Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F1A195F284A511EAB3356318C4F9AE02.roa
File: F1A195F284A511EAB3356318C4F9AE02.roa (raw, json)
Hash identifier: wqRJomYX0OTYINbwompZ7/vbhBBEgg9g5IawQllcmCg=
Subject key identifier: FA:F8:53:9C:36:67:7D:CC:89:23:83:32:42:7C:75:D3:F3:76:F8:7F
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2987
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F1A195F284A511EAB3356318C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:15 +0000
ROA not before: Tue 31 Dec 2024 15:53:15 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38794
IP address blocks: 49.229.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10631 (0x2987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Dec 31 15:53:15 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6774136b-0d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:5b:7c:31:ea:1d:dc:02:3d:2e:0c:1c:b9:
4e:5e:a1:de:b8:71:41:30:9e:28:3c:db:5e:f8:38:
e1:ce:e2:70:31:2c:57:43:e1:70:32:79:37:ad:9f:
20:99:48:60:26:1e:10:0e:d7:ab:fa:a3:8b:aa:86:
db:3f:1f:62:ae:f1:c9:9d:ce:56:bc:83:43:00:10:
7e:1d:5c:78:47:73:8a:a3:b1:5f:1f:5e:e9:5a:b5:
c6:1e:35:a1:8e:13:ef:aa:a9:68:e5:16:d3:44:04:
8e:3b:1d:f1:dd:c7:9a:5c:85:a8:2e:cb:20:6a:7a:
d3:72:66:3d:85:bd:53:be:80:12:47:29:db:aa:5d:
8b:6c:72:d9:b6:fe:08:a4:ff:bb:fb:66:62:76:52:
4c:a0:e3:5b:96:a4:d1:66:0c:75:f4:55:08:50:0e:
04:e9:55:53:ea:de:51:0f:8e:38:26:d3:dd:35:db:
ee:da:e6:5d:f5:41:d7:e8:07:50:70:1b:0e:85:c9:
b4:1a:0e:0c:7b:6e:9a:db:22:c7:8d:d6:20:45:5b:
95:dd:36:40:ac:0d:8d:43:ee:66:60:28:2f:83:b9:
ae:31:e4:ab:c1:ed:af:27:3a:5a:bd:b7:4e:b5:64:
73:a2:56:d1:c7:26:32:97:3d:69:e2:92:12:20:a4:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:53:9C:36:67:7D:CC:89:23:83:32:42:7C:75:D3:F3:76:F8:7F
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F1A195F284A511EAB3356318C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.229.44.0/24
Signature Algorithm: sha256WithRSAEncryption
39:44:76:7d:94:0e:29:d8:ad:a7:0c:52:9d:e0:55:bb:bd:ac:
95:4a:62:db:44:86:2a:4c:41:f5:85:c0:6c:7e:a9:29:39:5d:
c3:b8:0e:6c:5b:d3:5e:02:d1:8a:64:1d:f8:37:51:06:36:43:
77:aa:9a:0c:00:e4:14:b8:59:3e:ab:ae:b9:46:7a:ea:6e:eb:
40:8f:f7:78:27:93:51:35:9a:64:a5:7a:40:d1:9f:d8:c2:2a:
f6:fe:df:a0:ea:ba:34:b8:b0:90:84:5e:99:0e:4a:04:d1:da:
9d:b2:02:42:56:2b:77:48:ed:a0:e7:71:64:e6:f7:a6:94:85:
0a:89:0c:2a:61:1a:42:ac:e2:61:e1:16:b5:40:49:82:ae:f1:
73:1b:c3:04:39:e8:8f:b5:4b:01:bc:70:15:e5:56:fe:21:08:
c1:ec:b3:00:16:b4:ea:81:de:41:ba:22:fa:a5:f1:d1:54:b7:
53:20:4e:59:1a:a5:24:c5:57:df:44:aa:54:ec:27:68:17:24:
57:2d:98:1e:ed:6f:ef:71:a3:05:1f:08:8e:68:43:14:d8:55:
a9:a6:dc:27:03:92:a7:20:4a:bd:77:08:cf:ca:6f:4e:ea:76:
e3:8c:ed:9c:e2:71:65:02:aa:72:60:fe:49:43:04:c0:92:73:
c7:f1:4c:35
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjQxMjMxMTU1MzE1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc0MTM2Yi0wZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA01RbfDHqHdwCPS4MHLlOXqHeuHFBMJ4oPNte+DjhzuJwMSxXQ+FwMnk3rZ8g
mUhgJh4QDter+qOLqobbPx9irvHJnc5WvINDABB+HVx4R3OKo7FfH17pWrXGHjWh
jhPvqqlo5RbTRASOOx3x3ceaXIWoLssganrTcmY9hb1TvoASRynbql2LbHLZtv4I
pP+7+2ZidlJMoONblqTRZgx19FUIUA4E6VVT6t5RD444JtPdNdvu2uZd9UHX6AdQ
cBsOhcm0Gg4Me26a2yLHjdYgRVuV3TZArA2NQ+5mYCgvg7muMeSrwe2vJzpavbdO
tWRzolbRxyYylz1p4pISIKQ8bwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPr4U5w2
Z33MiSODMkJ8ddPzdvh/MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvRjFBMTk1RjI4
NEE1MTFFQUIzMzU2MzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAx5SwwDQYJKoZIhvcNAQELBQADggEBADlEdn2UDinYracM
Up3gVbu9rJVKYttEhipMQfWFwGx+qSk5XcO4Dmxb014C0YpkHfg3UQY2Q3eqmgwA
5BS4WT6rrrlGeupu60CP93gnk1E1mmSlekDRn9jCKvb+36DqujS4sJCEXpkOSgTR
2p2yAkJWK3dI7aDncWTm96aUhQqJDCphGkKs4mHhFrVASYKu8XMbwwQ56I+1SwG8
cBXlVv4hCMHsswAWtOqB3kG6Ivql8dFUt1MgTlkapSTFV99EqlTsJ2gXJFctmB7t
b+9xowUfCI5oQxTYVamm3CcDkqcgSr13CM/Kb07qduOM7ZzicWUCqnJg/klDBMCS
c8fxTDU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:16:38 2025 by rpki-client