Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa
File: D2677928DD9811EDB2BBBA09C4F9AE02.roa (raw, json)
Hash identifier: YZA05NbdXQqTTqp/56l0zqv1K93ANRNuBAfVzKzDIX8=
Subject key identifier: 88:F7:5E:7D:AE:7D:8D:5C:15:7B:83:AB:B1:03:DF:01:33:F0:7F:46
Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial: D6
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa
Signing time: Fri 03 May 2024 06:49:38 +0000
ROA not before: Fri 03 May 2024 06:49:38 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 116.197.148.0/24 maxlen: 24
116.197.150.0/24 maxlen: 24
116.197.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Validity
Not Before: May 3 06:49:38 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66348902-aaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:b1:bd:54:21:55:d6:62:63:48:3f:57:2f:
69:f7:25:83:ea:d0:d5:cf:d3:bb:80:5d:b1:35:89:
62:02:65:ac:84:0c:ba:ea:e7:1a:6b:f1:18:8b:80:
32:52:5f:35:8d:c4:76:98:98:35:a9:47:3e:f8:6c:
ab:80:58:2b:ba:02:16:76:89:c9:d8:43:a2:1a:88:
f7:1a:f1:ee:d6:bc:c4:a6:56:bc:e4:9c:cf:83:4f:
f4:c8:49:66:ae:85:6d:86:e6:1a:b4:c7:26:f3:5e:
9b:c5:c5:b1:2a:89:1b:7b:94:c7:fb:17:ac:3a:6c:
ad:a0:52:16:f7:c9:0d:ab:70:47:c0:95:b5:17:ec:
e7:ab:4f:6e:98:ab:76:a3:77:ef:68:b6:d2:fa:d9:
ee:65:71:58:19:22:3b:bc:41:b8:1a:12:1d:7d:8a:
93:d1:1f:0d:9f:55:1d:4c:95:2e:2c:39:41:93:99:
09:8f:00:5a:1d:4d:01:0e:cf:57:a5:1c:b2:9a:45:
3d:ab:13:9f:46:8f:db:21:b1:85:18:28:d3:8f:ea:
28:59:29:57:02:c3:d4:77:3e:56:73:6f:dd:d6:ad:
5a:5c:aa:fa:be:cb:70:3d:6d:41:f5:3e:b0:3b:31:
1f:56:e6:a2:94:22:41:e5:e3:3e:71:0b:c6:f9:33:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F7:5E:7D:AE:7D:8D:5C:15:7B:83:AB:B1:03:DF:01:33:F0:7F:46
X509v3 Authority Key Identifier:
keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.197.148.0/24
116.197.150.0/23
Signature Algorithm: sha256WithRSAEncryption
39:17:bc:fe:34:3a:8a:66:ed:10:72:e9:d7:9f:5d:1f:90:ca:
28:eb:ab:7d:c1:d9:27:b3:4f:fc:ef:7a:7c:d2:b2:c8:8c:1c:
6c:79:dc:95:06:75:83:74:72:1c:04:ca:74:75:96:3a:9e:4f:
4d:26:94:25:7e:52:01:c5:5f:0c:e5:01:ed:d1:7b:a0:ad:b2:
fb:81:56:a1:e6:1c:f2:e6:c2:24:f7:f2:de:b7:89:b4:54:1e:
5e:36:e4:41:e3:fd:d4:73:5d:b8:7c:ce:83:e2:91:92:7b:92:
de:75:63:b3:83:ba:81:e2:76:26:4a:69:08:8a:4b:42:8f:2a:
c9:6b:8f:69:38:ae:c4:11:c1:cb:78:6c:6d:d9:b9:d1:bd:e4:
b1:fd:37:50:fe:e3:be:54:0f:21:cd:e4:0a:d0:d4:bf:66:13:
2b:6f:12:ed:9b:9c:73:dd:6d:a9:4b:a0:eb:7b:cc:24:f2:a4:
39:15:87:d8:aa:66:2c:32:1b:6c:e5:7c:6e:b6:99:9c:e0:a2:
eb:13:6e:4c:9a:88:50:a6:05:1c:ba:a2:63:fb:c4:fb:7d:8d:
63:16:1c:76:af:17:cf:e8:df:8a:7c:c3:a3:78:f3:04:d2:7a:
6c:e9:6c:f6:d4:d0:d4:5b:cc:c3:fa:ec:35:80:6f:87:54:88:
96:c7:d2:92
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY2NEYxMTAvBgNVBAUTKEQ5OTAyQzRFOTQ3MkM3QUQ1MDgyODEyRkE3RDA3NzE0
NkFCN0NCOUMwHhcNMjQwNTAzMDY0OTM4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM0ODkwMi1hYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1oixvVQhVdZiY0g/Vy9p9yWD6tDVz9O7gF2xNYliAmWshAy66ucaa/EYi4Ay
Ul81jcR2mJg1qUc++GyrgFgrugIWdonJ2EOiGoj3GvHu1rzEpla85JzPg0/0yElm
roVthuYatMcm816bxcWxKokbe5TH+xesOmytoFIW98kNq3BHwJW1F+znq09umKt2
o3fvaLbS+tnuZXFYGSI7vEG4GhIdfYqT0R8Nn1UdTJUuLDlBk5kJjwBaHU0BDs9X
pRyymkU9qxOfRo/bIbGFGCjTj+ooWSlXAsPUdz5Wc2/d1q1aXKr6vstwPW1B9T6w
OzEfVuailCJB5eM+cQvG+TOJbQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIj3Xn2u
fY1cFXuDq7ED3wEz8H9GMB8GA1UdIwQYMBaAFNmQLE6UcsetUIKBL6fQdxRqt8uc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY0Ri8xRTA4NTRBRURE
N0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2MVFnb0V2cDlCM0ZHcTN5
NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJaQXNUcFJ5eDYxUWdvRXZwOUIzRkdxM3k1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzY2NEYvMUUwODU0QUVERDdEMTFFRDkxQTA0NjREQzRGOUFFMDIvRDI2Nzc5MjhE
RDk4MTFFREIyQkJCQTA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB0xZQDBAF0xZYwDQYJKoZIhvcNAQELBQADggEBADkXvP40
Oopm7RBy6defXR+Qyijrq33B2SezT/zvenzSssiMHGx53JUGdYN0chwEynR1ljqe
T00mlCV+UgHFXwzlAe3Re6CtsvuBVqHmHPLmwiT38t63ibRUHl425EHj/dRzXbh8
zoPikZJ7kt51Y7ODuoHidiZKaQiKS0KPKslrj2k4rsQRwct4bG3ZudG95LH9N1D+
475UDyHN5ArQ1L9mEytvEu2bnHPdbalLoOt7zCTypDkVh9iqZiwyG2zlfG62mZzg
ousTbkyaiFCmBRy6omP7xPt9jWMWHHavF8/o34p8w6N48wTSemzpbPbU0NRbzMP6
7DWAb4dUiJbH0pI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:50 2025 by rpki-client