Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/A55B0210BCA111EC83E0EC3FC4F9AE02.roa
File: A55B0210BCA111EC83E0EC3FC4F9AE02.roa (raw, json)
Hash identifier: SVhO+iZbdNQqYJ09+i148pFLNZBSBiSRoCTRbodiVac=
Subject key identifier: 46:EF:1F:21:B6:BA:87:8A:86:8F:69:12:A9:87:9D:A0:BF:28:F7:E4
Certificate issuer: /CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Certificate serial: 043D
Authority key identifier: 46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/A55B0210BCA111EC83E0EC3FC4F9AE02.roa
Signing time: Sat 29 Apr 2023 03:22:39 +0000
ROA not before: Sat 29 Apr 2023 03:22:39 +0000
ROA not after: Mon 28 Aug 2023 00:00:00 +0000
asID: 141677
IP address blocks: 103.85.72.0/22 maxlen: 24
203.175.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085 (0x43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Validity
Not Before: Apr 29 03:22:39 2023 GMT
Not After : Aug 28 00:00:00 2023 GMT
Subject: CN=644c8d7e-8041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:bc:07:92:fc:c3:e0:61:ef:22:0c:e7:32:
f7:28:f8:0a:75:33:07:97:a9:7e:83:02:99:b1:b7:
8f:64:66:1e:3e:71:b8:cf:57:a7:78:7b:c7:bf:55:
f8:2b:6c:a6:9d:72:58:35:09:2a:fc:d8:1f:30:89:
4c:f4:41:52:62:f7:8a:34:9a:64:96:d2:b3:54:12:
6e:93:e3:ba:39:a3:0f:84:34:9f:94:16:b5:e0:39:
1d:4b:fd:e9:95:be:9a:99:b2:b1:43:27:6b:65:14:
76:7c:9b:83:27:6e:9e:3e:18:77:3c:51:d7:e7:16:
aa:24:7b:ef:c3:68:77:66:82:a7:2d:18:38:c9:05:
84:9a:a6:77:15:5a:1a:87:68:af:35:1b:b2:09:29:
9b:22:4b:9c:d8:4a:f5:07:a9:8b:e7:85:7a:cd:62:
74:e3:ce:31:61:78:a5:56:df:97:98:ee:27:50:51:
92:75:a2:70:55:2a:62:eb:4d:e7:7a:88:ed:cd:d2:
20:29:22:c0:48:28:b4:36:cd:7d:e1:d0:a2:b2:ba:
3d:1b:56:98:78:f7:26:88:fc:a8:4b:3c:48:e9:e2:
81:2d:2d:92:e2:dc:0d:ee:0f:aa:ac:ef:ce:fb:d8:
9e:6e:35:21:fb:09:65:da:a1:c8:ca:f1:79:2e:90:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:1F:21:B6:BA:87:8A:86:8F:69:12:A9:87:9D:A0:BF:28:F7:E4
X509v3 Authority Key Identifier:
keyid:46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/A55B0210BCA111EC83E0EC3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.72.0/22
203.175.12.0/22
Signature Algorithm: sha256WithRSAEncryption
57:4e:9f:4d:13:ae:2d:83:03:7d:79:40:58:bf:d2:5b:c8:21:
5b:82:b6:78:af:6a:f6:ab:b8:2d:37:b5:2b:d6:87:62:c6:ea:
bd:24:dc:8c:54:b3:60:ce:76:4a:4e:23:03:e1:56:ec:5f:2c:
83:51:2f:75:73:c0:a2:91:0e:c5:09:cf:49:5b:fb:f2:2e:68:
9d:ce:61:51:89:2d:d8:9c:11:e2:b8:13:ab:8c:6e:21:f1:c8:
8f:4a:50:27:54:6d:b9:63:29:e6:aa:a2:b9:ba:6c:78:32:e5:
40:d2:82:a0:e9:c5:cf:15:80:7e:ba:e0:40:ff:31:09:89:63:
9b:81:20:d5:8d:91:a0:8c:f2:bf:83:e1:9f:05:b3:39:b4:9e:
15:91:83:f0:a7:d7:a3:69:9f:02:dc:88:9d:3f:c2:5f:6a:ab:
fe:74:ce:ba:29:89:88:c8:d7:a4:50:6a:89:ed:a0:15:0b:97:
9a:1f:d9:f6:5e:ce:28:ce:d8:f0:c4:d0:b9:b8:f3:3d:a7:5c:
e4:2f:91:9b:47:6d:09:93:ae:a1:f8:3b:9a:8d:d0:6e:d2:67:
26:d8:89:9e:de:83:e1:b8:f6:21:95:8c:0c:a6:0a:41:ae:cb:
7e:96:81:52:81:25:94:00:48:d3:82:de:1b:ce:a7:0e:80:c0:
34:7b:13:00
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc1QkExMTAvBgNVBAUTKDQ2RTg3Q0ZGREZCMEMxNjI4MkFCMUVFQUM2REQyNDI3
MzI4Mzc2QTYwHhcNMjMwNDI5MDMyMjM5WhcNMjMwODI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDRjOGQ3ZS04MDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtmi8B5L8w+Bh7yIM5zL3KPgKdTMHl6l+gwKZsbePZGYePnG4z1eneHvHv1X4
K2ymnXJYNQkq/NgfMIlM9EFSYveKNJpkltKzVBJuk+O6OaMPhDSflBa14DkdS/3p
lb6ambKxQydrZRR2fJuDJ26ePhh3PFHX5xaqJHvvw2h3ZoKnLRg4yQWEmqZ3FVoa
h2ivNRuyCSmbIkuc2Er1B6mL54V6zWJ0484xYXilVt+XmO4nUFGSdaJwVSpi603n
eojtzdIgKSLASCi0Ns194dCisro9G1aYePcmiPyoSzxI6eKBLS2S4twN7g+qrO/O
+9iebjUh+wll2qHIyvF5LpBW8wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEbvHyG2
uoeKho9pEqmHnaC/KPfkMB8GA1UdIwQYMBaAFEbofP/fsMFigqse6sbdJCcyg3am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVCQS8xNkM0RDJCOEM4
NEQxMUVCOTkxM0QzMkRDNEY5QUUwMi9SdWg4Xzktd3dXS0NxeDdxeHQwa0p6S0Rk
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J1aDhfOS13d1dLQ3F4N3F4dDBrSnpLRGRxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTc1QkEvMTZDNEQyQjhDODREMTFFQjk5MTNEMzJEQzRGOUFFMDIvQTU1QjAyMTBC
Q0ExMTFFQzgzRTBFQzNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnVUgDBALLrwwwDQYJKoZIhvcNAQELBQADggEBAFdOn00T
ri2DA315QFi/0lvIIVuCtnivavaruC03tSvWh2LG6r0k3IxUs2DOdkpOIwPhVuxf
LINRL3VzwKKRDsUJz0lb+/IuaJ3OYVGJLdicEeK4E6uMbiHxyI9KUCdUbbljKeaq
orm6bHgy5UDSgqDpxc8VgH664ED/MQmJY5uBINWNkaCM8r+D4Z8Fszm0nhWRg/Cn
16NpnwLciJ0/wl9qq/50zropiYjI16RQaontoBULl5of2fZezijO2PDE0Lm48z2n
XOQvkZtHbQmTrqH4O5qN0G7SZybYiZ7eg+G49iGVjAymCkGuy36WgVKBJZQASNOC
3hvOpw6AwDR7EwA=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:24 2023 by rpki-client on console.sobornost.net