Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa
File: 58226FA0060B11EFA116B11FC4F9AE02.roa (raw, json)
Hash identifier: 9nkyuFSeTqMcYC1MtkeuQxZs9syz/yUgIR8TXnZdmek=
Subject key identifier: C2:C2:67:37:17:77:00:A4:25:87:92:6B:07:BD:97:E7:67:96:85:1D
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 38D9
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa
Signing time: Tue 16 Jul 2024 14:31:45 +0000
ROA not before: Tue 16 Jul 2024 14:31:45 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 9587
IP address blocks: 119.46.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14553 (0x38d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 16 14:31:45 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66968451-13b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:cf:98:36:c0:9e:de:0c:b2:a3:37:2e:16:
89:7a:8e:dd:16:14:11:76:ba:4b:e1:8f:58:17:95:
a3:a5:fa:a9:55:09:2d:30:86:98:89:fb:75:45:59:
26:9e:42:39:89:ce:27:e8:36:6b:ce:5a:3c:b2:f1:
3b:c4:a4:d2:13:5d:7e:0a:7c:f2:50:b0:54:1c:4e:
02:13:06:48:e8:d7:31:2d:78:9f:ea:1e:14:4e:a2:
6a:11:53:12:c3:a6:e7:07:e4:f8:61:f1:3a:36:d0:
aa:6c:3e:7d:d1:3c:03:25:fd:36:14:5d:f7:0f:04:
62:06:d8:69:b5:f7:64:23:10:2c:d3:2b:23:24:62:
41:cb:df:94:e8:e8:16:ad:46:e3:59:15:73:45:8c:
98:18:37:3b:6c:fd:97:a5:86:f2:ac:61:5a:db:e9:
13:20:d8:00:c9:f7:50:6c:70:ab:db:39:b1:84:66:
a0:b5:0e:a5:e5:8e:0c:48:fa:4e:e9:33:4c:68:49:
52:79:fd:71:5a:bd:9b:c2:a1:a9:3b:fd:4d:54:0b:
3f:94:2f:a7:fc:1a:03:76:80:55:38:d0:fe:27:bb:
85:b4:b1:b6:ef:bd:81:61:46:ed:6e:c3:e5:6a:75:
a3:0a:a8:5f:e9:70:ec:7e:3b:ec:ee:ab:dd:c8:1d:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:67:37:17:77:00:A4:25:87:92:6B:07:BD:97:E7:67:96:85:1D
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.46.15.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3b:3c:e1:b6:6f:8e:6f:8f:83:fa:7d:8d:b9:a8:73:ec:eb:
06:5b:a0:0e:12:be:c8:ef:c5:7b:ce:88:05:18:21:9b:48:fe:
37:07:34:65:fc:19:a3:cf:1f:aa:9a:ee:8f:f8:e6:08:84:7f:
b6:0c:bb:ff:7b:f0:f9:47:3e:e7:b8:37:f8:d9:e8:37:ad:92:
f1:05:32:68:c5:98:1c:19:bd:d1:f7:82:54:f9:ec:fd:d7:88:
87:ac:19:31:65:42:4c:4a:d1:40:1d:85:7a:8e:b0:4f:00:f5:
34:2b:dc:10:21:1e:f1:04:85:85:57:26:af:37:54:8e:c8:06:
c7:c0:a7:3f:78:e3:72:1f:da:8e:58:66:ce:f4:3b:60:df:55:
ed:f3:da:f4:5e:ff:9b:b9:c8:76:8a:93:51:25:ed:15:27:2d:
72:f4:79:8e:6e:1e:89:03:68:36:94:70:c3:2d:f1:ad:ff:22:
af:a2:53:29:8c:74:9e:06:84:e2:78:ca:ea:a7:06:37:98:6d:
ba:3c:39:d0:93:5c:12:9a:83:d7:32:00:5f:4a:11:9f:fd:cf:
68:8a:37:df:39:32:af:31:b3:ae:e4:6c:8e:a4:1a:5f:7d:b7:
8e:e7:66:23:7a:0d:27:3f:2c:c1:6c:e1:17:44:a7:10:16:a6:
83:92:75:62
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICONkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjQwNzE2MTQzMTQ1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njk2ODQ1MS0xM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwejPmDbAnt4MsqM3LhaJeo7dFhQRdrpL4Y9YF5WjpfqpVQktMIaYift1RVkm
nkI5ic4n6DZrzlo8svE7xKTSE11+CnzyULBUHE4CEwZI6NcxLXif6h4UTqJqEVMS
w6bnB+T4YfE6NtCqbD590TwDJf02FF33DwRiBthptfdkIxAs0ysjJGJBy9+U6OgW
rUbjWRVzRYyYGDc7bP2XpYbyrGFa2+kTINgAyfdQbHCr2zmxhGagtQ6l5Y4MSPpO
6TNMaElSef1xWr2bwqGpO/1NVAs/lC+n/BoDdoBVOND+J7uFtLG2772BYUbtbsPl
anWjCqhf6XDsfjvs7qvdyB2CPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMLCZzcX
dwCkJYeSawe9l+dnloUdMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTgyMjZGQTAw
NjBCMTFFRkExMTZCMTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB3Lg8wDQYJKoZIhvcNAQELBQADggEBAEE7POG2b45vj4P6
fY25qHPs6wZboA4SvsjvxXvOiAUYIZtI/jcHNGX8GaPPH6qa7o/45giEf7YMu/97
8PlHPue4N/jZ6DetkvEFMmjFmBwZvdH3glT57P3XiIesGTFlQkxK0UAdhXqOsE8A
9TQr3BAhHvEEhYVXJq83VI7IBsfApz9443If2o5YZs70O2DfVe3z2vRe/5u5yHaK
k1El7RUnLXL0eY5uHokDaDaUcMMt8a3/Iq+iUymMdJ4GhOJ4yuqnBjeYbbo8OdCT
XBKag9cyAF9KEZ/9z2iKN985Mq8xs67kbI6kGl99t47nZiN6DSc/LMFs4RdEpxAW
poOSdWI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:57 2025 by rpki-client