Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/28BD1EFC3B4311EDAB5E6382C4F9AE02.roa
File: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (raw, json)
Hash identifier: iDeeY7cczGJlVpoNqxYKwzcP0iNYTGCgB6+Xi39HWPg=
Subject key identifier: 34:CA:A2:5A:CB:95:9E:96:00:0D:CE:BE:DE:12:38:4A:C4:2D:E8:B8
Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial: 01A4
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/28BD1EFC3B4311EDAB5E6382C4F9AE02.roa
Signing time: Wed 11 Sep 2024 05:36:25 +0000
ROA not before: Wed 11 Sep 2024 05:36:25 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140499
IP address blocks: 103.57.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97D0
Validity
Not Before: Sep 11 05:36:25 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66e12c59-92df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:9f:fc:42:a4:f0:1f:dc:80:29:75:f6:b6:
68:df:9f:02:d7:63:9f:ef:7c:c7:54:61:c8:6d:b8:
a4:4d:fc:f6:db:28:4f:75:53:11:4e:cf:9f:aa:3c:
16:16:eb:b3:00:a2:6b:2e:db:5d:48:bd:5b:e3:77:
10:1a:4e:94:a6:7b:35:62:66:57:21:94:1d:4b:ab:
ca:0e:2b:b5:b4:72:f2:02:28:32:ba:c2:0b:c6:8b:
d8:f8:56:86:eb:bf:b1:71:aa:40:22:64:e0:9d:b1:
15:dc:b9:c5:31:b2:c1:48:73:66:60:6d:f9:2a:c5:
43:c9:68:bf:d3:11:55:2f:30:9b:8b:ff:ce:c8:4d:
c9:ff:17:42:57:f9:93:23:09:31:7e:12:fc:6f:43:
c7:25:1e:8b:77:0a:04:ec:0c:cc:35:59:8a:53:b7:
e6:27:14:a9:d0:18:14:48:cc:9b:f8:1e:5b:3c:ea:
75:03:c1:fc:3b:4a:55:2b:2d:db:62:e4:0f:96:b1:
49:f8:dd:29:d5:be:21:65:19:24:00:ab:d5:b0:71:
34:e7:82:4c:72:03:1a:3c:e4:3f:c0:fe:51:93:fb:
44:66:84:d6:69:cc:1b:9e:bb:5c:f7:58:e5:b8:e8:
fb:5b:54:46:a7:3e:a1:e2:40:7d:78:2d:2e:49:18:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CA:A2:5A:CB:95:9E:96:00:0D:CE:BE:DE:12:38:4A:C4:2D:E8:B8
X509v3 Authority Key Identifier:
keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/28BD1EFC3B4311EDAB5E6382C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.57.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:26:c7:a3:55:da:1d:63:11:e6:f9:0f:95:db:a8:72:1b:85:
7b:04:bc:de:64:16:ff:00:2e:d5:97:48:a3:0a:f8:6f:af:e1:
77:54:55:60:06:7d:f3:b2:c7:c8:65:58:3d:31:36:57:8a:94:
7b:14:10:06:41:1e:4e:c5:ab:9e:bd:42:96:d8:c7:03:65:3f:
46:c4:bb:4f:e3:34:83:e3:36:d8:4e:77:11:e9:15:64:4f:72:
0a:fb:56:85:66:31:01:1b:17:33:2d:22:7e:08:00:03:57:c7:
5f:e8:c2:4a:3d:f1:8a:74:76:7a:ae:21:78:78:a6:30:5a:29:
22:08:db:2a:b1:5b:45:a7:f0:a2:72:6a:da:ba:11:9a:e7:2a:
9d:8f:28:56:f2:a4:cb:57:1c:61:ad:e4:c5:fa:42:1b:3a:0a:
76:90:c5:3b:ca:ee:22:04:ba:48:b4:32:97:be:3b:06:a5:cb:
0b:7c:cb:a2:ab:4a:6f:42:61:09:5c:4d:c5:5d:fd:b3:99:ff:
a4:6c:5b:af:44:97:a9:66:c2:19:84:90:1f:00:df:33:16:ec:
2a:6d:f8:fe:d5:b4:87:e2:14:f0:28:8e:c1:55:a5:88:bc:92:
9c:b6:d8:be:0a:3d:c7:5c:ab:88:80:80:81:09:68:38:00:52:
ef:c1:de:bb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy
QzQwOEU1QzgwHhcNMjQwOTExMDUzNjI1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmUxMmM1OS05MmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArNmf/EKk8B/cgCl19rZo358C12Of73zHVGHIbbikTfz22yhPdVMRTs+fqjwW
FuuzAKJrLttdSL1b43cQGk6Upns1YmZXIZQdS6vKDiu1tHLyAigyusILxovY+FaG
67+xcapAImTgnbEV3LnFMbLBSHNmYG35KsVDyWi/0xFVLzCbi//OyE3J/xdCV/mT
IwkxfhL8b0PHJR6LdwoE7AzMNVmKU7fmJxSp0BgUSMyb+B5bPOp1A8H8O0pVKy3b
YuQPlrFJ+N0p1b4hZRkkAKvVsHE054JMcgMaPOQ/wP5Rk/tEZoTWacwbnrtc91jl
uOj7W1RGpz6h4kB9eC0uSRihowIDAQABo4IClTCCApEwHQYDVR0OBBYEFDTKolrL
lZ6WAA3Ovt4SOErELei4MB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw
MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1
Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTk3RDAvQjg5RkEzQzYzMDMyMTFFRDlCREMwQTgzQzRGOUFFMDIvMjhCRDFFRkMz
QjQzMTFFREFCNUU2MzgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnOeEwDQYJKoZIhvcNAQELBQADggEBAGsmx6NV2h1jEeb5
D5XbqHIbhXsEvN5kFv8ALtWXSKMK+G+v4XdUVWAGffOyx8hlWD0xNleKlHsUEAZB
Hk7Fq569QpbYxwNlP0bEu0/jNIPjNthOdxHpFWRPcgr7VoVmMQEbFzMtIn4IAANX
x1/owko98Yp0dnquIXh4pjBaKSII2yqxW0Wn8KJyatq6EZrnKp2PKFbypMtXHGGt
5MX6Qhs6CnaQxTvK7iIEuki0Mpe+Owalywt8y6KrSm9CYQlcTcVd/bOZ/6RsW69E
l6lmwhmEkB8A3zMW7Cpt+P7VtIfiFPAojsFVpYi8kpy22L4KPcdcq4iAgIEJaDgA
Uu/B3rs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:44 2025 by rpki-client