Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/2687563AFA8E11EB8B0FCD39C4F9AE02.roa
File: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (raw, json)
Hash identifier: uw4pwsuMVlOdst39HyvHTeiUfKLIfoUwRmRV8OdgqkI=
Subject key identifier: 9A:42:AC:DC:93:B2:58:61:79:BD:21:0C:C8:15:1C:D1:28:51:99:4B
Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial: 30EF
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/2687563AFA8E11EB8B0FCD39C4F9AE02.roa
Signing time: Tue 30 Apr 2024 15:52:28 +0000
ROA not before: Tue 30 Apr 2024 15:52:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 14.142.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12527 (0x30ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Validity
Not Before: Apr 30 15:52:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663113bc-1801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:ec:f1:82:e1:eb:e3:21:93:ca:85:68:57:
8d:21:14:a8:fb:7e:03:96:65:50:78:3e:e9:bc:90:
cb:6d:03:3d:d4:45:c1:2e:62:95:44:b4:67:31:e5:
ee:b2:67:84:99:2b:2e:60:5a:e4:bb:8f:e5:73:c5:
4a:6a:79:3a:23:e2:24:c1:08:f8:99:84:af:87:03:
86:85:06:b9:a6:0e:63:7b:bd:92:15:39:6a:45:3b:
f1:bd:8a:89:fd:41:8d:f4:85:5a:74:aa:6d:3e:7c:
44:fc:51:59:18:e8:04:53:24:0f:6f:16:c9:f0:cc:
a6:b3:2d:0b:50:e1:d4:0b:57:ea:f7:59:1e:8d:7c:
21:d5:b7:a6:24:8f:00:57:dc:4c:50:8d:b1:8e:f5:
21:39:5b:99:7e:1f:6f:66:5d:a3:5c:50:c9:d9:2a:
43:c9:ab:61:c2:28:5e:94:be:bc:36:88:2a:99:c0:
4d:31:d8:40:1e:00:f1:ba:cf:69:24:b4:99:fe:ac:
7d:a9:51:03:fc:c0:ee:91:e2:17:90:f7:e0:2c:84:
67:47:c4:ba:f6:9e:08:6d:ad:b6:5c:bd:38:9c:68:
55:f7:64:57:44:bf:76:17:70:3a:0b:bd:75:1c:7b:
55:37:f6:68:b0:60:65:b4:f7:ac:65:98:96:da:f4:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:42:AC:DC:93:B2:58:61:79:BD:21:0C:C8:15:1C:D1:28:51:99:4B
X509v3 Authority Key Identifier:
keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/2687563AFA8E11EB8B0FCD39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.142.97.0/24
Signature Algorithm: sha256WithRSAEncryption
70:73:99:49:44:14:e6:ba:e8:4a:d2:05:b7:3d:e9:39:01:82:
7f:83:98:0e:02:82:3e:c7:b0:db:32:5a:c5:58:4f:42:61:8f:
95:fe:48:41:37:47:86:1c:2c:f0:46:67:15:cb:55:72:0c:c1:
dd:35:66:90:34:c6:90:8b:bf:3a:9b:a7:37:cc:09:9f:d4:03:
76:79:4b:8c:a9:b3:7b:e3:69:52:c7:95:5a:d4:4c:6c:0c:5b:
2a:99:42:b1:2a:19:10:4f:36:ec:af:e2:71:b1:15:fb:dc:84:
a2:f5:89:c9:44:66:69:43:ab:7d:b5:74:d0:20:ba:22:1d:0e:
2b:fe:ad:cc:3f:ff:cb:97:e0:81:c9:82:b9:b3:e4:6f:7b:61:
bc:ec:8e:7d:2e:aa:c3:3b:df:0d:0b:f9:cf:93:bb:70:b6:e0:
0b:5e:3b:21:33:13:0c:df:ed:d5:5d:eb:5d:de:70:8a:9d:72:
e3:5f:2d:58:69:30:ae:bd:cd:a1:84:fd:eb:7d:43:fd:19:85:
ba:a2:b4:ef:0a:2a:c7:59:34:b7:ca:4b:5e:4d:d7:02:af:a3:
0a:47:98:50:59:7b:68:63:7c:b6:b1:15:71:80:62:99:2a:2e:
ac:69:6a:d9:ea:ae:a5:4c:c3:55:92:6f:6a:1b:af:81:1d:37:
b6:20:ef:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICMO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjQwNDMwMTU1MjI4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjMxMTNiYy0xODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2Ds8YLh6+Mhk8qFaFeNIRSo+34DlmVQeD7pvJDLbQM91EXBLmKVRLRnMeXu
smeEmSsuYFrku4/lc8VKank6I+IkwQj4mYSvhwOGhQa5pg5je72SFTlqRTvxvYqJ
/UGN9IVadKptPnxE/FFZGOgEUyQPbxbJ8Mymsy0LUOHUC1fq91kejXwh1bemJI8A
V9xMUI2xjvUhOVuZfh9vZl2jXFDJ2SpDyathwihelL68NogqmcBNMdhAHgDxus9p
JLSZ/qx9qVED/MDukeIXkPfgLIRnR8S69p4Iba22XL04nGhV92RXRL92F3A6C711
HHtVN/ZosGBltPesZZiW2vSBTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJpCrNyT
slhheb0hDMgVHNEoUZlLMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvMjY4NzU2M0FG
QThFMTFFQjhCMEZDRDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAOjmEwDQYJKoZIhvcNAQELBQADggEBAHBzmUlEFOa66ErS
Bbc96TkBgn+DmA4Cgj7HsNsyWsVYT0Jhj5X+SEE3R4YcLPBGZxXLVXIMwd01ZpA0
xpCLvzqbpzfMCZ/UA3Z5S4yps3vjaVLHlVrUTGwMWyqZQrEqGRBPNuyv4nGxFfvc
hKL1iclEZmlDq321dNAguiIdDiv+rcw//8uX4IHJgrmz5G97Ybzsjn0uqsM73w0L
+c+Tu3C24AteOyEzEwzf7dVd613ecIqdcuNfLVhpMK69zaGE/et9Q/0ZhbqitO8K
KsdZNLfKS15N1wKvowpHmFBZe2hjfLaxFXGAYpkqLqxpatnqrqVMw1WSb2obr4Ed
N7Yg75o=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:39:24 2025 by rpki-client