Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa
File: 658A332E5C0311E999AF9478C4F9AE02.roa (raw, json)
Hash identifier: sps6OZoL5QmmM3ZpPmWyZ0iMnHwS3c4js0f2ItWVO3c=
Subject key identifier: 0D:2F:27:18:BE:0E:82:2B:4C:6A:A9:3A:61:CA:31:35:A8:82:8A:E6
Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial: 103C
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa
Signing time: Mon 02 Dec 2024 17:35:45 +0000
ROA not before: Mon 02 Dec 2024 17:35:45 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 4773
IP address blocks: 129.126.208.0/24 maxlen: 24
129.126.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4156 (0x103c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Validity
Not Before: Dec 2 17:35:45 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674deff1-7db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:94:e7:5c:70:5d:da:a7:02:77:7b:be:f2:fd:
9f:99:d4:f4:b3:fb:cd:1b:d8:54:c7:56:a7:7a:a2:
2e:b6:6f:b9:ca:78:46:c1:38:23:2c:40:ed:cb:00:
6f:02:7a:9f:18:85:90:df:77:dd:3b:d2:3a:2a:12:
a9:7c:12:58:9e:a9:53:5c:ef:0a:d1:50:78:3c:ba:
dc:1a:eb:11:c7:50:4d:cd:bc:da:4f:f2:57:b3:27:
9b:59:71:9c:d4:be:bf:07:4d:4b:d1:ac:48:5f:7f:
42:63:2a:6c:5b:4c:ff:30:61:13:cd:fd:5d:db:28:
67:32:ec:51:f9:0a:2d:a1:83:1f:5d:52:02:ee:1f:
2b:72:81:24:d9:5f:ec:86:89:fa:3f:b5:24:54:54:
41:38:d3:12:62:f7:72:a1:ac:cd:0d:26:79:08:fe:
d9:2a:82:f2:81:7b:21:aa:97:76:6f:e9:0e:00:9f:
2d:33:31:55:03:01:94:f6:24:c7:f9:0c:4e:eb:74:
9c:b9:f8:5f:f3:44:c4:e6:f6:85:c8:c2:81:fc:e2:
b7:4c:c8:b8:de:54:f3:d2:ea:f7:84:40:57:d1:70:
8c:b4:61:79:5d:48:a5:89:14:01:1e:a1:dc:d9:77:
3d:ea:9f:aa:11:66:89:bc:e8:cc:2f:6a:82:03:3d:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2F:27:18:BE:0E:82:2B:4C:6A:A9:3A:61:CA:31:35:A8:82:8A:E6
X509v3 Authority Key Identifier:
keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.126.208.0/23
Signature Algorithm: sha256WithRSAEncryption
03:a4:a3:af:99:7f:fd:5d:43:b7:5b:5b:ac:28:3e:54:ff:9b:
fd:8a:3d:3f:de:73:3e:e6:d8:a5:0c:f3:5e:36:98:b8:37:44:
b9:b4:dc:d2:b1:5b:0e:e1:d4:dd:6b:cc:59:3c:41:df:89:2e:
89:09:45:44:a5:f5:49:24:7f:55:1f:53:1a:f2:7a:22:82:be:
90:31:55:cb:56:94:ba:9c:6e:e3:2e:48:2e:07:75:4d:1e:88:
88:b5:77:3c:fa:83:41:ea:48:56:bc:d3:73:ba:6f:76:3b:03:
0b:bf:f6:29:46:39:c1:2e:b7:77:01:1d:02:53:b8:48:7d:6f:
b7:65:b2:0f:6e:da:a8:32:88:b0:6f:99:4e:bc:2a:2f:73:99:
12:2c:8b:7d:ec:85:09:24:6b:19:ee:d1:28:0f:11:5c:4e:76:
83:ad:a1:ae:28:cc:76:f6:fb:40:d2:d5:b5:b4:63:98:7e:50:
4b:b6:64:d4:11:9f:1e:b2:08:61:f3:ac:58:a6:e5:06:2e:2f:
b2:16:73:36:4f:6b:df:4b:9e:40:e9:65:bd:72:18:c7:e9:ad:
c7:4b:fc:c0:a6:83:85:2d:ba:38:d1:e7:dc:ba:62:b2:e5:ff:
59:e0:52:9a:ee:da:64:1c:8a:f3:12:7a:40:75:30:8d:6d:68:
56:5a:91:8a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF
OEQ3QzY5QjgwHhcNMjQxMjAyMTczNTQ1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRkZWZmMS03ZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5JTnXHBd2qcCd3u+8v2fmdT0s/vNG9hUx1aneqIutm+5ynhGwTgjLEDtywBv
AnqfGIWQ33fdO9I6KhKpfBJYnqlTXO8K0VB4PLrcGusRx1BNzbzaT/JXsyebWXGc
1L6/B01L0axIX39CYypsW0z/MGETzf1d2yhnMuxR+QotoYMfXVIC7h8rcoEk2V/s
hon6P7UkVFRBONMSYvdyoazNDSZ5CP7ZKoLygXshqpd2b+kOAJ8tMzFVAwGU9iTH
+QxO63Scufhf80TE5vaFyMKB/OK3TMi43lTz0ur3hEBX0XCMtGF5XUiliRQBHqHc
2Xc96p+qEWaJvOjML2qCAz0XeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA0vJxi+
DoIrTGqpOmHKMTWogormMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC
MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh
YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzZERDYvRDM2MkExQ0EzQjM3MTFFOUEwMzhBQjJBQzRGOUFFMDIvNjU4QTMzMkU1
QzAzMTFFOTk5QUY5NDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGBftAwDQYJKoZIhvcNAQELBQADggEBAAOko6+Zf/1dQ7db
W6woPlT/m/2KPT/ecz7m2KUM8142mLg3RLm03NKxWw7h1N1rzFk8Qd+JLokJRUSl
9Ukkf1UfUxryeiKCvpAxVctWlLqcbuMuSC4HdU0eiIi1dzz6g0HqSFa803O6b3Y7
Awu/9ilGOcEut3cBHQJTuEh9b7dlsg9u2qgyiLBvmU68Ki9zmRIsi33shQkkaxnu
0SgPEVxOdoOtoa4ozHb2+0DS1bW0Y5h+UEu2ZNQRnx6yCGHzrFim5QYuL7IWczZP
a99LnkDpZb1yGMfprcdL/MCmg4UtujjR59y6YrLl/1ngUpru2mQcivMSekB1MI1t
aFZakYo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:07:31 2025 by rpki-client