Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/A2E40A5C3AA511EFA73B8885C4F9AE02.roa
File: A2E40A5C3AA511EFA73B8885C4F9AE02.roa (raw, json)
Hash identifier: c1GO5NSlHxgfivgz4ecr8X6d2Er+kSo7j331Oxaf9sw=
Subject key identifier: F9:E9:72:8B:81:88:D7:C3:41:A7:EB:96:97:48:09:96:2C:87:68:A2
Certificate issuer: /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial: 33E7
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/A2E40A5C3AA511EFA73B8885C4F9AE02.roa
Signing time: Fri 05 Jul 2024 08:10:20 +0000
ROA not before: Fri 05 Jul 2024 08:10:20 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 19905
IP address blocks: 202.78.16.0/20 maxlen: 20
202.78.24.0/24 maxlen: 24
202.78.27.0/24 maxlen: 24
202.78.28.0/23 maxlen: 23
2405:d980::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13287 (0x33e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Validity
Not Before: Jul 5 08:10:20 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6687aa6c-63f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:d4:d4:94:3c:65:93:01:b9:a1:9e:ce:5c:
7d:ca:04:25:fb:57:23:04:21:98:22:78:f3:cf:10:
d4:88:23:6a:02:54:b9:ca:60:dc:3f:09:ba:7d:05:
1c:92:f8:20:6f:38:5a:c2:28:93:f3:72:44:c8:c7:
f0:b3:77:9e:17:e7:e3:52:cb:d2:ca:2c:59:aa:ae:
cc:d5:9c:86:10:b9:7d:36:b2:12:6b:d8:e9:47:0d:
25:94:03:d8:e5:cc:e3:5f:a6:cb:bc:24:8a:f2:bf:
89:f8:b5:1f:2e:e2:14:3d:62:33:6c:ad:32:36:60:
f3:df:46:18:45:de:1b:f8:ed:6e:39:9e:55:71:88:
e7:94:af:c4:4a:de:27:43:23:9e:92:09:d1:55:7b:
79:54:aa:e9:58:c8:18:11:12:64:6a:7f:14:31:cf:
dc:53:fc:51:2b:34:6c:e7:8f:db:d9:d2:00:b4:63:
07:47:ba:28:01:c2:40:a5:1d:3e:8c:4d:e8:6f:c2:
19:55:02:8f:82:6b:09:74:60:55:89:cc:22:05:31:
1a:89:10:c7:dc:e5:c4:62:af:f0:fe:29:f9:ea:69:
b6:be:87:94:fb:f2:4b:27:e9:37:ac:4a:e9:44:8b:
7d:14:e1:8a:5c:db:54:58:ca:68:de:9f:b3:84:0b:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:72:8B:81:88:D7:C3:41:A7:EB:96:97:48:09:96:2C:87:68:A2
X509v3 Authority Key Identifier:
keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/A2E40A5C3AA511EFA73B8885C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.78.16.0/20
IPv6:
2405:d980::/32
Signature Algorithm: sha256WithRSAEncryption
97:22:47:13:f8:40:09:5a:76:39:ec:0c:5d:09:cf:cc:4c:58:
e9:fd:da:78:1b:a0:36:fb:9f:e4:19:a0:c5:51:01:9f:7a:ee:
f4:63:e7:52:6d:d4:6f:9b:0a:2c:a2:08:54:72:98:51:5b:bb:
0e:dc:10:27:1a:a9:a7:f5:34:3f:fe:cf:2a:47:88:f6:78:53:
de:72:da:e7:de:61:a3:ab:be:62:24:41:c3:52:9f:3e:ef:c2:
28:b4:96:c6:28:89:30:65:0f:77:25:09:99:a1:a7:1b:33:21:
5e:43:e3:f6:a8:2c:22:e8:0c:d4:0e:a2:b1:6d:84:4f:34:50:
97:03:67:50:e0:e3:aa:66:40:e4:be:b0:b0:7b:2f:cf:f1:1d:
71:25:e0:a7:80:85:c2:0d:88:5c:5a:0a:88:2b:e1:b1:1d:d5:
c2:97:d3:83:df:a0:f5:8b:bb:59:a2:6e:2c:55:f2:9d:70:c4:
dc:da:c8:3a:2a:07:3a:10:0f:72:cf:28:af:d8:50:77:d2:b5:
9c:3f:f1:1d:8e:5f:2d:9d:4a:3f:b6:36:51:f4:8d:f8:77:c3:
5e:ec:84:65:0c:d4:02:0d:d1:77:cb:a1:08:6a:2c:79:b8:7b:
61:8e:c6:e5:70:ea:be:31:45:f6:88:af:ad:29:cf:ce:e7:67:
b7:ee:ff:c3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICM+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURBNzYxMTAvBgNVBAUTKDRERUJCOEUxMjIyQkUwRTNGMjNBRURCNzUyNDVFMEY5
N0I4N0M3NEQwHhcNMjQwNzA1MDgxMDIwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg3YWE2Yy02M2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnovU1JQ8ZZMBuaGezlx9ygQl+1cjBCGYInjzzxDUiCNqAlS5ymDcPwm6fQUc
kvggbzhawiiT83JEyMfws3eeF+fjUsvSyixZqq7M1ZyGELl9NrISa9jpRw0llAPY
5czjX6bLvCSK8r+J+LUfLuIUPWIzbK0yNmDz30YYRd4b+O1uOZ5VcYjnlK/ESt4n
QyOekgnRVXt5VKrpWMgYERJkan8UMc/cU/xRKzRs54/b2dIAtGMHR7ooAcJApR0+
jE3ob8IZVQKPgmsJdGBVicwiBTEaiRDH3OXEYq/w/in56mm2voeU+/JLJ+k3rErp
RIt9FOGKXNtUWMpo3p+zhAtg0wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPnpcouB
iNfDQafrlpdICZYsh2iiMB8GA1UdIwQYMBaAFE3ruOEiK+Dj8jrtt1JF4Pl7h8dN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE3Ni9BQUJBMzQ5ODFE
OEIxMUUyQUE3NTZBRTYwOEIwMkNEMi9UZXU0NFNJcjRPUHlPdTIzVWtYZy1YdUh4
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RldTQ0U0lyNE9QeU91MjNVa1hnLVh1SHgwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NURBNzYvQUFCQTM0OTgxRDhCMTFFMkFBNzU2QUU2MDhCMDJDRDIvQTJFNDBBNUMz
QUE1MTFFRkE3M0I4ODg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBATKThAwDQQCAAIwBwMFACQF2YAwDQYJKoZIhvcNAQELBQAD
ggEBAJciRxP4QAladjnsDF0Jz8xMWOn92ngboDb7n+QZoMVRAZ967vRj51Jt1G+b
CiyiCFRymFFbuw7cECcaqaf1ND/+zypHiPZ4U95y2ufeYaOrvmIkQcNSnz7vwii0
lsYoiTBlD3clCZmhpxszIV5D4/aoLCLoDNQOorFthE80UJcDZ1Dg46pmQOS+sLB7
L8/xHXEl4KeAhcINiFxaCogr4bEd1cKX04PfoPWLu1mibixV8p1wxNzayDoqBzoQ
D3LPKK/YUHfStZw/8R2OXy2dSj+2NlH0jfh3w17shGUM1AIN0XfLoQhqLHm4e2GO
xuVw6r4xRfaIr60pz87nZ7fu/8M=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:23:54 2025 by rpki-client