Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A39C/9D584D68E1FF11EEB2A1CE24C4F9AE02/F2F9933AE1FF11EE9A5D8C25C4F9AE02.roa
File: F2F9933AE1FF11EE9A5D8C25C4F9AE02.roa (raw, json)
Hash identifier: IvfSA4bOvy2iuPTe72seLf8xFLPqNdLRBTEvJc1ziq4=
Subject key identifier: 21:F4:1B:3D:69:4F:D7:B5:44:B3:6C:53:0D:00:ED:51:F5:8C:AA:C6
Certificate issuer: /CN=A912A39C/serialNumber=8C6CFBABCE87BA19A20A7B87F28652DB5B4A7D52
Certificate serial: B6
Authority key identifier: 8C:6C:FB:AB:CE:87:BA:19:A2:0A:7B:87:F2:86:52:DB:5B:4A:7D:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGz7q86HuhmiCnuH8oZS21tKfVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A39C/9D584D68E1FF11EEB2A1CE24C4F9AE02/F2F9933AE1FF11EE9A5D8C25C4F9AE02.roa
Signing time: Sat 01 Mar 2025 08:08:22 +0000
ROA not before: Sat 01 Mar 2025 08:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138152
IP address blocks: 103.147.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A39C, serialNumber=8C6CFBABCE87BA19A20A7B87F28652DB5B4A7D52
Validity
Not Before: Mar 1 08:08:22 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c2c076-8b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:96:d8:d9:d3:ad:d7:03:dc:c2:93:39:19:da:
a1:63:ef:b2:83:7c:ae:50:0d:d9:60:62:58:68:29:
80:82:91:94:1c:c4:ca:f4:65:9d:66:88:24:b2:24:
8e:e7:7d:3e:4e:94:44:4b:02:93:fa:6c:fa:2f:52:
39:d4:0a:45:70:a7:a2:60:bb:df:ce:a4:ec:0d:cc:
d4:4f:31:eb:e6:68:ad:10:5e:0f:fe:f1:03:7f:58:
bf:50:69:84:e8:33:9a:20:70:82:56:1a:8d:34:5a:
a7:96:c9:57:25:2f:10:da:6f:92:e9:fb:00:f8:c0:
59:be:9d:05:7e:15:3f:ad:03:cd:12:cd:11:a8:ba:
cc:78:ef:9f:fb:32:a1:fd:82:b0:ab:cf:a7:51:ab:
f5:5f:31:ae:a9:f7:37:2c:6f:4f:cf:c1:7d:0f:39:
ad:06:f9:65:15:29:6e:ab:db:99:ec:cc:fb:33:60:
f0:2b:56:4a:25:17:ad:f9:64:05:b9:84:bf:2e:c8:
0f:8b:16:35:52:fc:bb:e4:e9:60:e4:00:b4:44:32:
92:3b:68:89:9d:22:f3:fb:ec:59:51:a7:89:0b:95:
47:be:da:ae:1c:b3:ab:82:f6:7f:df:cd:cf:bf:35:
f9:da:ba:0f:c1:fc:f5:b3:8a:0c:72:fb:3a:9f:b5:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:1B:3D:69:4F:D7:B5:44:B3:6C:53:0D:00:ED:51:F5:8C:AA:C6
X509v3 Authority Key Identifier:
keyid:8C:6C:FB:AB:CE:87:BA:19:A2:0A:7B:87:F2:86:52:DB:5B:4A:7D:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A39C/9D584D68E1FF11EEB2A1CE24C4F9AE02/jGz7q86HuhmiCnuH8oZS21tKfVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGz7q86HuhmiCnuH8oZS21tKfVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A39C/9D584D68E1FF11EEB2A1CE24C4F9AE02/F2F9933AE1FF11EE9A5D8C25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f7:f3:5e:ec:60:b6:59:eb:a8:1a:92:bc:80:45:c2:f9:1b:
d1:46:08:8d:fb:62:e9:bb:65:38:03:99:85:d6:a9:29:45:71:
91:92:50:69:72:56:f4:d7:d9:99:0d:fd:f6:5a:76:d5:8c:68:
18:af:35:cc:97:1e:f2:1a:4c:6c:ff:d0:ab:91:fc:81:a3:23:
6d:5d:c4:96:06:bd:59:b6:94:ff:e3:55:7a:7e:76:1c:71:46:
87:77:a0:58:f5:ff:5e:bd:53:1b:1f:e1:13:63:fb:fd:ac:cb:
12:4a:99:ca:fa:19:8b:32:94:bc:f3:84:19:3b:4c:c9:85:5f:
f9:25:ba:95:36:5e:7d:b6:c8:58:7d:83:6a:94:37:84:95:fd:
71:16:bd:c0:5c:c7:51:fc:99:bc:c7:07:4f:cd:4e:76:10:a0:
b9:24:58:0e:38:88:75:54:d5:ff:b2:ad:cf:db:43:4f:03:42:
64:51:8e:68:5c:63:f0:51:1a:b2:6f:12:56:c9:c9:77:49:ec:
a7:bb:06:8c:80:24:88:01:70:a3:af:66:fe:a7:01:e0:f0:06:
b5:51:17:b7:1b:c4:46:a5:5b:6e:17:86:05:13:b8:0f:d1:4e:
e7:ec:2f:06:6e:c3:d2:e3:01:96:05:5d:b8:45:42:92:49:1e:
c9:e1:ee:7a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkEzOUMxMTAvBgNVBAUTKDhDNkNGQkFCQ0U4N0JBMTlBMjBBN0I4N0YyODY1MkRC
NUI0QTdENTIwHhcNMjUwMzAxMDgwODIyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2MyYzA3Ni04Yjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8JbY2dOt1wPcwpM5GdqhY++yg3yuUA3ZYGJYaCmAgpGUHMTK9GWdZogksiSO
530+TpRESwKT+mz6L1I51ApFcKeiYLvfzqTsDczUTzHr5mitEF4P/vEDf1i/UGmE
6DOaIHCCVhqNNFqnlslXJS8Q2m+S6fsA+MBZvp0FfhU/rQPNEs0RqLrMeO+f+zKh
/YKwq8+nUav1XzGuqfc3LG9Pz8F9DzmtBvllFSluq9uZ7Mz7M2DwK1ZKJRet+WQF
uYS/LsgPixY1Uvy75Olg5AC0RDKSO2iJnSLz++xZUaeJC5VHvtquHLOrgvZ/383P
vzX52roPwfz1s4oMcvs6n7Xj/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCH0Gz1p
T9e1RLNsUw0A7VH1jKrGMB8GA1UdIwQYMBaAFIxs+6vOh7oZogp7h/KGUttbSn1S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTM5Qy85RDU4NEQ2OEUx
RkYxMUVFQjJBMUNFMjRDNEY5QUUwMi9qR3o3cTg2SHVobWlDbnVIOG9aUzIxdEtm
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pHejdxODZIdWhtaUNudUg4b1pTMjF0S2ZWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkEzOUMvOUQ1ODRENjhFMUZGMTFFRUIyQTFDRTI0QzRGOUFFMDIvRjJGOTkzM0FF
MUZGMTFFRTlBNUQ4QzI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkw4wDQYJKoZIhvcNAQELBQADggEBAG73817sYLZZ66ga
kryARcL5G9FGCI37Yum7ZTgDmYXWqSlFcZGSUGlyVvTX2ZkN/fZadtWMaBivNcyX
HvIaTGz/0KuR/IGjI21dxJYGvVm2lP/jVXp+dhxxRod3oFj1/169Uxsf4RNj+/2s
yxJKmcr6GYsylLzzhBk7TMmFX/klupU2Xn22yFh9g2qUN4SV/XEWvcBcx1H8mbzH
B0/NTnYQoLkkWA44iHVU1f+yrc/bQ08DQmRRjmhcY/BRGrJvElbJyXdJ7Ke7BoyA
JIgBcKOvZv6nAeDwBrVRF7cbxEalW24XhgUTuA/RTufsLwZuw9LjAZYFXbhFQpJJ
Hsnh7no=
-----END CERTIFICATE-----
Generated at Sat May 17 02:36:02 2025 by rpki-client