Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/7CB48FB0EA9411EAB77B1C69C4F9AE02.roa
File: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (raw, json)
Hash identifier: Sa6ldNBoTeND2ToHXPhf3nbtng663wb8wohGeUYEVNI=
Subject key identifier: BC:65:7E:46:54:23:5C:9C:F9:86:20:F3:CC:38:93:66:BF:CE:83:20
Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
Certificate serial: 1ECF
Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/7CB48FB0EA9411EAB77B1C69C4F9AE02.roa
Signing time: Thu 16 Jan 2025 16:23:26 +0000
ROA not before: Thu 16 Jan 2025 16:23:25 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 17423
IP address blocks: 202.131.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7887 (0x1ecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
Validity
Not Before: Jan 16 16:23:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6789327d-41cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:56:0a:11:b1:97:04:33:77:bf:ce:8f:86:
51:b3:e8:10:c2:40:f1:ef:5f:8e:4b:9a:f4:18:c4:
7b:d3:48:48:71:83:d4:22:47:c5:c6:86:5c:0a:46:
6e:58:6f:61:a4:ec:e0:00:d6:0c:bd:5f:19:e2:26:
69:9e:23:4c:ed:00:71:e6:3f:4a:92:6a:74:a0:70:
c5:0c:f9:de:a4:5d:76:6e:31:49:14:c2:92:da:bd:
eb:29:9b:9b:e6:10:bd:0a:b2:a8:62:d4:96:ac:27:
26:d7:2c:90:00:b2:d4:a9:20:89:e0:40:21:b5:cc:
e3:a5:2c:70:f8:9d:74:1c:70:f9:2e:df:5f:f2:31:
fc:3f:a6:a8:d8:dd:20:e4:98:a9:0b:d6:eb:5a:1f:
40:65:0e:9f:40:75:32:1a:33:10:af:6c:2a:37:a7:
5f:e9:5e:33:b9:f1:cf:a0:cd:08:62:09:ee:67:fd:
c9:55:2c:29:d4:1b:59:e3:32:30:ac:f0:1c:c5:61:
94:a0:23:f9:95:ba:d4:e8:24:75:ac:98:55:2c:af:
99:bd:3c:bb:38:44:e4:cc:36:44:76:8b:81:b1:97:
31:48:82:59:e8:ba:b2:6d:18:af:d1:fe:74:0b:59:
4d:70:26:e6:5e:12:31:38:58:33:a0:fd:fc:d1:ee:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:65:7E:46:54:23:5C:9C:F9:86:20:F3:CC:38:93:66:BF:CE:83:20
X509v3 Authority Key Identifier:
keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/7CB48FB0EA9411EAB77B1C69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.131.127.0/24
Signature Algorithm: sha256WithRSAEncryption
19:58:20:1a:b2:70:e6:7b:90:71:09:c1:f5:17:65:85:87:a5:
f6:b9:31:b3:5a:6d:da:cb:20:f3:a3:b7:35:50:52:8d:fd:88:
5f:5b:6e:6c:6a:43:89:27:fd:03:b2:9d:2e:90:6f:05:6f:e4:
0e:c9:2d:c3:52:85:a3:73:83:a3:5a:a8:66:b3:18:29:27:26:
24:fb:01:da:d9:db:f0:a0:cf:f1:b3:f5:31:d4:48:f4:6c:56:
f1:a2:3d:f8:2b:83:d8:55:77:dc:b2:90:af:3b:b0:1e:fe:b3:
e8:82:a7:43:c8:b9:9f:0e:3b:c9:35:50:df:0d:f5:20:f8:36:
72:b4:68:c5:67:19:4b:0a:97:45:a0:5f:65:fb:b9:92:d6:a3:
4c:8b:6a:65:aa:e4:e8:48:5e:8f:c9:ad:41:e6:3f:34:e3:d1:
d1:8d:6d:a4:d0:da:7d:13:f7:74:92:aa:1c:ce:0f:32:e9:4d:
5d:97:f0:67:4d:93:81:5d:b9:12:23:cd:b1:06:cc:8b:2f:3b:
49:00:46:28:17:8d:e1:a2:90:ab:4a:9c:0d:46:81:7d:e4:40:
4f:17:36:c5:af:29:1f:8e:da:44:bf:42:b7:e8:c5:1d:22:71:
f8:7d:6d:20:8e:d2:5c:b9:fe:a8:96:03:51:ea:97:47:d9:42:
fd:d9:92:50
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF
NTg0RUNFQkIwHhcNMjUwMTE2MTYyMzI1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg5MzI3ZC00MWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxSdWChGxlwQzd7/Oj4ZRs+gQwkDx71+OS5r0GMR700hIcYPUIkfFxoZcCkZu
WG9hpOzgANYMvV8Z4iZpniNM7QBx5j9Kkmp0oHDFDPnepF12bjFJFMKS2r3rKZub
5hC9CrKoYtSWrCcm1yyQALLUqSCJ4EAhtczjpSxw+J10HHD5Lt9f8jH8P6ao2N0g
5JipC9brWh9AZQ6fQHUyGjMQr2wqN6df6V4zufHPoM0IYgnuZ/3JVSwp1BtZ4zIw
rPAcxWGUoCP5lbrU6CR1rJhVLK+ZvTy7OETkzDZEdouBsZcxSIJZ6LqybRiv0f50
C1lNcCbmXhIxOFgzoP380e7sPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLxlfkZU
I1yc+YYg88w4k2a/zoMgMB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB
MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96
cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEEwQ0IvRTVDM0FFOUM1QTE5MTFFNjgxQjhDMTBGQzRGOUFFMDIvN0NCNDhGQjBF
QTk0MTFFQUI3N0IxQzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKg38wDQYJKoZIhvcNAQELBQADggEBABlYIBqycOZ7kHEJ
wfUXZYWHpfa5MbNabdrLIPOjtzVQUo39iF9bbmxqQ4kn/QOynS6QbwVv5A7JLcNS
haNzg6NaqGazGCknJiT7AdrZ2/Cgz/Gz9THUSPRsVvGiPfgrg9hVd9yykK87sB7+
s+iCp0PIuZ8OO8k1UN8N9SD4NnK0aMVnGUsKl0WgX2X7uZLWo0yLamWq5OhIXo/J
rUHmPzTj0dGNbaTQ2n0T93SSqhzODzLpTV2X8GdNk4FduRIjzbEGzIsvO0kARigX
jeGikKtKnA1GgX3kQE8XNsWvKR+O2kS/QrfoxR0icfh9bSCO0ly5/qiWA1Hql0fZ
Qv3ZklA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:40:53 2025 by rpki-client