Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EB6B9956690E11EF9396CC48C4F9AE02.roa
File: EB6B9956690E11EF9396CC48C4F9AE02.roa (raw, json)
Hash identifier: m1fb1egRrU9+d8hQvMjnw8fgUgdDVqcZIQ0pMpm6ljc=
Subject key identifier: 28:39:EF:60:09:F5:55:DC:1D:CA:26:7A:93:66:D9:6E:D0:3B:20:C5
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 02EB
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EB6B9956690E11EF9396CC48C4F9AE02.roa
Signing time: Wed 27 Nov 2024 01:35:07 +0000
ROA not before: Wed 27 Nov 2024 01:35:07 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 24190
IP address blocks: 119.63.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747 (0x2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Nov 27 01:35:07 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6746774a-005b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:5b:bb:f3:18:29:5d:61:09:ae:da:fe:52:
e4:c9:71:c9:62:82:f6:f3:a5:08:25:0d:5f:3f:5b:
1b:65:71:6e:a9:74:94:d1:9c:1c:d6:e1:bb:48:dc:
52:03:d1:c2:41:3f:47:95:0f:d7:d8:de:2b:b8:a4:
fb:72:a7:b6:63:75:ef:f0:01:65:00:36:bd:f6:c0:
c0:79:0f:cc:f5:a0:91:17:73:64:ba:1a:fa:61:3d:
91:44:fb:bf:e0:cb:5e:00:39:9b:c1:aa:6c:95:bd:
6b:6b:d0:6b:cb:eb:a5:25:6a:69:b9:dc:05:63:27:
42:ea:00:d9:9a:3f:b6:d0:a9:d2:9a:19:bc:3b:bd:
09:49:26:66:6d:6a:ef:cd:9f:60:7a:b9:62:84:a0:
c2:e1:d2:23:1b:37:71:4e:68:80:bf:ef:e2:8d:51:
08:96:26:f6:da:1d:88:5b:e4:d0:f9:56:84:27:15:
40:08:30:19:77:83:3f:a1:23:d8:aa:70:2d:78:c5:
0b:5a:04:cf:c0:0f:6b:b7:ff:ec:50:a7:c2:8c:94:
44:e8:f8:75:0c:62:53:cd:8b:65:cc:64:8e:97:76:
33:07:ed:47:e3:eb:07:c0:21:27:31:a8:9a:69:1e:
44:54:c4:70:39:e5:af:47:b7:66:d7:64:77:c6:39:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:EF:60:09:F5:55:DC:1D:CA:26:7A:93:66:D9:6E:D0:3B:20:C5
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EB6B9956690E11EF9396CC48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.63.74.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:1a:1a:bf:21:cc:c2:31:e5:8b:ad:b6:e5:d5:a6:c2:69:74:
cd:28:8d:8a:46:09:ba:5a:82:22:4d:36:26:6a:64:50:7b:53:
70:24:a6:31:92:ec:70:28:a5:f0:da:b1:38:ae:7f:59:fa:ba:
2c:7c:99:64:39:a6:34:53:a9:69:a8:67:31:ec:35:3a:f0:ab:
85:06:b5:ae:55:9b:cc:9d:f8:fb:13:02:be:09:81:e6:e3:1c:
ec:06:c3:eb:a1:2f:be:b7:fb:f1:e5:84:23:c8:ba:cc:f8:57:
dd:75:5c:33:7c:80:33:80:63:2c:9f:a7:6b:43:48:bb:7e:ee:
d5:66:25:36:61:20:d4:d3:41:81:0a:f7:40:e8:fa:79:d4:53:
19:da:4b:42:3f:72:cc:7b:65:cd:df:94:a2:2c:5e:db:24:62:
8d:e0:65:06:4e:e6:21:3a:5e:f2:ab:e2:4e:0f:d1:6d:fe:c2:
dd:b3:8e:2b:40:e7:56:ab:ae:51:07:fc:08:c9:01:76:c0:1c:
b2:91:69:b8:c5:06:f0:36:21:ae:4b:aa:a1:0f:06:c8:a4:4e:
ff:2a:cf:8e:e5:6c:76:28:3a:43:6b:26:2f:de:d0:14:71:31:
19:e6:57:64:12:85:d7:43:31:c4:7a:86:17:34:55:89:26:c0:
b5:f2:07:1b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG
NUMyMDE1NzAwHhcNMjQxMTI3MDEzNTA3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQ2Nzc0YS0wMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0Nbu/MYKV1hCa7a/lLkyXHJYoL286UIJQ1fP1sbZXFuqXSU0Zwc1uG7SNxS
A9HCQT9HlQ/X2N4ruKT7cqe2Y3Xv8AFlADa99sDAeQ/M9aCRF3Nkuhr6YT2RRPu/
4MteADmbwapslb1ra9Bry+ulJWppudwFYydC6gDZmj+20KnSmhm8O70JSSZmbWrv
zZ9gerlihKDC4dIjGzdxTmiAv+/ijVEIlib22h2IW+TQ+VaEJxVACDAZd4M/oSPY
qnAteMULWgTPwA9rt//sUKfCjJRE6Ph1DGJTzYtlzGSOl3YzB+1H4+sHwCEnMaia
aR5EVMRwOeWvR7dm12R3xjmHbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCg572AJ
9VXcHcomepNm2W7QOyDFMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC
OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvRUI2Qjk5NTY2
OTBFMTFFRjkzOTZDQzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB3P0owDQYJKoZIhvcNAQELBQADggEBAI0aGr8hzMIx5Yut
tuXVpsJpdM0ojYpGCbpagiJNNiZqZFB7U3AkpjGS7HAopfDasTiuf1n6uix8mWQ5
pjRTqWmoZzHsNTrwq4UGta5Vm8yd+PsTAr4JgebjHOwGw+uhL763+/HlhCPIusz4
V911XDN8gDOAYyyfp2tDSLt+7tVmJTZhINTTQYEK90Do+nnUUxnaS0I/csx7Zc3f
lKIsXtskYo3gZQZO5iE6XvKr4k4P0W3+wt2zjitA51arrlEH/AjJAXbAHLKRabjF
BvA2Ia5LqqEPBsikTv8qz47lbHYoOkNrJi/e0BRxMRnmV2QShddDMcR6hhc0VYkm
wLXyBxs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:43 2025 by rpki-client