Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/AC205A92B13011EFB45E6B3BC4F9AE02.roa
File: AC205A92B13011EFB45E6B3BC4F9AE02.roa (raw, json)
Hash identifier: uKwkZfPxaBZe+NEWyqJ10DRoEbJiI4u5JFaaWffNJlI=
Subject key identifier: 6C:07:61:42:09:6E:9F:F5:31:72:61:67:43:13:A9:63:18:8A:E3:C3
Certificate issuer: /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Certificate serial: 02
Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/AC205A92B13011EFB45E6B3BC4F9AE02.roa
Signing time: Tue 03 Dec 2024 04:40:08 +0000
ROA not before: Tue 03 Dec 2024 04:40:07 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 152851
IP address blocks: 202.58.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Validity
Not Before: Dec 3 04:40:07 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=674e8ba7-5c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:ab:f7:e3:d4:38:55:20:42:09:88:18:5c:
16:00:7b:55:2c:af:53:cc:79:64:d7:ad:c3:e8:f1:
55:85:b0:a9:2a:dc:c5:45:4d:1c:9f:01:76:33:62:
b5:25:1e:6e:ce:ee:4b:c5:8f:a2:9c:34:e3:cf:24:
91:24:33:dc:06:4d:63:19:49:80:b5:69:23:2f:0c:
75:3b:06:54:e0:bf:40:a2:d3:af:f4:a1:d3:65:b2:
09:d1:59:1e:17:2a:0a:05:78:f0:65:ff:72:aa:41:
46:2f:d9:cb:95:97:65:62:ff:3b:4a:bf:42:f9:27:
c2:fe:24:6b:01:d4:1b:e7:90:ad:14:94:00:ed:bc:
5b:31:bb:66:c3:a9:ec:a4:1d:24:fb:aa:65:6c:c8:
af:68:d3:85:ad:ec:2e:c2:00:5e:81:9b:e8:17:9d:
43:4a:6c:f3:da:15:2c:22:2d:4e:67:89:df:a8:a8:
1d:9f:f1:25:53:21:8b:7a:20:6a:1c:a5:df:ee:ee:
77:bc:85:05:6b:09:43:3a:6e:f4:20:f2:22:1f:13:
6a:3c:1d:61:7b:62:e7:2e:d6:c3:75:e4:9d:52:c9:
a3:bb:75:81:63:c1:0f:07:49:ae:78:ac:ff:0c:68:
67:75:35:1a:d5:a7:da:d1:22:6e:73:d1:01:6d:93:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:07:61:42:09:6E:9F:F5:31:72:61:67:43:13:A9:63:18:8A:E3:C3
X509v3 Authority Key Identifier:
keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/AC205A92B13011EFB45E6B3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.58.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:86:e4:69:24:17:0a:c8:d7:88:fd:fb:44:69:93:f1:fc:c6:
99:ae:b9:1f:50:48:2d:0f:ee:96:35:f0:2b:0e:c8:3a:4a:74:
8f:ae:a6:a7:3b:ca:1e:ef:a0:db:58:10:2c:a5:fe:4d:7d:dc:
70:5e:35:b4:e2:27:e2:28:55:6c:8c:8d:67:9a:22:da:f2:06:
6e:42:51:29:6a:ad:b8:23:b0:63:f1:73:88:c1:8d:94:b1:61:
b6:8e:c4:8a:99:e4:73:16:61:fc:77:3b:d2:4a:4a:35:1b:98:
21:26:e1:b8:f0:b4:1f:28:0f:a2:4a:9f:b6:bd:ed:3c:fd:58:
cd:6e:30:a4:f3:28:b9:5c:46:2b:e6:1d:cb:b6:41:31:51:17:
33:0d:16:e7:14:04:98:29:de:95:1d:9b:19:ab:39:f5:6c:e6:
99:8f:54:0e:b5:69:b8:3a:69:80:d7:96:3e:25:d2:89:f3:39:
86:b0:cb:68:77:7e:70:58:dc:2e:37:d7:2a:b1:5b:79:3a:ad:
cb:d3:a8:ff:fe:dd:b4:68:39:26:aa:54:37:e1:68:79:2e:81:
ec:ab:58:13:6d:a7:fc:04:06:bf:2f:90:d8:e5:4a:8d:8a:13:
19:58:b0:e9:ff:55:c2:a8:c3:ae:d7:1f:a7:6d:cc:99:f1:ad:
34:80:d9:7b
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTI5RDExMC8GA1UEBRMoMzU4NDFBRTMzREY2OTMxMjAxNDA2Nzk4QUU2NEZDQzA4
N0Y1QTFFNTAeFw0yNDEyMDMwNDQwMDdaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3NGU4YmE3LTVjNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYM6v349Q4VSBCCYgYXBYAe1Usr1PMeWTXrcPo8VWFsKkq3MVFTRyfAXYzYrUl
Hm7O7kvFj6KcNOPPJJEkM9wGTWMZSYC1aSMvDHU7BlTgv0Ci06/0odNlsgnRWR4X
KgoFePBl/3KqQUYv2cuVl2Vi/ztKv0L5J8L+JGsB1BvnkK0UlADtvFsxu2bDqeyk
HST7qmVsyK9o04Wt7C7CAF6Bm+gXnUNKbPPaFSwiLU5nid+oqB2f8SVTIYt6IGoc
pd/u7ne8hQVrCUM6bvQg8iIfE2o8HWF7Yucu1sN15J1SyaO7dYFjwQ8HSa54rP8M
aGd1NRrVp9rRIm5z0QFtkzVnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUbAdhQglu
n/UxcmFnQxOpYxiK48MwHwYDVR0jBBgwFoAUNYQa4z32kxIBQGeYrmT8wIf1oeUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MjlELzZFMDUwRUY2QjEz
MDExRUZBQTBCQjUzQUM0RjlBRTAyL05ZUWE0ejMya3hJQlFHZVlybVQ4d0lmMW9l
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTllRYTR6MzJreElCUUdlWXJtVDh3SWYxb2VVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTI5RC82RTA1MEVGNkIxMzAxMUVGQUEwQkI1M0FDNEY5QUUwMi9BQzIwNUE5MkIx
MzAxMUVGQjQ1RTZCM0JDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMo64zANBgkqhkiG9w0BAQsFAAOCAQEAqIbkaSQXCsjXiP37
RGmT8fzGma65H1BILQ/uljXwKw7IOkp0j66mpzvKHu+g21gQLKX+TX3ccF41tOIn
4ihVbIyNZ5oi2vIGbkJRKWqtuCOwY/FziMGNlLFhto7EipnkcxZh/Hc70kpKNRuY
ISbhuPC0HygPokqftr3tPP1YzW4wpPMouVxGK+Ydy7ZBMVEXMw0W5xQEmCnelR2b
Gas59WzmmY9UDrVpuDppgNeWPiXSifM5hrDLaHd+cFjcLjfXKrFbeTqty9Oo//7d
tGg5JqpUN+FoeS6B7KtYE22n/AQGvy+Q2OVKjYoTGViw6f9VwqjDrtcfp23MmfGt
NIDZew==
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:43:28 2025 by rpki-client