Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185483/9C16E068BCA011EBB5EB800CC4F9AE02/0A05313C25E311EC85B94012C4F9AE02.roa
File: 0A05313C25E311EC85B94012C4F9AE02.roa (raw, json)
Hash identifier: TYxLkyIOjsx8QXNMHT8GfL9WodQN8YsVf9fLZ48kd+0=
Subject key identifier: C6:2B:52:58:4A:95:5A:E8:31:AD:13:BC:E5:E9:F0:82:DD:7C:B6:1F
Certificate issuer: /CN=A9185483/serialNumber=DA53A5DC5905A14B7D8DBB5441A0945ECEB3C293
Certificate serial: 03B8
Authority key identifier: DA:53:A5:DC:59:05:A1:4B:7D:8D:BB:54:41:A0:94:5E:CE:B3:C2:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lOl3FkFoUt9jbtUQaCUXs6zwpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185483/9C16E068BCA011EBB5EB800CC4F9AE02/0A05313C25E311EC85B94012C4F9AE02.roa
Signing time: Fri 09 Sep 2022 02:01:40 +0000
ROA not before: Fri 09 Sep 2022 02:01:40 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 146993
IP address blocks: 103.241.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 952 (0x3b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185483, serialNumber=DA53A5DC5905A14B7D8DBB5441A0945ECEB3C293
Validity
Not Before: Sep 9 02:01:40 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=631a9e84-f6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:f9:b9:c4:23:23:6c:d9:99:f4:ea:89:b9:
f4:12:2e:d8:09:43:6d:c1:42:dd:fa:3b:12:f5:f9:
24:f0:ab:72:ce:3e:2a:58:87:2e:b9:15:8a:87:e3:
f7:35:43:a4:50:4b:b8:4f:fe:74:50:57:11:ee:ab:
cd:e4:db:34:41:ed:5e:24:9b:b5:72:cd:3a:8c:10:
04:42:a9:20:68:d9:35:c3:e3:e9:27:8b:a6:a9:ae:
09:d1:49:3d:ba:01:39:8e:27:22:43:32:f7:9d:09:
00:2c:2a:c2:66:c3:4c:8a:d1:8c:07:85:e2:8e:23:
59:86:b2:1d:4b:9f:66:37:18:e4:3a:ef:ad:70:f0:
56:4b:be:a4:a6:d3:b8:82:8f:3c:fc:39:7e:92:de:
eb:84:be:57:2a:cc:39:5b:79:fe:4e:8f:64:47:60:
65:9d:2b:3c:a0:db:85:19:7f:26:fc:9f:bb:79:c3:
7b:d1:8d:d8:56:00:3a:40:a0:36:74:64:e8:24:a2:
18:55:56:7f:1f:50:ea:39:13:37:0c:71:bd:d8:81:
50:af:ec:45:a1:50:ff:c8:2c:25:93:20:ce:09:b1:
8f:38:07:76:de:1a:9c:06:6a:27:a2:62:b0:16:7f:
fe:ec:f2:25:20:42:c1:b9:91:cf:50:a6:76:10:e8:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2B:52:58:4A:95:5A:E8:31:AD:13:BC:E5:E9:F0:82:DD:7C:B6:1F
X509v3 Authority Key Identifier:
keyid:DA:53:A5:DC:59:05:A1:4B:7D:8D:BB:54:41:A0:94:5E:CE:B3:C2:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185483/9C16E068BCA011EBB5EB800CC4F9AE02/2lOl3FkFoUt9jbtUQaCUXs6zwpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lOl3FkFoUt9jbtUQaCUXs6zwpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185483/9C16E068BCA011EBB5EB800CC4F9AE02/0A05313C25E311EC85B94012C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.241.48.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:36:88:23:26:a8:22:67:13:bb:1e:44:ba:5e:84:6f:3a:03:
7c:d7:81:e2:dc:bf:c0:cd:1f:95:a9:b6:65:b1:e0:23:91:d9:
ba:f3:2c:10:44:66:fc:94:dd:e3:ff:59:51:34:72:13:e7:99:
16:40:58:26:47:19:38:e8:2c:43:26:a2:79:51:4a:e7:e0:b0:
bc:31:96:8b:ef:63:5e:28:3a:21:a0:e8:d4:7d:7b:7b:d9:5b:
07:f9:9d:a5:a5:50:8c:89:53:98:0e:25:75:35:58:7d:f8:f2:
7d:c3:ef:b0:6d:ce:37:0d:8f:76:00:fd:c6:24:0d:f0:f0:80:
1d:67:5b:7d:5b:d5:25:f6:a4:b4:c4:8b:39:80:a5:b9:9b:45:
ca:25:5b:63:a1:c7:bc:e4:af:63:01:60:b4:6e:83:fc:1e:13:
dd:ed:06:85:4b:36:a2:96:c0:88:aa:50:69:7b:19:ba:8d:5b:
ad:cb:56:d5:02:ad:af:9c:b9:94:fb:01:1f:93:67:d4:30:1d:
f9:6f:48:f5:34:35:b3:d4:80:c8:d6:c2:fc:d0:1b:7d:64:01:
77:81:65:e7:95:90:32:0d:98:b8:24:48:7e:a9:d3:45:1b:4c:
bd:97:e3:66:a5:ce:1b:67:a9:c3:3c:79:00:14:b0:39:4e:11:
1b:a8:cb:4b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0ODMxMTAvBgNVBAUTKERBNTNBNURDNTkwNUExNEI3RDhEQkI1NDQxQTA5NDVF
Q0VCM0MyOTMwHhcNMjIwOTA5MDIwMTQwWhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzFhOWU4NC1mNmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0x/5ucQjI2zZmfTqibn0Ei7YCUNtwULd+jsS9fkk8Ktyzj4qWIcuuRWKh+P3
NUOkUEu4T/50UFcR7qvN5Ns0Qe1eJJu1cs06jBAEQqkgaNk1w+PpJ4umqa4J0Uk9
ugE5jiciQzL3nQkALCrCZsNMitGMB4XijiNZhrIdS59mNxjkOu+tcPBWS76kptO4
go88/Dl+kt7rhL5XKsw5W3n+To9kR2BlnSs8oNuFGX8m/J+7ecN70Y3YVgA6QKA2
dGToJKIYVVZ/H1DqORM3DHG92IFQr+xFoVD/yCwlkyDOCbGPOAd23hqcBmonomKw
Fn/+7PIlIELBuZHPUKZ2EOhEjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMYrUlhK
lVroMa0TvOXp8ILdfLYfMB8GA1UdIwQYMBaAFNpTpdxZBaFLfY27VEGglF7Os8KT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ4My85QzE2RTA2OEJD
QTAxMUVCQjVFQjgwMENDNEY5QUUwMi8ybE9sM0ZrRm9VdDlqYnRVUWFDVVhzNnp3
cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJsT2wzRmtGb1V0OWpidFVRYUNVWHM2endwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODU0ODMvOUMxNkUwNjhCQ0EwMTFFQkI1RUI4MDBDQzRGOUFFMDIvMEEwNTMxM0My
NUUzMTFFQzg1Qjk0MDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn8TAwDQYJKoZIhvcNAQELBQADggEBAJo2iCMmqCJnE7se
RLpehG86A3zXgeLcv8DNH5WptmWx4COR2brzLBBEZvyU3eP/WVE0chPnmRZAWCZH
GTjoLEMmonlRSufgsLwxlovvY14oOiGg6NR9e3vZWwf5naWlUIyJU5gOJXU1WH34
8n3D77BtzjcNj3YA/cYkDfDwgB1nW31b1SX2pLTEizmApbmbRcolW2Ohx7zkr2MB
YLRug/weE93tBoVLNqKWwIiqUGl7GbqNW63LVtUCra+cuZT7AR+TZ9QwHflvSPU0
NbPUgMjWwvzQG31kAXeBZeeVkDINmLgkSH6p00UbTL2X42alzhtnqcM8eQAUsDlO
ERuoy0s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:39:51 2025 by rpki-client