Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/AA02862E890C11EE87862551C4F9AE02.roa
File: AA02862E890C11EE87862551C4F9AE02.roa (raw, json)
Hash identifier: iEIKCf+XGWrseL7l7p29L+eQtWAuRRnnoodUimUnIC0=
Subject key identifier: 2C:E4:8A:7E:1D:57:A3:A3:6C:5D:C2:10:FE:D3:E3:35:92:0A:A2:44
Certificate issuer: /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial: CE
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/AA02862E890C11EE87862551C4F9AE02.roa
Signing time: Tue 03 Dec 2024 04:38:25 +0000
ROA not before: Tue 03 Dec 2024 04:38:25 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 140543
IP address blocks: 115.187.16.0/24 maxlen: 24
115.187.17.0/24 maxlen: 24
2401:4ea0::/48 maxlen: 48
2401:4ea0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Validity
Not Before: Dec 3 04:38:25 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=674e8b40-7bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:d9:18:b5:e5:35:cf:13:a9:55:ce:50:f3:
4c:20:5e:af:5e:cf:a9:96:f7:49:57:67:eb:29:62:
4d:ec:6e:13:e7:18:2e:8c:be:31:b1:80:f3:8c:73:
19:40:cc:eb:4c:ff:11:77:b0:da:b8:34:af:c7:80:
4f:9e:5c:57:3b:07:de:ae:21:86:a8:42:49:7f:5d:
7d:06:b0:4f:b8:59:cd:a6:41:96:4b:2a:e8:0d:e5:
a2:c7:af:74:11:89:85:50:95:f5:d7:5c:ff:d9:90:
f8:51:8c:06:1d:d6:3e:90:17:a0:83:d3:97:ea:a5:
a2:4d:fd:ca:3c:00:8a:94:09:db:d1:34:d8:89:6c:
54:7e:e2:8b:d2:5b:d8:78:37:25:7b:46:a7:a6:ba:
f2:95:73:08:a8:76:b8:28:b2:95:7b:91:85:c9:a7:
00:40:01:c9:01:b4:f2:c2:4f:fc:02:db:e1:24:68:
d4:a6:76:75:58:bd:97:ed:12:30:83:9f:3f:b0:62:
2e:a4:da:b1:46:51:bb:a8:8b:1b:00:d0:54:9c:34:
c0:73:4a:9b:ce:1f:2b:fc:1a:84:af:1c:11:26:df:
0f:47:1e:0d:c3:b7:60:16:74:de:2e:5b:fc:3f:f3:
ae:03:7a:2f:88:2a:1b:05:e2:0a:b4:e8:93:9d:96:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:8A:7E:1D:57:A3:A3:6C:5D:C2:10:FE:D3:E3:35:92:0A:A2:44
X509v3 Authority Key Identifier:
keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/AA02862E890C11EE87862551C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.187.16.0/23
IPv6:
2401:4ea0::/47
Signature Algorithm: sha256WithRSAEncryption
0e:57:a0:c1:82:68:20:07:46:f3:72:d9:20:89:48:8a:fd:78:
c2:1c:e6:c6:6f:38:68:c3:21:6d:c0:c9:e3:fc:17:75:81:ee:
15:1c:14:0d:a4:e3:59:90:fd:9e:4a:10:d6:4f:9c:d1:48:b3:
1d:13:cf:7c:94:75:68:24:2d:d8:b7:c8:8c:0d:31:75:42:6f:
b7:da:ba:d0:70:7f:3c:f3:18:29:fc:ce:bb:e7:c3:18:fd:2b:
47:c3:46:a7:a8:1d:5b:6d:95:47:6c:bd:82:7d:b5:6d:99:d3:
ba:cc:ed:27:45:fc:2a:6f:14:a9:4c:1d:1b:c5:a2:11:67:e6:
80:2e:6b:57:43:34:09:7d:aa:d9:92:c4:25:31:c0:15:15:42:
df:2d:ff:81:42:2a:63:af:55:1e:8d:15:67:4e:e3:22:38:30:
fe:71:fb:66:0a:15:5f:bd:b3:28:63:13:0c:81:18:20:c3:d4:
8d:aa:1e:1e:c7:b1:4f:7f:07:57:98:74:0d:34:63:13:c4:45:
81:8f:0e:0e:38:22:e1:1b:3a:6b:b9:7d:a0:23:41:8f:30:7c:
bd:f3:24:e5:83:91:a1:8e:ce:6f:e3:e4:bf:7a:29:6c:cb:56:
81:f9:8c:41:40:b2:50:08:1a:f5:13:ed:60:0d:92:0b:ef:6c:
2b:1d:f6:4d
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI3QjUxMTAvBgNVBAUTKEZERTgxQ0E3Njk1RTk0QTkwQkZERkQ4M0YxMUE3NzM0
NjMwODE3RTgwHhcNMjQxMjAzMDQzODI1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRlOGI0MC03YmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyhjZGLXlNc8TqVXOUPNMIF6vXs+plvdJV2frKWJN7G4T5xgujL4xsYDzjHMZ
QMzrTP8Rd7DauDSvx4BPnlxXOwferiGGqEJJf119BrBPuFnNpkGWSyroDeWix690
EYmFUJX111z/2ZD4UYwGHdY+kBegg9OX6qWiTf3KPACKlAnb0TTYiWxUfuKL0lvY
eDcle0anprrylXMIqHa4KLKVe5GFyacAQAHJAbTywk/8AtvhJGjUpnZ1WL2X7RIw
g58/sGIupNqxRlG7qIsbANBUnDTAc0qbzh8r/BqErxwRJt8PRx4Nw7dgFnTeLlv8
P/OuA3oviCobBeIKtOiTnZYUyQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCzkin4d
V6OjbF3CEP7T4zWSCqJEMB8GA1UdIwQYMBaAFP3oHKdpXpSpC/39g/EadzRjCBfo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdCNS8wRjE5NEVBRTg5
MEMxMUVFOURGNzJDNTBDNEY5QUUwMi9fZWdjcDJsZWxLa0xfZjJEOFJwM05HTUlG
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19lZ2NwMmxlbEtrTF9mMkQ4UnAzTkdNSUYtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTI3QjUvMEYxOTRFQUU4OTBDMTFFRTlERjcyQzUwQzRGOUFFMDIvQUEwMjg2MkU4
OTBDMTFFRTg3ODYyNTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFzuxAwDwQCAAIwCQMHASQBTqAAADANBgkqhkiG9w0BAQsF
AAOCAQEADlegwYJoIAdG83LZIIlIiv14whzmxm84aMMhbcDJ4/wXdYHuFRwUDaTj
WZD9nkoQ1k+c0UizHRPPfJR1aCQt2LfIjA0xdUJvt9q60HB/PPMYKfzOu+fDGP0r
R8NGp6gdW22VR2y9gn21bZnTusztJ0X8Km8UqUwdG8WiEWfmgC5rV0M0CX2q2ZLE
JTHAFRVC3y3/gUIqY69VHo0VZ07jIjgw/nH7ZgoVX72zKGMTDIEYIMPUjaoeHsex
T38HV5h0DTRjE8RFgY8ODjgi4Rs6a7l9oCNBjzB8vfMk5YORoY7Ob+Pkv3opbMtW
gfmMQUCyUAga9RPtYA2SC+9sKx32TQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:56:47 2025 by rpki-client