Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa
File: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (raw, json)
Hash identifier: jQLZJj3VvPR1niUIT7DA9sty7btEtK8rmHNsN8IaW9w=
Subject key identifier: E3:D8:A8:F1:A1:F1:7A:11:03:0F:AC:1E:92:57:0C:02:B4:6D:60:50
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1C5A
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa
Signing time: Mon 28 Oct 2024 14:40:40 +0000
ROA not before: Mon 28 Oct 2024 14:40:40 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 38710
IP address blocks: 119.30.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7258 (0x1c5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Oct 28 14:40:40 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=671fa267-790d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e2:44:b8:ab:d1:10:32:62:46:b1:b0:06:54:
b2:e9:81:02:16:0b:11:6b:48:93:99:64:ea:4c:fb:
40:5c:ec:28:27:ec:6d:37:14:03:06:5b:9d:12:0b:
c8:7c:ee:34:dd:ce:c0:ca:3d:03:67:a8:0f:cf:67:
cd:dd:e4:fb:49:67:96:79:4e:a1:11:20:e2:68:d8:
33:06:e8:2d:f3:14:35:2c:f6:5a:ca:58:1b:5e:c1:
19:4e:b4:c9:af:37:d2:2d:21:e5:f5:3a:94:2a:18:
34:3b:b1:9c:14:ac:a1:b8:34:e3:1f:50:f6:32:c0:
b8:50:2c:f1:90:36:22:b5:23:d0:21:f9:e7:58:26:
32:56:d8:17:e0:96:86:bf:80:57:13:17:d8:3a:8e:
c4:d9:81:da:56:44:e8:a2:bf:56:72:86:81:87:07:
ee:78:78:12:25:92:b0:48:98:82:ef:38:66:24:26:
22:81:7e:24:8b:c8:e2:5f:22:09:97:6b:6d:31:2b:
26:71:bc:18:0c:0e:48:18:d1:79:84:1a:d3:c0:7d:
fb:7b:64:1c:15:52:7f:cd:65:28:6a:98:ec:0b:e6:
18:b5:be:57:09:38:03:72:b9:e9:75:36:85:19:10:
f4:cc:ea:62:93:73:6a:74:ee:08:ce:fd:ca:e7:2b:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D8:A8:F1:A1:F1:7A:11:03:0F:AC:1E:92:57:0C:02:B4:6D:60:50
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.30.88.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1b:20:64:5a:20:61:04:cc:e2:4f:53:0d:de:d5:2e:ab:1f:
c1:96:0c:e2:f3:c1:13:cf:bd:52:f4:7d:f1:11:d1:67:98:5f:
c1:c9:a7:94:15:53:f7:7e:dd:4d:18:e1:aa:64:50:5c:c9:19:
88:ab:9a:c6:a1:90:ba:83:e2:dd:bf:36:7e:2a:c7:a4:af:84:
4d:36:17:77:0d:b8:e9:e6:10:61:4c:44:74:58:3c:ec:05:92:
ad:27:1e:89:04:0f:f3:60:3e:a3:6d:67:81:7c:da:40:78:49:
9a:1f:fa:f7:e0:19:1b:30:0f:87:0b:d7:b1:f7:83:50:ea:94:
2a:82:18:cd:ed:3c:5d:3c:20:43:28:ca:4a:e7:f9:6f:0a:f6:
42:51:72:11:ae:46:aa:e8:95:01:8e:89:eb:a9:b0:2d:fe:31:
e3:9b:74:99:ab:ed:c6:8b:56:c3:c8:17:2f:8e:be:e2:36:09:
ab:ca:3e:14:52:00:62:6e:02:65:3e:13:3d:30:04:a0:aa:72:
40:18:3b:74:e8:1a:a4:87:dc:67:33:68:59:cc:2f:3b:6b:df:
16:c9:2b:a6:d8:25:cf:9c:84:e5:c2:9e:bf:d6:8f:78:89:28:
75:4a:0e:0b:a6:ef:4a:72:60:dd:1d:16:4b:4e:e1:d2:f9:db:
1a:34:d6:6b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4
NkE5QjNGRDgwHhcNMjQxMDI4MTQ0MDQwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFmYTI2Ny03OTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+OJEuKvREDJiRrGwBlSy6YECFgsRa0iTmWTqTPtAXOwoJ+xtNxQDBludEgvI
fO403c7Ayj0DZ6gPz2fN3eT7SWeWeU6hESDiaNgzBugt8xQ1LPZaylgbXsEZTrTJ
rzfSLSHl9TqUKhg0O7GcFKyhuDTjH1D2MsC4UCzxkDYitSPQIfnnWCYyVtgX4JaG
v4BXExfYOo7E2YHaVkToor9WcoaBhwfueHgSJZKwSJiC7zhmJCYigX4ki8jiXyIJ
l2ttMSsmcbwYDA5IGNF5hBrTwH37e2QcFVJ/zWUoapjsC+YYtb5XCTgDcrnpdTaF
GRD0zOpik3NqdO4Izv3K5ysplwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOPYqPGh
8XoRAw+sHpJXDAK0bWBQMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE
ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvNUQyNDUyOUNB
QjBDMTFFQThENUFERTA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB3HlgwDQYJKoZIhvcNAQELBQADggEBAIEbIGRaIGEEzOJP
Uw3e1S6rH8GWDOLzwRPPvVL0ffER0WeYX8HJp5QVU/d+3U0Y4apkUFzJGYirmsah
kLqD4t2/Nn4qx6SvhE02F3cNuOnmEGFMRHRYPOwFkq0nHokED/NgPqNtZ4F82kB4
SZof+vfgGRswD4cL17H3g1DqlCqCGM3tPF08IEMoykrn+W8K9kJRchGuRqrolQGO
ieupsC3+MeObdJmr7caLVsPIFy+OvuI2CavKPhRSAGJuAmU+Ez0wBKCqckAYO3To
GqSH3GczaFnMLztr3xbJK6bYJc+chOXCnr/Wj3iJKHVKDgum70pyYN0dFktO4dL5
2xo01ms=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:59:01 2025 by rpki-client