Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/87F433B2234C11EBA94AE637C4F9AE02.roa
File: 87F433B2234C11EBA94AE637C4F9AE02.roa (raw, json)
Hash identifier: vAZuumEzH35lIcE9FGtrp9GE2VYNxSG1ZIiI45UcajY=
Subject key identifier: 3B:67:AC:9E:8D:C2:4E:69:A3:BC:39:12:E9:6A:E7:E2:FA:82:CA:29
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1CE2
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/87F433B2234C11EBA94AE637C4F9AE02.roa
Signing time: Tue 28 Jan 2025 08:34:42 +0000
ROA not before: Tue 28 Jan 2025 08:34:42 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 141031
IP address blocks: 113.203.192.0/24 maxlen: 24
113.203.194.0/24 maxlen: 24
113.203.196.0/24 maxlen: 24
113.203.197.0/24 maxlen: 24
113.203.198.0/24 maxlen: 24
113.203.199.0/24 maxlen: 24
118.103.224.0/24 maxlen: 24
118.103.225.0/24 maxlen: 24
2406:d00:ee00::/48 maxlen: 48
2406:d00:ee01::/48 maxlen: 48
2406:d00:ee0a::/48 maxlen: 48
2406:d00:ee0b::/48 maxlen: 48
2406:d00:ee0c::/48 maxlen: 48
2406:d00:ee0e::/48 maxlen: 48
2406:d00:ee55::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7394 (0x1ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Jan 28 08:34:42 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=679896a1-d9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:0d:18:f5:97:95:f1:f2:cd:93:23:cb:fd:
cf:d5:2f:b2:d1:2f:53:03:42:19:ab:e7:5a:29:eb:
dd:0f:68:47:9f:e5:71:ec:67:62:9f:fe:cb:b1:80:
2a:4e:95:02:97:0c:c6:18:b9:6c:d2:26:7b:b4:70:
49:2e:25:aa:a0:51:03:1a:b9:b5:eb:bc:e2:ae:2d:
73:7a:9b:dc:c0:bd:66:b3:ea:5c:de:07:e4:28:f1:
31:f5:08:a3:3d:5e:da:fa:d0:a5:8f:5e:27:41:fc:
f1:04:8d:a8:61:6c:8c:55:9b:34:8f:b2:a0:53:0f:
54:a8:62:b9:39:f6:fe:2e:01:e9:13:0c:e6:f2:b3:
c3:bb:73:df:1b:ea:d5:c2:f0:43:0e:a4:a0:7c:2a:
b7:ea:3d:de:b4:08:2f:ad:2f:f9:52:47:3e:84:a9:
2c:5c:3f:7d:a3:5d:bb:25:0e:c2:d6:c2:52:c7:25:
22:6b:f5:64:12:6f:ff:b5:88:7e:ac:13:e5:1d:be:
3a:06:cd:76:94:8e:8f:e8:f7:c3:22:54:0f:d4:b5:
da:29:85:9f:78:2f:04:07:9d:2c:94:82:bb:cd:d2:
bf:ed:d0:69:54:0c:58:14:33:70:ad:8c:c1:37:c0:
de:01:97:10:20:00:46:20:41:40:17:ce:b8:3f:e6:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:67:AC:9E:8D:C2:4E:69:A3:BC:39:12:E9:6A:E7:E2:FA:82:CA:29
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/87F433B2234C11EBA94AE637C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.192.0/24
113.203.194.0/24
113.203.196.0/22
118.103.224.0/23
IPv6:
2406:d00:ee00::/47
2406:d00:ee0a::-2406:d00:ee0c:ffff:ffff:ffff:ffff:ffff
2406:d00:ee0e::/48
2406:d00:ee55::/48
Signature Algorithm: sha256WithRSAEncryption
a8:8c:bf:79:da:83:36:e6:46:92:43:6f:62:18:1b:5a:cb:60:
2c:1f:44:15:7b:75:af:34:cc:c1:6b:44:76:17:22:c0:49:3d:
e0:6a:ab:c8:48:da:f4:90:76:93:cf:ca:60:ff:66:d9:4e:3f:
77:e4:da:34:32:33:f9:bb:35:e1:9a:8f:f5:94:97:e8:64:0f:
3c:b1:51:81:95:7e:81:64:d8:f0:8a:7b:a4:14:5a:e8:4e:d5:
f1:36:6f:6e:25:a1:86:7b:09:e1:93:3f:98:48:93:2b:16:ea:
b4:f5:2b:bf:46:e2:53:91:82:a8:3c:ce:54:7f:90:91:52:ef:
93:22:7d:a1:06:b3:c5:0b:25:d7:b6:e4:6b:6a:fe:80:ea:6f:
c5:2e:e6:b9:10:a9:53:08:e4:59:e2:5e:8a:1b:51:af:d6:66:
6a:12:b8:f7:c6:c9:95:e2:6a:bf:84:25:fd:17:6c:f3:35:5e:
c6:b3:26:9a:5c:11:71:dc:c5:d3:cf:14:76:9b:49:b6:bc:8e:
1e:8a:d1:29:8f:e0:92:62:5b:52:ef:8e:3c:3b:72:7b:72:f6:
89:02:28:40:f8:17:4f:bc:d7:ce:cb:cc:c7:b7:52:db:e1:30:
3b:15:dc:d2:21:62:b4:5a:ae:41:9f:7d:bd:5d:e8:1f:9b:de:
9d:27:9b:21
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgICHOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB
ODEzOTYwM0EwHhcNMjUwMTI4MDgzNDQyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk4OTZhMS1kOWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvTwNGPWXlfHyzZMjy/3P1S+y0S9TA0IZq+daKevdD2hHn+Vx7Gdin/7LsYAq
TpUClwzGGLls0iZ7tHBJLiWqoFEDGrm167ziri1zepvcwL1ms+pc3gfkKPEx9Qij
PV7a+tClj14nQfzxBI2oYWyMVZs0j7KgUw9UqGK5Ofb+LgHpEwzm8rPDu3PfG+rV
wvBDDqSgfCq36j3etAgvrS/5Ukc+hKksXD99o127JQ7C1sJSxyUia/VkEm//tYh+
rBPlHb46Bs12lI6P6PfDIlQP1LXaKYWfeC8EB50slIK7zdK/7dBpVAxYFDNwrYzB
N8DeAZcQIABGIEFAF864P+YsswIDAQABo4IC3jCCAtowHQYDVR0OBBYEFDtnrJ6N
wk5po7w5Eulq5+L6gsopMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx
RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvODdGNDMzQjIy
MzRDMTFFQkE5NEFFNjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaAYIKwYBBQUHAQcBAf8E
WTBXMB4EAgABMBgDBABxy8ADBABxy8IDBAJxy8QDBAF2Z+AwNQQCAAIwLwMHASQG
DQDuADASAwcBJAYNAO4KAwcAJAYNAO4MAwcAJAYNAO4OAwcAJAYNAO5VMA0GCSqG
SIb3DQEBCwUAA4IBAQCojL952oM25kaSQ29iGBtay2AsH0QVe3WvNMzBa0R2FyLA
ST3gaqvISNr0kHaTz8pg/2bZTj935No0MjP5uzXhmo/1lJfoZA88sVGBlX6BZNjw
inukFFroTtXxNm9uJaGGewnhkz+YSJMrFuq09Su/RuJTkYKoPM5Uf5CRUu+TIn2h
BrPFCyXXtuRrav6A6m/FLua5EKlTCORZ4l6KG1Gv1mZqErj3xsmV4mq/hCX9F2zz
NV7GsyaaXBFx3MXTzxR2m0m2vI4eitEpj+CSYltS7448O3J7cvaJAihA+BdPvNfO
y8zHt1Lb4TA7FdzSIWK0Wq5Bn329Xegfm96dJ5sh
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:36:28 2025 by rpki-client