Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/BB8DC2EEDA3911EFB026B123C4F9AE02.roa
File: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (raw, json)
Hash identifier: MVenW+yEVNBgs+3GgtTmtkl9lxKtlluyMPszolBWqVw=
Subject key identifier: FF:39:9F:B6:7F:6A:D1:3E:5D:99:FE:39:0E:C4:F2:01:80:13:AF:16
Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial: 7B
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/BB8DC2EEDA3911EFB026B123C4F9AE02.roa
Signing time: Fri 24 Jan 2025 09:58:17 +0000
ROA not before: Fri 24 Jan 2025 09:58:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40065
IP address blocks: 183.90.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Validity
Not Before: Jan 24 09:58:17 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67936438-ba55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:bf:76:f9:a6:df:b3:ef:0b:f0:99:ae:cd:
f2:e8:1b:48:c0:0d:5d:16:36:bb:01:92:5a:34:e5:
18:70:ef:18:58:10:7d:a4:e1:af:d5:c5:01:61:da:
a8:57:79:48:ef:e8:79:e1:2a:2f:1a:bd:80:51:65:
51:fd:5e:6f:28:81:83:ad:26:4b:d9:c2:1e:ef:bb:
21:93:de:d2:6d:08:c9:dc:b5:21:f2:33:12:47:84:
74:7b:7d:85:15:9d:df:03:29:1b:74:a8:86:3d:d3:
7c:11:83:46:e7:0f:69:0e:a9:d5:bc:91:e9:6e:e6:
cc:03:3c:0a:72:7f:c2:a2:2e:0e:6d:d5:9d:2d:75:
8e:ce:ef:9f:2a:5d:bc:51:7b:f8:57:45:12:30:e1:
6b:54:ea:34:0e:20:a2:05:4c:ef:1a:f9:34:2e:35:
9d:62:84:16:de:11:a4:fa:bf:e9:0a:b3:e2:67:bf:
c4:bd:78:c3:ec:0e:c7:c8:1a:13:dd:2e:2c:7e:18:
0d:66:09:87:fa:27:3e:e0:be:1b:19:7a:5c:18:de:
25:1f:6d:0e:31:54:b4:b9:bd:5e:32:c8:f0:a7:16:
4c:d4:95:bb:b0:32:be:87:63:2b:79:13:ae:2e:ea:
f1:5a:b7:af:ac:3e:be:7f:d6:46:74:f5:c0:1b:29:
ff:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:39:9F:B6:7F:6A:D1:3E:5D:99:FE:39:0E:C4:F2:01:80:13:AF:16
X509v3 Authority Key Identifier:
keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/BB8DC2EEDA3911EFB026B123C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.90.184.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d8:0c:b1:22:0d:05:dc:ee:a0:62:6c:bb:5b:8a:50:d4:bf:
77:23:34:67:d3:7f:ae:16:b7:75:17:a6:e5:30:90:1e:00:64:
cf:d3:f8:0e:6a:25:5f:5a:f3:1a:6c:d9:02:7d:40:4b:0a:1d:
73:31:e0:d4:89:14:12:3d:82:90:24:bb:e0:c1:cd:93:64:73:
9f:d7:8e:21:1b:0f:1e:bb:2c:1a:c3:7e:3d:4a:6c:63:06:30:
55:6a:74:9f:02:c6:a8:d0:3f:3b:56:ff:ca:a9:b8:a2:69:b9:
1a:51:a6:41:cc:2b:f2:f1:8e:d6:a3:05:2f:78:bd:60:80:ba:
5b:6a:e2:31:87:49:a8:54:98:c6:be:77:4f:8a:c6:65:67:15:
3a:ce:d1:b6:bc:f6:83:c7:94:c9:ad:86:dc:d8:5c:e8:53:ac:
64:b2:46:a8:71:03:a6:05:8d:63:ea:4e:1a:ea:26:33:84:22:
93:26:37:c2:2f:12:3f:ea:5a:fb:21:fc:ed:16:2e:2a:f6:83:
db:11:45:26:80:36:94:ce:39:41:2f:c1:88:3b:db:ae:c7:e8:
4b:6b:e3:a5:0d:da:93:39:29:30:62:76:4f:b5:8d:53:dc:5f:
3e:7e:96:0f:42:29:be:de:c2:51:4e:dd:1b:2e:7a:19:78:a3:
d3:cf:a8:50
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RUJCMjExMC8GA1UEBRMoQ0QzREY1M0FBMEU5QTM5ODU5NUU5NTcwMTUxNTVCQ0NB
QzU2OEQxNTAeFw0yNTAxMjQwOTU4MTdaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3OTM2NDM4LWJhNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHUL92+abfs+8L8JmuzfLoG0jADV0WNrsBklo05Rhw7xhYEH2k4a/VxQFh2qhX
eUjv6HnhKi8avYBRZVH9Xm8ogYOtJkvZwh7vuyGT3tJtCMnctSHyMxJHhHR7fYUV
nd8DKRt0qIY903wRg0bnD2kOqdW8kelu5swDPApyf8KiLg5t1Z0tdY7O758qXbxR
e/hXRRIw4WtU6jQOIKIFTO8a+TQuNZ1ihBbeEaT6v+kKs+Jnv8S9eMPsDsfIGhPd
Lix+GA1mCYf6Jz7gvhsZelwY3iUfbQ4xVLS5vV4yyPCnFkzUlbuwMr6HYyt5E64u
6vFat6+sPr5/1kZ09cAbKf+nAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU/zmftn9q
0T5dmf45DsTyAYATrxYwHwYDVR0jBBgwFoAUzT31OqDpo5hZXpVwFRVbzKxWjRUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFQkIyL0YzN0YyNDZFMzI5
NTExRUY5QTQ4MkY1NUM0RjlBRTAyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pS
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvelQzMU9xRHBvNWhaWHBWd0ZSVmJ6S3hXalJVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi9CQjhEQzJFRURB
MzkxMUVGQjAyNkIxMjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALdauDANBgkqhkiG9w0BAQsFAAOCAQEAetgMsSINBdzuoGJs
u1uKUNS/dyM0Z9N/rha3dRem5TCQHgBkz9P4DmolX1rzGmzZAn1ASwodczHg1IkU
Ej2CkCS74MHNk2Rzn9eOIRsPHrssGsN+PUpsYwYwVWp0nwLGqNA/O1b/yqm4omm5
GlGmQcwr8vGO1qMFL3i9YIC6W2riMYdJqFSYxr53T4rGZWcVOs7Rtrz2g8eUya2G
3Nhc6FOsZLJGqHEDpgWNY+pOGuomM4QikyY3wi8SP+pa+yH87RYuKvaD2xFFJoA2
lM45QS/BiDvbrsfoS2vjpQ3akzkpMGJ2T7WNU9xfPn6WD0Ipvt7CUU7dGy56GXij
08+oUA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:43:52 2025 by rpki-client