Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/D4FD4D5237DE11EEA2885B71C4F9AE02.roa
File: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (raw, json)
Hash identifier: 5PUPdZocW4Cg+nwVe6RqMulB4A03ZA3inNSD1N7Qeqc=
Subject key identifier: AE:3E:68:D8:B1:4E:C5:B7:4D:B5:C7:CB:53:54:44:F1:03:38:04:0B
Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Certificate serial: 0624
Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/D4FD4D5237DE11EEA2885B71C4F9AE02.roa
Signing time: Sat 14 Dec 2024 22:41:54 +0000
ROA not before: Sat 14 Dec 2024 22:41:54 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 9723
IP address blocks: 121.52.192.0/22 maxlen: 22
121.52.196.0/23 maxlen: 23
121.52.198.0/24 maxlen: 24
121.52.199.0/24 maxlen: 24
202.74.64.0/21 maxlen: 21
2403:6900:c000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Validity
Not Before: Dec 14 22:41:54 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=675e09b2-38aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:0a:07:1b:ee:6d:c3:1b:28:45:43:00:9f:
8d:57:4b:99:87:cd:7b:73:32:cc:31:18:5c:ca:36:
30:88:88:3b:ae:03:77:fd:16:8c:9c:5c:6a:8a:8f:
03:a0:7b:f5:72:c8:3a:8d:0f:b6:0d:f7:3d:71:86:
5c:68:ac:c7:15:5c:60:ca:6a:04:b2:06:32:80:69:
72:e6:58:e1:c3:4a:b7:85:4b:72:ec:ce:9e:56:dc:
12:75:fb:6d:8d:cc:05:6e:9d:d0:28:47:24:e6:f9:
c6:b0:c8:fe:9f:f8:a5:4d:22:39:9a:8f:31:67:87:
05:e1:8e:c9:6f:67:8c:f3:b3:e1:81:fe:5f:b3:e9:
d9:96:4f:cc:ac:c8:41:7a:fc:69:95:d5:80:b6:10:
f5:99:d0:5c:3a:02:34:0c:04:13:11:a0:d8:d1:88:
d4:2c:42:aa:cf:76:bd:0b:23:92:86:f4:17:9f:03:
86:e3:cc:9b:ff:ae:e6:9b:d4:8f:c1:61:2e:d1:e4:
65:da:87:b9:f5:24:9b:bb:08:d0:44:ab:8c:15:43:
38:b9:67:28:4f:52:aa:1f:80:db:31:90:0a:ee:93:
10:e4:96:b9:f1:24:21:07:df:6b:b0:b1:eb:f4:4a:
61:68:e9:db:e3:4e:b7:ee:11:8c:26:80:79:8a:83:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3E:68:D8:B1:4E:C5:B7:4D:B5:C7:CB:53:54:44:F1:03:38:04:0B
X509v3 Authority Key Identifier:
keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/D4FD4D5237DE11EEA2885B71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.52.192.0/21
202.74.64.0/21
IPv6:
2403:6900:c000::/36
Signature Algorithm: sha256WithRSAEncryption
4f:13:8d:c4:5d:8c:27:d7:b9:15:ae:e1:64:92:58:8c:18:99:
a0:48:c9:96:1d:6b:6a:5d:c0:3c:8c:2e:67:6d:9f:e8:08:37:
aa:da:35:af:93:cd:c4:07:8b:27:21:e1:ee:f2:d1:ed:5b:e2:
12:7c:ee:b9:52:44:9a:53:de:c5:07:53:c4:48:a6:21:94:94:
6f:c1:2e:96:14:c0:48:1a:3c:0a:82:5d:46:58:91:f8:ad:d5:
38:c2:db:9a:f5:50:4d:51:2b:fe:88:f9:6d:5c:3f:17:b9:b4:
57:d3:0d:0e:d1:1b:5c:3e:0e:d3:e6:d3:69:0e:7d:ad:8f:05:
1e:2c:ae:e9:9f:4f:ad:a7:70:3a:70:a6:6e:f5:06:bd:13:75:
cd:bc:97:a2:59:f7:23:c3:ff:37:66:7b:2a:8f:61:e3:d8:07:
c9:cf:11:dc:9c:99:97:8b:95:14:65:62:c6:01:b0:1b:e7:42:
e8:68:72:1e:12:ba:92:34:c6:7c:07:38:45:bd:26:9b:99:c4:
69:eb:2f:aa:28:60:ca:fc:ef:82:4e:a4:26:1d:0a:34:25:72:
7b:04:eb:4e:0d:d1:b2:d0:ef:93:ff:9b:b4:13:c8:1f:4b:d7:
61:ce:c6:45:25:66:0e:40:74:74:e5:7d:1e:7c:15:e1:2a:63:
bb:8a:02:ad
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz
M0I5MzkyQTcwHhcNMjQxMjE0MjI0MTU0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NzVlMDliMi0zOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqaAKBxvubcMbKEVDAJ+NV0uZh817czLMMRhcyjYwiIg7rgN3/RaMnFxqio8D
oHv1csg6jQ+2Dfc9cYZcaKzHFVxgymoEsgYygGly5ljhw0q3hUty7M6eVtwSdftt
jcwFbp3QKEck5vnGsMj+n/ilTSI5mo8xZ4cF4Y7Jb2eM87Phgf5fs+nZlk/MrMhB
evxpldWAthD1mdBcOgI0DAQTEaDY0YjULEKqz3a9CyOShvQXnwOG48yb/67mm9SP
wWEu0eRl2oe59SSbuwjQRKuMFUM4uWcoT1KqH4DbMZAK7pMQ5Ja58SQhB99rsLHr
9EphaOnb40637hGMJoB5ioPMTwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFK4+aNix
TsW3TbXHy1NURPEDOAQLMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw
RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkNCMkEvRTAxQzdBODQ5MEUwMTFFQkExMDU4NzFGQzRGOUFFMDIvRDRGRDRENTIz
N0RFMTFFRUEyODg1QjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E
JjAkMBIEAgABMAwDBAN5NMADBAPKSkAwDgQCAAIwCAMGBCQDaQDAMA0GCSqGSIb3
DQEBCwUAA4IBAQBPE43EXYwn17kVruFkkliMGJmgSMmWHWtqXcA8jC5nbZ/oCDeq
2jWvk83EB4snIeHu8tHtW+ISfO65UkSaU97FB1PESKYhlJRvwS6WFMBIGjwKgl1G
WJH4rdU4wtua9VBNUSv+iPltXD8XubRX0w0O0RtcPg7T5tNpDn2tjwUeLK7pn0+t
p3A6cKZu9Qa9E3XNvJeiWfcjw/83Znsqj2Hj2AfJzxHcnJmXi5UUZWLGAbAb50Lo
aHIeErqSNMZ8BzhFvSabmcRp6y+qKGDK/O+CTqQmHQo0JXJ7BOtODdGy0O+T/5u0
E8gfS9dhzsZFJWYOQHR05X0efBXhKmO7igKt
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:13 2025 by rpki-client