E:23:E9:39:A8:7C
Certificate issuer: /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
Certificate serial: 0BBC
Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/F0208B2012BC11EBB3294950C4F9AE02.roa
Signing time: Thu 12 Sep 2024 19:57:25 +0000
ROA not before: Thu 12 Sep 2024 19:57:25 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 138150
IP address blocks: 103.121.104.0/24 maxlen: 24
103.121.105.0/24 maxlen: 24
103.121.106.0/24 maxlen: 24
103.121.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3004 (0xbbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C451
Validity
Not Before: Sep 12 19:57:25 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e347a5-7301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:83:f5:84:b4:c6:8b:6f:7c:83:05:26:4e:
7a:02:fc:36:3c:03:c8:28:a7:17:c4:ba:0b:3a:2d:
6f:94:48:48:cf:2e:70:20:2d:7a:e3:e8:f6:76:78:
44:2d:f9:17:49:ab:d9:0e:a7:5c:e0:72:4b:c9:2f:
17:e0:57:f7:56:ab:dd:70:9d:c4:40:17:4d:e3:b8:
db:b1:ec:86:92:90:b9:ff:9e:59:a9:aa:61:ef:26:
c1:8a:95:e8:5e:01:00:3f:a5:06:5c:6e:04:4e:77:
62:85:fc:41:c9:f2:4c:e1:aa:90:43:d7:26:5d:e7:
6b:57:e3:d1:b2:ad:6b:e0:8a:f6:ec:44:fa:2f:4a:
0a:f8:37:80:1e:a1:b5:47:c1:a4:6d:36:db:78:2f:
98:9d:7f:77:f5:44:77:65:47:2f:88:1c:59:24:1d:
c1:60:a2:72:c2:7e:0e:1f:f5:f1:38:27:bd:59:b1:
c0:f4:61:c5:0d:eb:98:db:9b:61:92:d8:81:78:52:
18:85:15:c3:bd:1c:cf:1e:a1:3f:69:9a:d7:86:34:
45:58:cd:9c:b3:17:4d:5b:11:bd:55:de:41:47:c8:
13:ac:41:01:66:c7:d1:c3:b9:60:e0:da:83:85:3e:
1c:f1:81:ac:63:1d:ca:be:f0:88:c1:d9:1c:27:18:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:74:CD:80:59:3E:AD:70:BE:A7:18:74:1A:62:9E:23:E9:39:A8:7C
X509v3 Authority Key Identifier:
keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/F0208B2012BC11EBB3294950C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.104.0/22
Signature Algorithm: sha256WithRSAEncryption
36:62:a0:bc:12:e2:48:54:c8:51:25:e2:e0:de:82:42:c9:d3:
38:54:d4:5d:65:ac:bc:24:b1:d2:c7:de:eb:db:8c:0c:1d:a4:
58:d8:29:99:11:2d:3a:74:5b:1e:c1:55:49:34:2e:3c:13:1c:
d4:76:53:92:8a:0e:68:83:95:d4:b7:36:e0:45:a9:2b:09:60:
0a:63:6f:3f:bd:74:72:e0:eb:64:7b:66:5e:52:9a:a3:64:c2:
c3:7e:b9:7d:82:ba:86:5c:aa:54:91:ce:16:79:ef:cb:c6:85:
d0:1d:e9:12:77:a5:25:b7:56:f9:b4:95:2b:f1:6d:3b:29:c4:
3b:15:ca:59:b8:2c:a0:f3:db:6c:53:87:76:32:58:87:4f:df:
91:ad:9a:0e:a8:d1:f0:c5:e8:49:ee:84:c9:90:d8:ef:ff:f0:
71:db:20:68:4f:f0:56:f8:5a:05:0e:09:9b:01:72:27:0a:f6:
67:40:dc:98:c8:be:80:15:3e:4f:67:53:7b:3e:6e:37:16:a7:
64:3f:ef:79:53:e1:3a:91:f3:cd:2e:60:3c:2d:f2:03:a4:cd:
21:ab:50:0d:6b:ca:8a:d6:48:34:b8:9f:36:f2:c1:4a:a5:7c:
9f:b4:68:1e:f5:32:3a:45:5d:5e:ce:42:db:d1:3d:5d:d0:41:
57:b4:67:6f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM0NTExMTAvBgNVBAUTKDZBMTg1QkY0MTdBMkVCMDJBMTJFMTlENTc1OTBBRDhE
MTE4NDc1RjcwHhcNMjQwOTEyMTk1NzI1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmUzNDdhNS03MzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArdWD9YS0xotvfIMFJk56Avw2PAPIKKcXxLoLOi1vlEhIzy5wIC164+j2dnhE
LfkXSavZDqdc4HJLyS8X4Ff3VqvdcJ3EQBdN47jbseyGkpC5/55Zqaph7ybBipXo
XgEAP6UGXG4ETndihfxByfJM4aqQQ9cmXedrV+PRsq1r4Ir27ET6L0oK+DeAHqG1
R8GkbTbbeC+YnX939UR3ZUcviBxZJB3BYKJywn4OH/XxOCe9WbHA9GHFDeuY25th
ktiBeFIYhRXDvRzPHqE/aZrXhjRFWM2csxdNWxG9Vd5BR8gTrEEBZsfRw7lg4NqD
hT4c8YGsYx3KvvCIwdkcJxiGpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDl0zYBZ
Pq1wvqcYdBpiniPpOah8MB8GA1UdIwQYMBaAFGoYW/QXousCoS4Z1XWQrY0RhHX3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ1MS9COTM0OTM3QTA2
RDAxMUVBOEQ0MzhDM0ZDNEY5QUUwMi9haGhiOUJlaTZ3S2hMaG5WZFpDdGpSR0Vk
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FoaGI5QmVpNndLaExoblZkWkN0alJHRWRmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUM0NTEvQjkzNDkzN0EwNkQwMTFFQThENDM4QzNGQzRGOUFFMDIvRjAyMDhCMjAx
MkJDMTFFQkIzMjk0OTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJneWgwDQYJKoZIhvcNAQELBQADggEBADZioLwS4khUyFEl
4uDegkLJ0zhU1F1lrLwksdLH3uvbjAwdpFjYKZkRLTp0Wx7BVUk0LjwTHNR2U5KK
DmiDldS3NuBFqSsJYApjbz+9dHLg62R7Zl5SmqNkwsN+uX2CuoZcqlSRzhZ578vG
hdAd6RJ3pSW3Vvm0lSvxbTspxDsVylm4LKDz22xTh3YyWIdP35Gtmg6o0fDF6Enu
hMmQ2O//8HHbIGhP8Fb4WgUOCZsBcicK9mdA3JjIvoAVPk9nU3s+bjcWp2Q/73lT
4TqR880uYDwt8gOkzSGrUA1ryorWSDS4nzbywUqlfJ+0aB71MjpFXV7OQtvRPV3Q
QVe0Z28=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:27 2025 by rpki-client