Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/A336FE62609111EFB751B771C4F9AE02.roa
File: A336FE62609111EFB751B771C4F9AE02.roa (raw, json)
Hash identifier: 52bkXRq+LzImcNciZMVc/RbkFDyxds03UT8vcrTtvWc=
Subject key identifier: 37:AA:91:16:F2:8C:F8:63:CE:41:13:DF:D2:58:84:D9:5B:90:27:C7
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 038D
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/A336FE62609111EFB751B771C4F9AE02.roa
Signing time: Thu 05 Dec 2024 01:15:13 +0000
ROA not before: Thu 05 Dec 2024 01:15:13 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 151338
IP address blocks: 103.49.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909 (0x38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B
Validity
Not Before: Dec 5 01:15:13 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6750fea0-4772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:b2:3b:cc:a0:90:80:6f:99:33:7f:84:e3:
86:10:f8:9d:ab:f1:1b:63:c7:a9:f3:66:d6:c2:66:
4e:59:85:49:2e:e7:16:10:9b:52:3e:c9:61:bf:3e:
84:f6:83:e1:05:c8:dd:0a:58:2b:d3:e4:fc:7b:b2:
14:33:94:db:b0:28:48:b6:6a:34:12:3c:d8:83:65:
02:72:92:01:0e:9e:5d:28:29:4b:9a:da:19:0c:b4:
a2:8e:06:d2:5d:ac:e4:f8:bd:a7:b3:a1:4c:41:18:
79:75:4a:2e:49:d7:44:a6:95:b8:e6:64:44:da:47:
3b:11:f5:00:93:7d:06:39:86:e8:f8:96:57:03:0e:
82:90:aa:6d:1e:37:c1:1b:81:75:63:db:49:75:93:
9a:cf:5c:e2:35:c7:74:48:db:84:3d:cc:fd:a9:6f:
1e:be:1c:4c:31:55:3a:3e:1c:48:0f:c5:97:19:8a:
5a:aa:52:6f:0c:a9:48:a4:a8:db:0e:3a:f0:5b:16:
55:ee:af:20:3e:d6:d4:2e:fd:25:05:2d:65:85:d1:
f9:1d:3c:28:24:db:48:5d:37:74:07:64:62:33:60:
61:10:ce:36:6a:4d:2f:dc:53:77:20:3c:e1:24:d1:
d2:5d:3f:97:d4:01:7c:6a:1b:a2:e8:d1:6b:54:d8:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AA:91:16:F2:8C:F8:63:CE:41:13:DF:D2:58:84:D9:5B:90:27:C7
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/A336FE62609111EFB751B771C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:bd:fa:7d:0b:5e:49:8f:88:b9:82:9d:ce:33:10:4b:22:3a:
51:37:76:dc:91:10:83:02:6d:79:51:34:12:92:ba:5f:5f:4b:
88:48:d7:95:a2:81:03:56:65:e0:1a:f1:81:c3:28:79:b7:7c:
84:f1:05:e3:a7:56:6b:6c:91:cc:31:d0:66:f2:b5:57:fd:18:
40:2a:be:35:62:6a:97:6b:97:11:ae:38:a3:50:8b:39:1f:2c:
49:c9:27:10:e1:d0:4d:e2:3e:d8:94:f0:92:8d:85:23:7a:d2:
5b:f8:fa:7f:78:5a:21:4a:d2:67:56:9c:88:a3:6d:7b:fd:5a:
2d:05:6f:50:ce:e1:c2:a9:87:78:b5:11:ef:e0:20:de:2a:48:
93:66:47:73:7b:66:bc:79:0c:90:84:e1:ae:a2:c5:8e:0f:82:
76:85:c9:92:f8:0b:7a:b1:d0:d3:01:1d:85:be:68:fa:a5:49:
58:32:71:4b:7f:1d:e0:d2:37:e2:6d:22:66:a3:35:51:a0:5d:
5f:be:40:58:9b:cf:81:af:eb:22:ec:38:3c:b7:7d:c4:16:6f:
a6:11:19:b2:f5:31:67:8e:30:a9:94:3d:6b:8b:0c:7d:1e:e2:
02:90:48:56:b9:a1:56:ce:34:e9:98:f3:00:dd:75:3c:7a:4a:
ca:ab:3b:e0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE
MjYwQUE5NzgwHhcNMjQxMjA1MDExNTEzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUwZmVhMC00NzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA01+yO8ygkIBvmTN/hOOGEPidq/EbY8ep82bWwmZOWYVJLucWEJtSPslhvz6E
9oPhBcjdClgr0+T8e7IUM5TbsChItmo0EjzYg2UCcpIBDp5dKClLmtoZDLSijgbS
Xazk+L2ns6FMQRh5dUouSddEppW45mRE2kc7EfUAk30GOYbo+JZXAw6CkKptHjfB
G4F1Y9tJdZOaz1ziNcd0SNuEPcz9qW8evhxMMVU6PhxID8WXGYpaqlJvDKlIpKjb
DjrwWxZV7q8gPtbULv0lBS1lhdH5HTwoJNtIXTd0B2RiM2BhEM42ak0v3FN3IDzh
JNHSXT+X1AF8ahui6NFrVNhi8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDeqkRby
jPhjzkET39JYhNlbkCfHMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx
RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvQTMzNkZFNjI2
MDkxMTFFRkI3NTFCNzcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnMT0wDQYJKoZIhvcNAQELBQADggEBALG9+n0LXkmPiLmC
nc4zEEsiOlE3dtyREIMCbXlRNBKSul9fS4hI15WigQNWZeAa8YHDKHm3fITxBeOn
Vmtskcwx0GbytVf9GEAqvjViapdrlxGuOKNQizkfLEnJJxDh0E3iPtiU8JKNhSN6
0lv4+n94WiFK0mdWnIijbXv9Wi0Fb1DO4cKph3i1Ee/gIN4qSJNmR3N7Zrx5DJCE
4a6ixY4PgnaFyZL4C3qx0NMBHYW+aPqlSVgycUt/HeDSN+JtImajNVGgXV++QFib
z4Gv6yLsODy3fcQWb6YRGbL1MWeOMKmUPWuLDH0e4gKQSFa5oVbONOmY8wDddTx6
SsqrO+A=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:35 2025 by rpki-client