Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa
File: A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa (raw, json)
Hash identifier: bQkUW47Omh2zud2h3jRyO8DuSrBukJKJFd0HuML8p2M=
Subject key identifier: 88:DB:4B:DC:03:1F:14:BA:F2:BE:D6:91:26:79:B4:01:FB:3C:4F:66
Certificate issuer: /CN=A9175866/serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3
Certificate serial: 27
Authority key identifier: D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa
Signing time: Fri 15 Mar 2024 07:40:58 +0000
ROA not before: Fri 15 Mar 2024 07:40:58 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 44444
IP address blocks: 116.50.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175866/serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3
Validity
Not Before: Mar 15 07:40:58 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f3fb8a-ddfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a4:07:78:06:76:fc:c5:9b:b4:14:ab:13:89:
7c:3e:34:a6:6c:62:08:06:ad:92:74:05:b1:2f:b7:
9a:cc:3d:18:06:fb:14:d6:0e:ff:db:d4:3c:3b:f5:
d3:99:7c:11:fb:f6:fb:f1:e1:82:84:36:66:71:3f:
36:90:a7:b0:72:54:e9:c5:9c:3c:00:68:6e:47:6e:
81:2c:b1:dd:50:43:ea:f1:28:b7:fa:d6:a2:27:0c:
de:d4:df:50:0f:9e:9c:57:03:99:56:78:13:09:6d:
d3:b0:64:4a:cc:a9:fd:d6:3e:34:1d:be:d0:98:c4:
38:33:a3:8a:d8:05:b5:cf:1b:09:19:36:95:e9:cc:
ca:3e:e1:74:a3:0d:39:8f:1e:ee:98:b2:ac:d6:4e:
30:1f:02:be:bf:0a:77:78:b4:c3:e3:be:f8:76:7a:
ab:57:28:19:da:5f:20:d0:f8:65:9b:43:11:4c:bb:
36:ea:c2:5c:66:c3:13:d9:24:46:61:8b:9b:f3:ab:
aa:38:02:a1:cd:17:57:d4:a2:1b:52:71:c9:a3:15:
df:4c:7d:54:37:f7:d1:e9:6b:20:bb:d3:21:e0:c5:
3d:ee:96:cc:b6:10:14:cf:5a:19:be:21:5b:39:63:
b8:9b:4a:3a:e3:37:e9:4e:1a:1d:0a:51:b9:0f:61:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DB:4B:DC:03:1F:14:BA:F2:BE:D6:91:26:79:B4:01:FB:3C:4F:66
X509v3 Authority Key Identifier:
keyid:D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.50.63.0/24
Signature Algorithm: sha256WithRSAEncryption
21:44:7e:e1:76:d3:ca:29:98:7c:20:f9:b7:11:a2:2d:ee:fe:
8a:c6:a4:7d:df:2a:e4:a9:66:c2:96:fe:57:60:60:8d:dc:4b:
ea:6e:46:2c:89:87:16:82:9c:0a:2d:58:7b:eb:a5:6e:03:37:
cb:1f:48:1c:c7:d9:26:ee:fd:fd:47:79:0d:a5:60:8b:95:d3:
fe:d1:02:1c:05:6d:80:8c:6d:e8:64:00:56:49:8b:3b:05:d9:
89:a1:e2:40:15:51:e4:5d:3e:87:ea:10:2b:e1:0c:e1:fa:50:
ec:7f:00:e1:f6:b1:c5:2a:95:0e:3b:a2:42:12:45:eb:f3:27:
f4:cd:7e:5b:f0:aa:95:85:0d:e6:50:48:d9:49:1e:70:59:85:
35:fa:af:e9:46:db:cf:e8:ae:99:9a:f0:48:0f:c7:35:33:f3:
27:92:08:69:29:bb:c7:23:d5:35:9a:db:f9:dd:fc:6f:d3:07:
67:e9:d8:2a:23:c4:d0:73:42:c9:7f:b7:a0:05:81:12:5e:27:
52:fa:50:b6:7f:a3:a2:7c:a2:75:e5:2b:17:e5:83:e4:7d:24:
44:d1:f5:aa:37:c7:10:f8:ac:5b:d6:64:49:cc:47:d6:8e:e7:
83:38:24:50:3b:39:a7:b6:0a:3a:b6:8c:dd:d2:7d:30:e1:dd:
a2:98:10:42
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NTg2NjExMC8GA1UEBRMoRDU5NTU0MkU1MjBGNDhBRjc1RTc3OTAzRUE2NkEzOUM2
NEMxRDBBMzAeFw0yNDAzMTUwNzQwNThaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ZjNmYjhhLWRkZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDspAd4Bnb8xZu0FKsTiXw+NKZsYggGrZJ0BbEvt5rMPRgG+xTWDv/b1Dw79dOZ
fBH79vvx4YKENmZxPzaQp7ByVOnFnDwAaG5HboEssd1QQ+rxKLf61qInDN7U31AP
npxXA5lWeBMJbdOwZErMqf3WPjQdvtCYxDgzo4rYBbXPGwkZNpXpzMo+4XSjDTmP
Hu6YsqzWTjAfAr6/Cnd4tMPjvvh2eqtXKBnaXyDQ+GWbQxFMuzbqwlxmwxPZJEZh
i5vzq6o4AqHNF1fUohtSccmjFd9MfVQ399HpayC70yHgxT3ulsy2EBTPWhm+IVs5
Y7ibSjrjN+lOGh0KUbkPYRTRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUiNtL3AMf
FLryvtaRJnm0Afs8T2YwHwYDVR0jBBgwFoAU1ZVULlIPSK9153kD6majnGTB0KMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1ODY2L0YxOUQyMjAyQUZE
OTExRUU4NEM2RjI3QkM0RjlBRTAyLzFaVlVMbElQU0s5MTUza0Q2bWFqbkdUQjBL
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMVpWVUxsSVBTSzkxNTNrRDZtYWpuR1RCMEtNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTg2Ni9GMTlEMjIwMkFGRDkxMUVFODRDNkYyN0JDNEY5QUUwMi9BNEY1RkIxRUQw
QkMxMUVFODIzOEU3MUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAHQyPzANBgkqhkiG9w0BAQsFAAOCAQEAIUR+4XbTyimYfCD5
txGiLe7+isakfd8q5Klmwpb+V2BgjdxL6m5GLImHFoKcCi1Ye+ulbgM3yx9IHMfZ
Ju79/Ud5DaVgi5XT/tECHAVtgIxt6GQAVkmLOwXZiaHiQBVR5F0+h+oQK+EM4fpQ
7H8A4faxxSqVDjuiQhJF6/Mn9M1+W/CqlYUN5lBI2UkecFmFNfqv6Ubbz+iumZrw
SA/HNTPzJ5IIaSm7xyPVNZrb+d38b9MHZ+nYKiPE0HNCyX+3oAWBEl4nUvpQtn+j
onyideUrF+WD5H0kRNH1qjfHEPisW9ZkScxH1o7ngzgkUDs5p7YKOraM3dJ9MOHd
opgQQg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:46:22 2025 by rpki-client