Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/341C7414CA6111EA97DD3439C4F9AE02.roa
File: 341C7414CA6111EA97DD3439C4F9AE02.roa (raw, json)
Hash identifier: DLeS0zPVo1GXq+y9erAJGv8PPnf+LNimN04EFu+X8DQ=
Subject key identifier: 9E:C7:10:37:B8:88:B3:A0:6C:72:60:10:12:31:E4:9B:1C:75:3D:EF
Certificate issuer: /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Certificate serial: 079D
Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/341C7414CA6111EA97DD3439C4F9AE02.roa
Signing time: Mon 22 Apr 2024 20:29:03 +0000
ROA not before: Mon 22 Apr 2024 20:29:03 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 58689
IP address blocks: 103.135.134.0/23 maxlen: 23
103.135.134.0/24 maxlen: 24
103.135.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1949 (0x79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7315
Validity
Not Before: Apr 22 20:29:03 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6626c88f-14e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:2c:32:76:39:23:27:8d:07:df:b6:c5:48:
ea:b6:2b:96:49:32:02:df:de:f4:cc:f1:ae:58:0d:
0d:b8:a8:ca:2b:35:20:2f:32:97:2d:75:5f:34:4d:
b9:6c:25:90:82:0f:6a:8b:2a:ff:d9:11:65:98:e8:
56:07:78:e3:da:eb:fe:c1:dd:81:24:7e:42:57:d5:
42:a4:35:7c:7b:ad:ce:f5:81:7b:1e:57:38:60:87:
3b:f1:9b:f1:36:a0:04:9d:08:37:55:6c:cd:62:a7:
37:1e:e2:fc:e9:09:52:cf:e7:77:6f:f8:6e:8d:b8:
2e:08:aa:45:9c:e6:28:4c:4d:87:46:33:2d:10:4f:
d2:ec:01:a6:83:28:8b:fb:e5:9f:79:bc:32:c0:fe:
1e:c1:8f:80:6a:8a:ee:fa:99:c0:96:cf:46:29:1a:
e4:95:8e:dc:6e:39:88:06:67:ec:5c:75:30:a0:d9:
5c:0f:f3:86:66:50:d7:fc:67:f6:de:c0:0a:f3:7f:
d5:0b:98:2c:94:02:8f:9d:2f:a3:d6:e4:40:5a:e5:
82:e6:1c:32:b3:a3:34:da:a3:7b:fe:68:e0:bf:77:
f2:a3:c2:94:78:ab:e0:42:48:5f:bd:14:51:f1:f4:
f5:62:d2:33:6d:39:e5:a9:54:aa:fe:50:91:e8:e2:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C7:10:37:B8:88:B3:A0:6C:72:60:10:12:31:E4:9B:1C:75:3D:EF
X509v3 Authority Key Identifier:
keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/341C7414CA6111EA97DD3439C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.134.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:1e:f8:5d:d7:22:bb:d2:f7:46:19:df:75:55:3e:4e:d9:4d:
3e:da:59:9d:81:cd:6c:4a:bc:1d:75:cf:72:1d:5e:64:32:f8:
ab:c1:23:74:99:70:58:3c:60:40:f8:1d:08:e9:3c:af:f3:36:
ac:79:27:76:2f:1e:c0:fd:88:88:e0:3b:3c:d5:c4:2b:c2:e1:
8a:1b:7b:db:03:bb:2f:63:de:13:90:24:1c:71:fa:1a:cf:14:
4f:f2:87:79:e1:ec:07:5c:e9:92:a9:e4:ad:5c:32:0e:e5:7b:
b0:de:72:ff:fc:1f:a1:af:9d:27:47:c8:a2:d6:94:cb:dd:83:
b0:63:7a:ba:7d:35:f6:1e:43:69:cd:af:a0:33:e7:62:7d:1a:
77:13:5d:49:6a:67:3c:82:51:5d:fc:55:52:ed:96:f1:d6:ae:
58:ba:d2:c8:81:15:bf:db:9f:4c:93:92:01:a9:ee:79:10:57:
a3:bb:cc:81:dc:81:23:64:02:53:2a:49:5d:6b:ca:ab:0a:99:
7c:61:5a:61:2b:af:e0:1c:1e:a2:dc:a0:dc:61:a3:bc:91:20:
f8:12:c6:35:19:78:bb:20:ad:f6:5f:0b:42:e1:bd:a8:93:63:
ce:df:ea:a0:8c:4c:c4:a6:75:dc:a7:d6:03:de:1a:b2:69:f3:
68:b2:d7:f6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjczMTUxMTAvBgNVBAUTKEY2MUI0REVBNTg3OTk5Q0I2RTE1QzU0MDg5RTREQjk4
M0QwMUJCMTAwHhcNMjQwNDIyMjAyOTAzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjI2Yzg4Zi0xNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLssMnY5IyeNB9+2xUjqtiuWSTIC3970zPGuWA0NuKjKKzUgLzKXLXVfNE25
bCWQgg9qiyr/2RFlmOhWB3jj2uv+wd2BJH5CV9VCpDV8e63O9YF7Hlc4YIc78Zvx
NqAEnQg3VWzNYqc3HuL86QlSz+d3b/hujbguCKpFnOYoTE2HRjMtEE/S7AGmgyiL
++WfebwywP4ewY+Aaoru+pnAls9GKRrklY7cbjmIBmfsXHUwoNlcD/OGZlDX/Gf2
3sAK83/VC5gslAKPnS+j1uRAWuWC5hwys6M02qN7/mjgv3fyo8KUeKvgQkhfvRRR
8fT1YtIzbTnlqVSq/lCR6OK7dQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ7HEDe4
iLOgbHJgEBIx5JscdT3vMB8GA1UdIwQYMBaAFPYbTepYeZnLbhXFQInk25g9AbsQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy
RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1jdHVGY1ZBaWVUYm1EMEJ1
eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlodE42bGg1bWN0dUZjVkFpZVRibUQwQnV4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjczMTUvODIwNkY4MzIzMkUyMTFFQTk5QTQzRTY0QzRGOUFFMDIvMzQxQzc0MTRD
QTYxMTFFQTk3REQzNDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnh4YwDQYJKoZIhvcNAQELBQADggEBADoe+F3XIrvS90YZ
33VVPk7ZTT7aWZ2BzWxKvB11z3IdXmQy+KvBI3SZcFg8YED4HQjpPK/zNqx5J3Yv
HsD9iIjgOzzVxCvC4Yobe9sDuy9j3hOQJBxx+hrPFE/yh3nh7Adc6ZKp5K1cMg7l
e7Decv/8H6GvnSdHyKLWlMvdg7Bjerp9NfYeQ2nNr6Az52J9GncTXUlqZzyCUV38
VVLtlvHWrli60siBFb/bn0yTkgGp7nkQV6O7zIHcgSNkAlMqSV1ryqsKmXxhWmEr
r+AcHqLcoNxho7yRIPgSxjUZeLsgrfZfC0LhvaiTY87f6qCMTMSmddyn1gPeGrJp
82iy1/Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:14:00 2025 by rpki-client