Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa
File: 6FB1CD6EE04211EC8F5BA126C4F9AE02.roa (raw, json)
Hash identifier: SJAJGhVgBLgGlz5ztm9apaeOd+qOZsCab0ecM29rnUs=
Subject key identifier: E3:22:6A:37:AE:B1:6C:85:73:C7:2F:E9:27:63:20:6A:56:2B:88:02
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0512
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:33:43 +0000
ROA not before: Wed 31 Jul 2024 02:33:43 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 38444
IP address blocks: 203.146.62.0/23 maxlen: 23
203.146.62.0/24 maxlen: 24
203.146.63.0/24 maxlen: 24
203.170.228.0/24 maxlen: 24
203.170.229.0/24 maxlen: 24
203.170.230.0/24 maxlen: 24
203.170.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Jul 31 02:33:43 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a9a287-25e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:b3:4d:28:49:e5:cd:13:cc:c9:ff:e7:a5:
9e:4d:a5:b2:08:27:91:8f:2a:c3:b8:97:72:68:f1:
38:30:1f:fa:19:67:e8:40:d0:1d:4d:25:68:ab:5f:
e7:bc:00:da:32:f2:3e:45:1f:f5:64:7c:72:b2:a4:
aa:b0:47:c1:4b:b6:9a:38:c6:a9:32:02:26:f3:3a:
b6:f7:15:ef:2c:a8:b3:b9:c1:fc:38:ad:e8:48:2e:
af:9b:27:75:57:2e:de:e1:dc:f7:dc:69:ac:a9:d7:
02:b9:2e:fe:a7:44:d7:48:f4:aa:27:27:25:ad:b0:
e1:5c:56:2e:d1:60:1a:99:81:99:81:87:cb:3c:97:
33:5b:79:ad:24:d0:59:ab:a1:01:57:65:94:b0:37:
a0:36:39:8f:0c:0f:af:50:a4:c4:3d:66:2b:59:4f:
40:58:ce:cb:af:2a:b4:20:f6:c5:94:19:d4:84:9d:
25:10:d0:8b:26:f7:61:9c:cf:78:33:64:b2:71:d1:
50:f6:2d:92:62:ae:28:b6:5a:5f:1f:c0:ae:75:8e:
3d:70:a0:5e:55:06:26:22:5b:70:8d:4e:ad:35:46:
42:77:ed:cf:ad:bf:47:89:af:ea:0a:e0:d8:42:e3:
8b:25:cf:fb:8e:bd:1f:87:79:9a:63:c9:e9:fb:fd:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:22:6A:37:AE:B1:6C:85:73:C7:2F:E9:27:63:20:6A:56:2B:88:02
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.146.62.0/23
203.170.228.0/22
Signature Algorithm: sha256WithRSAEncryption
43:54:49:b9:83:10:fe:17:c5:b6:a5:9a:e4:69:3f:9c:12:c4:
e2:8c:22:47:f5:82:a0:d3:4e:44:3c:e0:46:e1:db:67:26:ed:
8c:c8:50:c6:95:24:ef:74:c3:11:4e:fe:5e:d6:fa:26:50:99:
15:11:f5:a1:67:98:f9:48:3f:71:49:ab:e4:c1:d5:2a:86:9f:
29:67:81:a7:44:8b:da:af:39:fe:ae:79:d5:30:69:a1:57:80:
e1:20:bd:e4:cb:1c:69:b7:66:5e:7d:2c:12:b7:6e:8b:fa:ab:
fc:f4:79:7e:9c:86:b9:ec:11:20:40:3b:f5:ff:17:d3:35:69:
d5:d4:67:69:5c:cf:b2:1e:0a:e6:e4:d0:30:e2:48:84:db:ab:
dd:98:56:89:87:23:10:bd:c8:98:61:b2:91:45:a7:5f:c8:90:
ca:d1:d5:ac:d4:59:cf:64:af:c2:55:f0:4b:2e:d5:d1:58:09:
01:66:37:80:54:c2:39:b8:17:78:35:96:64:0d:e0:37:f4:ea:
42:81:2b:70:f7:12:77:1d:dc:15:2b:ea:d8:f3:c7:93:05:24:
63:e9:bb:6a:3b:96:bf:d0:c2:1c:3d:dc:61:ee:6d:1b:a1:5e:
ae:3d:d6:87:4b:6f:a8:87:31:d7:c7:7e:bd:10:8c:ce:32:87:
a7:ef:8d:86
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjQwNzMxMDIzMzQzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5YTI4Ny0yNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+uzTShJ5c0TzMn/56WeTaWyCCeRjyrDuJdyaPE4MB/6GWfoQNAdTSVoq1/n
vADaMvI+RR/1ZHxysqSqsEfBS7aaOMapMgIm8zq29xXvLKizucH8OK3oSC6vmyd1
Vy7e4dz33GmsqdcCuS7+p0TXSPSqJyclrbDhXFYu0WAamYGZgYfLPJczW3mtJNBZ
q6EBV2WUsDegNjmPDA+vUKTEPWYrWU9AWM7Lryq0IPbFlBnUhJ0lENCLJvdhnM94
M2SycdFQ9i2SYq4otlpfH8CudY49cKBeVQYmIltwjU6tNUZCd+3Prb9Hia/qCuDY
QuOLJc/7jr0fh3maY8np+/0STwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOMiajeu
sWyFc8cv6SdjIGpWK4gCMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvNkZCMUNENkVF
MDQyMTFFQzhGNUJBMTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAHLkj4DBALLquQwDQYJKoZIhvcNAQELBQADggEBAENUSbmD
EP4XxbalmuRpP5wSxOKMIkf1gqDTTkQ84Ebh22cm7YzIUMaVJO90wxFO/l7W+iZQ
mRUR9aFnmPlIP3FJq+TB1SqGnylngadEi9qvOf6uedUwaaFXgOEgveTLHGm3Zl59
LBK3bov6q/z0eX6chrnsESBAO/X/F9M1adXUZ2lcz7IeCubk0DDiSITbq92YVomH
IxC9yJhhspFFp1/IkMrR1azUWc9kr8JV8Esu1dFYCQFmN4BUwjm4F3g1lmQN4Df0
6kKBK3D3Encd3BUr6tjzx5MFJGPpu2o7lr/Qwhw93GHubRuhXq491odLb6iHMdfH
fr0QjM4yh6fvjYY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:11 2025 by rpki-client