Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912903A/8DE18682B54A11EAB7E26C6DC4F9AE02/55E26CF2F2F511ECA8A81411C4F9AE02.roa
File: 55E26CF2F2F511ECA8A81411C4F9AE02.roa (raw, json)
Hash identifier: MWUAduIzJvWqQ3jNVpb+IHVBWbb1sUDKYhEwGv02qhg=
Subject key identifier: 11:78:0A:97:56:02:1B:31:08:03:92:7B:43:A0:08:18:C0:FF:2B:DD
Certificate issuer: /CN=A912903A/serialNumber=39645E85E1A4FE7849B6A3DA01A7D0256200090F
Certificate serial: 06F6
Authority key identifier: 39:64:5E:85:E1:A4:FE:78:49:B6:A3:DA:01:A7:D0:25:62:00:09:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWReheGk_nhJtqPaAafQJWIACQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912903A/8DE18682B54A11EAB7E26C6DC4F9AE02/55E26CF2F2F511ECA8A81411C4F9AE02.roa
Signing time: Tue 20 Dec 2022 22:58:40 +0000
ROA not before: Tue 20 Dec 2022 22:58:40 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 26496
IP address blocks: 103.44.220.0/24 maxlen: 24
103.87.189.0/24 maxlen: 24
103.87.190.0/23 maxlen: 23
202.3.13.0/24 maxlen: 24
2001:df1:9c00::/48 maxlen: 48
2403:bc80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782 (0x6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912903A/serialNumber=39645E85E1A4FE7849B6A3DA01A7D0256200090F
Validity
Not Before: Dec 20 22:58:40 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63a23e20-a0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:28:67:47:55:51:c4:60:77:95:1d:35:cb:
e6:8d:d7:c5:02:d0:11:22:f6:34:cc:8a:e2:22:ad:
6d:67:8e:35:f0:3e:0a:de:91:17:15:85:d0:70:85:
61:1f:72:8c:89:a8:3e:66:60:f2:6d:d0:60:31:24:
d0:aa:fd:3c:56:cd:a4:57:2d:8d:e4:3a:2b:c8:2b:
b8:2c:d7:dd:83:95:a6:3c:75:19:89:bd:be:3a:27:
94:b7:c6:93:8f:4f:d3:08:3e:aa:ec:e7:4d:06:3d:
31:98:97:4b:95:98:4a:55:51:30:e9:09:d1:11:de:
d5:9b:4e:86:13:2c:6c:b4:07:46:43:8f:8f:44:6e:
31:2d:ec:37:28:07:7b:fe:3e:d3:66:37:75:ec:5a:
7a:5e:d3:64:a0:27:4a:a7:9b:9d:93:9c:7f:e8:a5:
50:c0:0f:98:4a:fb:6b:c1:47:31:c1:b9:5d:b1:b6:
6b:1a:59:1b:f3:40:f8:b7:37:ce:29:28:b0:2a:77:
3b:27:36:8f:a0:4c:d1:8f:d8:34:b9:28:64:90:61:
d7:83:ec:7c:91:ea:46:f3:ea:8b:3f:50:1a:40:ef:
58:13:66:61:e1:9d:6d:44:66:ce:e0:2b:c1:90:1b:
2e:09:ba:85:b9:42:6d:6c:79:f1:03:9e:48:66:e1:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:78:0A:97:56:02:1B:31:08:03:92:7B:43:A0:08:18:C0:FF:2B:DD
X509v3 Authority Key Identifier:
keyid:39:64:5E:85:E1:A4:FE:78:49:B6:A3:DA:01:A7:D0:25:62:00:09:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912903A/8DE18682B54A11EAB7E26C6DC4F9AE02/OWReheGk_nhJtqPaAafQJWIACQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWReheGk_nhJtqPaAafQJWIACQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912903A/8DE18682B54A11EAB7E26C6DC4F9AE02/55E26CF2F2F511ECA8A81411C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.44.220.0/24
103.87.189.0-103.87.191.255
202.3.13.0/24
IPv6:
2001:df1:9c00::/48
2403:bc80::/32
Signature Algorithm: sha256WithRSAEncryption
b5:ac:16:ea:41:13:ee:df:46:80:a5:1d:31:19:59:78:38:3d:
fa:65:77:cc:50:00:01:06:d9:c5:1a:9a:8c:7f:c5:01:36:27:
af:83:dd:06:78:26:c7:55:7e:75:34:eb:6e:b9:08:28:86:9b:
00:02:ab:63:a2:0b:88:90:b4:4d:53:5d:79:a5:ad:04:a1:69:
b5:97:6f:2f:02:93:ff:45:b2:ae:35:18:6a:fc:03:34:44:a9:
42:71:35:d8:c7:a2:4a:d6:45:b0:36:77:15:9f:3b:aa:0b:7b:
d8:a1:75:7e:64:54:29:d0:29:eb:b5:46:82:c8:5d:5a:c2:1a:
d6:c7:76:4d:3a:88:dd:e3:aa:ff:4f:79:78:56:bf:5b:52:b9:
ac:2d:51:63:79:0d:2f:47:06:76:6f:69:f5:e1:00:53:29:6f:
d8:31:fd:bf:51:ad:ad:10:2a:b1:fb:68:87:4e:8f:08:b3:06:
d5:d1:5f:05:8f:54:12:5e:89:5d:c4:e2:7d:5a:7a:f1:75:99:
81:01:76:1d:ed:9c:b9:91:6b:83:80:46:65:e3:16:90:98:ea:
8b:6c:b3:65:48:c4:21:0c:f8:67:48:bb:cc:fe:5b:9f:73:66:
e8:95:f8:9b:c5:4c:b2:99:7d:8b:f4:f6:61:9a:a4:c3:f6:74:
5d:14:94:f6
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjkwM0ExMTAvBgNVBAUTKDM5NjQ1RTg1RTFBNEZFNzg0OUI2QTNEQTAxQTdEMDI1
NjIwMDA5MEYwHhcNMjIxMjIwMjI1ODQwWhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2EyM2UyMC1hMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvu4oZ0dVUcRgd5UdNcvmjdfFAtARIvY0zIriIq1tZ4418D4K3pEXFYXQcIVh
H3KMiag+ZmDybdBgMSTQqv08Vs2kVy2N5DoryCu4LNfdg5WmPHUZib2+OieUt8aT
j0/TCD6q7OdNBj0xmJdLlZhKVVEw6QnREd7Vm06GEyxstAdGQ4+PRG4xLew3KAd7
/j7TZjd17Fp6XtNkoCdKp5udk5x/6KVQwA+YSvtrwUcxwbldsbZrGlkb80D4tzfO
KSiwKnc7JzaPoEzRj9g0uShkkGHXg+x8kepG8+qLP1AaQO9YE2Zh4Z1tRGbO4CvB
kBsuCbqFuUJtbHnxA55IZuEDHwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFBF4CpdW
AhsxCAOSe0OgCBjA/yvdMB8GA1UdIwQYMBaAFDlkXoXhpP54Sbaj2gGn0CViAAkP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTAzQS84REUxODY4MkI1
NEExMUVBQjdFMjZDNkRDNEY5QUUwMi9PV1JlaGVHa19uaEp0cVBhQWFmUUpXSUFD
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09XUmVoZUdrX25oSnRxUGFBYWZRSldJQUNROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjkwM0EvOERFMTg2ODJCNTRBMTFFQUI3RTI2QzZEQzRGOUFFMDIvNTVFMjZDRjJG
MkY1MTFFQ0E4QTgxNDExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E
PDA6MCAEAgABMBoDBABnLNwwDAMEAGdXvQMEBmdXgAMEAMoDDTAWBAIAAjAQAwcA
IAEN8ZwAAwUAJAO8gDANBgkqhkiG9w0BAQsFAAOCAQEAtawW6kET7t9GgKUdMRlZ
eDg9+mV3zFAAAQbZxRqajH/FATYnr4PdBngmx1V+dTTrbrkIKIabAAKrY6ILiJC0
TVNdeaWtBKFptZdvLwKT/0WyrjUYavwDNESpQnE12MeiStZFsDZ3FZ87qgt72KF1
fmRUKdAp67VGgshdWsIa1sd2TTqI3eOq/095eFa/W1K5rC1RY3kNL0cGdm9p9eEA
Uylv2DH9v1GtrRAqsftoh06PCLMG1dFfBY9UEl6JXcTifVp68XWZgQF2He2cuZFr
g4BGZeMWkJjqi2yzZUjEIQz4Z0i7zP5bn3Nm6JX4m8VMspl9i/T2YZqkw/Z0XRSU
9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org