Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/4A71604EEFD911EDB141156BC4F9AE02.roa
File: 4A71604EEFD911EDB141156BC4F9AE02.roa (raw, json)
Hash identifier: bqOgDhgT6HHMaCg3yNKCNW7rkusQnZEyygYMUeICp98=
Subject key identifier: A8:FA:83:FD:69:82:1E:E6:87:8C:F1:A2:94:C7:E8:67:40:59:B7:5F
Certificate issuer: /CN=A919B0F9/serialNumber=B92F3E588B21943ACBB805BFDF0B1944BF7CAC3B
Certificate serial: 1134
Authority key identifier: B9:2F:3E:58:8B:21:94:3A:CB:B8:05:BF:DF:0B:19:44:BF:7C:AC:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uS8-WIshlDrLuAW_3wsZRL98rDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/4A71604EEFD911EDB141156BC4F9AE02.roa
Signing time: Thu 30 Nov 2023 18:05:29 +0000
ROA not before: Thu 30 Nov 2023 18:05:29 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 55352
IP address blocks: 103.131.184.0/22 maxlen: 22
103.131.184.0/24 maxlen: 24
103.131.185.0/24 maxlen: 24
103.131.186.0/24 maxlen: 24
103.131.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4404 (0x1134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B0F9, serialNumber=B92F3E588B21943ACBB805BFDF0B1944BF7CAC3B
Validity
Not Before: Nov 30 18:05:29 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6568cee9-0902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:ed:91:6e:fb:2c:1a:78:67:32:74:93:82:
db:90:d3:ff:d0:e4:11:0a:bf:ea:c2:7d:b1:8d:7e:
39:19:57:c6:3d:76:ce:64:a9:45:aa:2c:5d:3f:07:
5c:45:be:63:33:c9:63:ad:5c:2b:69:cb:5e:3e:25:
69:2e:a5:79:ef:7d:04:7d:39:b6:02:67:94:68:6d:
56:12:6d:b3:ec:48:45:95:5e:f4:d0:50:96:1a:45:
90:f1:74:e1:32:d0:db:ea:47:45:ae:0f:bd:9d:9a:
8a:43:93:b9:51:47:41:21:fa:83:8e:a4:f4:d5:f6:
84:ef:a1:d2:7f:88:d7:29:a2:4e:d8:6b:8a:54:59:
36:91:9a:23:26:c5:94:64:4e:b2:20:07:b1:ec:68:
57:02:af:80:48:75:d2:a5:aa:ee:f0:be:ad:c1:a5:
0c:d8:84:d3:67:6e:0b:68:64:21:14:98:56:87:9f:
e4:69:99:ad:65:6f:e1:99:bf:84:e3:c0:7d:cd:75:
1b:4b:c4:20:3d:59:cc:12:10:5a:cb:2f:ac:28:7c:
6b:28:f7:ac:ca:16:d9:c1:5a:24:fe:da:07:74:6f:
48:99:d7:54:98:32:d2:97:ee:64:48:01:bf:dd:d3:
de:69:c4:2f:91:2f:42:35:36:22:84:e7:63:00:09:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:83:FD:69:82:1E:E6:87:8C:F1:A2:94:C7:E8:67:40:59:B7:5F
X509v3 Authority Key Identifier:
keyid:B9:2F:3E:58:8B:21:94:3A:CB:B8:05:BF:DF:0B:19:44:BF:7C:AC:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/uS8-WIshlDrLuAW_3wsZRL98rDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uS8-WIshlDrLuAW_3wsZRL98rDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B0F9/1D2B5B2AD6BC11E894550D42C4F9AE02/4A71604EEFD911EDB141156BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.184.0/22
Signature Algorithm: sha256WithRSAEncryption
09:ed:d2:d7:0a:b2:4a:03:fa:9d:00:89:f0:b0:31:e2:38:f9:
a8:e8:88:17:72:d5:ea:32:52:57:1c:ef:6e:c8:bc:84:23:ff:
bc:e1:e2:f8:89:b4:38:bb:36:59:f7:4f:5b:f4:5c:5f:54:e5:
76:ac:a9:8d:45:43:00:39:4b:4d:c5:d8:15:2e:a8:3e:9a:fc:
70:47:3a:0c:60:0a:5b:91:42:b5:98:54:93:91:32:4c:5f:7f:
36:1b:60:f1:27:10:ba:b0:74:c4:6d:6e:9c:4f:05:1b:ac:a1:
7f:7a:e9:02:83:c5:99:54:60:d1:7f:26:b1:c1:9a:cc:83:b6:
78:0a:34:41:74:12:c6:82:11:c2:46:cc:54:b0:21:54:08:9b:
97:ee:d2:f8:92:d7:5e:8c:ad:31:e7:a1:c8:69:4d:9a:ea:14:
fa:f6:8b:23:48:26:30:ad:ac:5f:69:dd:2c:10:4c:fe:b0:4e:
55:ed:f5:7c:03:fa:ee:c1:5e:29:91:39:29:15:24:26:22:09:
05:84:ae:2b:6e:58:cf:03:17:fd:bc:a0:d5:70:9b:86:36:30:
d0:c6:2a:df:e4:e4:86:49:cf:2a:b0:b3:76:83:24:f1:9c:0d:
f4:97:70:cc:a6:0a:9c:52:9c:6c:2a:fd:5f:0a:b9:19:6d:e4:
1a:6c:da:64
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICETQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIwRjkxMTAvBgNVBAUTKEI5MkYzRTU4OEIyMTk0M0FDQkI4MDVCRkRGMEIxOTQ0
QkY3Q0FDM0IwHhcNMjMxMTMwMTgwNTI5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY4Y2VlOS0wOTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArI7tkW77LBp4ZzJ0k4LbkNP/0OQRCr/qwn2xjX45GVfGPXbOZKlFqixdPwdc
Rb5jM8ljrVwractePiVpLqV5730EfTm2AmeUaG1WEm2z7EhFlV700FCWGkWQ8XTh
MtDb6kdFrg+9nZqKQ5O5UUdBIfqDjqT01faE76HSf4jXKaJO2GuKVFk2kZojJsWU
ZE6yIAex7GhXAq+ASHXSparu8L6twaUM2ITTZ24LaGQhFJhWh5/kaZmtZW/hmb+E
48B9zXUbS8QgPVnMEhBayy+sKHxrKPesyhbZwVok/toHdG9ImddUmDLSl+5kSAG/
3dPeacQvkS9CNTYihOdjAAljFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKj6g/1p
gh7mh4zxopTH6GdAWbdfMB8GA1UdIwQYMBaAFLkvPliLIZQ6y7gFv98LGUS/fKw7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjBGOS8xRDJCNUIyQUQ2
QkMxMUU4OTQ1NTBENDJDNEY5QUUwMi91UzgtV0lzaGxEckx1QVdfM3dzWlJMOThy
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VTOC1XSXNobERyTHVBV18zd3NaUkw5OHJEcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUIwRjkvMUQyQjVCMkFENkJDMTFFODk0NTUwRDQyQzRGOUFFMDIvNEE3MTYwNEVF
RkQ5MTFFREIxNDExNTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJng7gwDQYJKoZIhvcNAQELBQADggEBAAnt0tcKskoD+p0A
ifCwMeI4+ajoiBdy1eoyUlcc727IvIQj/7zh4viJtDi7Nln3T1v0XF9U5XasqY1F
QwA5S03F2BUuqD6a/HBHOgxgCluRQrWYVJORMkxffzYbYPEnELqwdMRtbpxPBRus
oX966QKDxZlUYNF/JrHBmsyDtngKNEF0EsaCEcJGzFSwIVQIm5fu0viS116MrTHn
ochpTZrqFPr2iyNIJjCtrF9p3SwQTP6wTlXt9XwD+u7BXimROSkVJCYiCQWEritu
WM8DF/28oNVwm4Y2MNDGKt/k5IZJzyqws3aDJPGcDfSXcMymCpxSnGwq/V8KuRlt
5Bps2mQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:08 2025 by rpki-client