Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/CCD092AE4E6411EF92C0EC3AC4F9AE02.roa
File: CCD092AE4E6411EF92C0EC3AC4F9AE02.roa (raw, json)
Hash identifier: rM2HcTN6YD/Z+cCFcZeuxrJ7Jgv3YiMIlsdFtNQfr2Q=
Subject key identifier: 23:D7:9D:43:77:40:2E:B0:85:5C:17:45:0B:FA:BC:1F:D7:34:2F:88
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1C62
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/CCD092AE4E6411EF92C0EC3AC4F9AE02.roa
Signing time: Mon 30 Sep 2024 16:24:17 +0000
ROA not before: Mon 30 Sep 2024 16:24:17 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 140900
IP address blocks: 111.119.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7266 (0x1c62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Sep 30 16:24:17 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fad0b1-0622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:39:be:fa:6a:cf:e6:ec:4a:42:ea:03:2e:
2e:2f:f9:a6:2b:1c:e9:bc:1b:51:d4:be:80:2f:8a:
10:53:a6:1f:97:c0:3e:44:08:39:c4:b0:57:46:28:
c8:30:46:1f:21:ca:51:14:f5:a5:8f:e6:e9:07:d6:
53:a5:ea:d1:1e:34:f9:04:08:c9:eb:38:12:1d:f8:
bc:66:8a:8c:a7:cb:0a:19:25:3a:d8:24:49:ca:83:
62:ba:b5:00:c3:11:41:dd:cc:f9:20:96:cb:ee:92:
95:67:26:ae:7d:6b:b6:ab:e7:d7:08:65:eb:1f:fe:
58:42:34:c3:9b:e8:53:af:44:e9:3b:1e:30:b5:60:
6d:ea:d4:72:2d:ef:41:87:79:4f:7d:ed:3f:d8:24:
c3:81:69:c9:31:6d:33:73:8d:10:f9:cb:4d:4d:3a:
a6:2d:15:4d:2f:07:46:0f:d7:fe:b6:ff:71:b2:c4:
07:10:96:e3:6e:e3:47:aa:3e:cf:83:04:a7:88:bb:
62:f9:aa:af:ce:45:93:3b:b7:c1:28:e7:3d:22:ef:
0a:68:0c:e5:7f:a2:13:53:15:4c:dc:b2:af:56:d3:
8a:47:10:49:8e:fe:7c:27:3d:ed:60:06:50:ad:aa:
59:3d:88:6b:d6:c0:52:fe:8b:f7:45:6e:71:0f:8a:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D7:9D:43:77:40:2E:B0:85:5C:17:45:0B:FA:BC:1F:D7:34:2F:88
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/CCD092AE4E6411EF92C0EC3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.119.167.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d7:35:fa:0b:b5:21:23:8c:30:91:d4:1e:b9:b5:19:9a:fb:
b3:c0:15:dd:7a:90:b2:b9:e9:5f:02:c4:f7:83:cd:00:34:81:
59:15:1c:cd:e6:c6:33:6b:da:f1:01:90:0c:dc:66:c8:4e:69:
33:3c:c7:21:ba:57:93:e0:a9:48:53:4b:d9:ae:d9:88:55:4e:
43:a3:3e:38:65:30:b2:d2:db:f2:56:62:25:84:15:b9:b8:3e:
c6:66:ae:13:17:6d:a3:54:bd:08:62:28:af:6a:f0:b8:39:44:
12:a0:4b:c4:af:87:71:c7:a9:45:46:c0:b8:b7:f7:ab:5c:7c:
b9:4d:fb:01:05:e3:da:2e:a7:83:a2:de:8f:f0:9e:f1:3e:d6:
8e:72:a5:50:da:9f:9d:ca:69:ef:3a:cd:a2:2e:be:4c:b3:90:
c3:c4:cb:55:ff:94:be:4b:b9:20:3e:83:7e:ce:9a:18:d6:89:
fe:87:20:39:75:2e:07:6c:8d:c6:5f:7e:76:1e:b5:39:1a:53:
51:7f:bc:d9:c7:10:01:8f:44:c2:19:a5:6a:0b:8c:fd:ef:14:
3b:de:60:a1:59:cd:16:12:59:75:ca:c0:73:92:37:36:12:f2:
38:bf:ee:f3:4e:b9:c3:f7:15:b9:d8:09:2e:3e:81:44:bf:94:
ad:29:61:ec
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB
ODEzOTYwM0EwHhcNMjQwOTMwMTYyNDE3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZhZDBiMS0wNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsDo5vvpqz+bsSkLqAy4uL/mmKxzpvBtR1L6AL4oQU6Yfl8A+RAg5xLBXRijI
MEYfIcpRFPWlj+bpB9ZTperRHjT5BAjJ6zgSHfi8ZoqMp8sKGSU62CRJyoNiurUA
wxFB3cz5IJbL7pKVZyaufWu2q+fXCGXrH/5YQjTDm+hTr0TpOx4wtWBt6tRyLe9B
h3lPfe0/2CTDgWnJMW0zc40Q+ctNTTqmLRVNLwdGD9f+tv9xssQHEJbjbuNHqj7P
gwSniLti+aqvzkWTO7fBKOc9Iu8KaAzlf6ITUxVM3LKvVtOKRxBJjv58Jz3tYAZQ
rapZPYhr1sBS/ov3RW5xD4rEawIDAQABo4IClTCCApEwHQYDVR0OBBYEFCPXnUN3
QC6whVwXRQv6vB/XNC+IMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx
RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvQ0NEMDkyQUU0
RTY0MTFFRjkyQzBFQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABvd6cwDQYJKoZIhvcNAQELBQADggEBAJjXNfoLtSEjjDCR
1B65tRma+7PAFd16kLK56V8CxPeDzQA0gVkVHM3mxjNr2vEBkAzcZshOaTM8xyG6
V5PgqUhTS9mu2YhVTkOjPjhlMLLS2/JWYiWEFbm4PsZmrhMXbaNUvQhiKK9q8Lg5
RBKgS8Svh3HHqUVGwLi396tcfLlN+wEF49oup4Oi3o/wnvE+1o5ypVDan53Kae86
zaIuvkyzkMPEy1X/lL5LuSA+g37OmhjWif6HIDl1LgdsjcZffnYetTkaU1F/vNnH
EAGPRMIZpWoLjP3vFDveYKFZzRYSWXXKwHOSNzYS8ji/7vNOucP3FbnYCS4+gUS/
lK0pYew=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:33:23 2025 by rpki-client