Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa
File: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (raw, json)
Hash identifier: 9yUs2nKXPHCpJS0mrHo2Ggq8ympf47XQx/Xh9xer3UE=
Subject key identifier: D9:07:8B:9E:A6:2E:A0:68:86:3C:09:4C:72:E5:75:5C:4D:16:77:D5
Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial: 09F6
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa
Signing time: Sat 24 Aug 2024 20:38:57 +0000
ROA not before: Sat 24 Aug 2024 20:38:57 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 151466
IP address blocks: 39.109.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2550 (0x9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Validity
Not Before: Aug 24 20:38:57 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66ca44e0-a2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:73:5b:50:22:63:8a:60:51:db:bb:e9:6a:
05:41:69:11:9f:68:12:36:8c:4c:02:f4:bd:b4:0b:
14:81:df:51:90:7c:ef:7a:1b:62:e1:7d:12:d5:cf:
f4:3e:5b:1c:2e:86:ca:5b:15:d1:fe:be:d8:5a:9e:
0e:2a:b5:3a:34:2a:95:49:0a:50:0f:f5:08:b9:95:
f9:df:e4:23:74:a3:8e:44:af:2a:02:3b:d2:d5:ba:
7b:9a:60:23:03:41:37:b9:87:f1:53:8a:8a:e4:59:
49:d6:dc:13:5e:9e:6a:99:86:82:83:49:f0:5c:0c:
1e:b6:f7:a6:0a:58:34:cf:bd:57:8f:28:9f:56:47:
94:fa:e7:a2:39:ae:23:65:c7:aa:4c:77:02:6c:1f:
96:f6:0f:df:b8:63:c5:80:2c:7b:af:36:b4:92:1c:
8d:87:e8:36:cf:cf:30:71:1e:ea:81:58:31:fa:15:
75:40:74:84:08:e6:a0:86:2a:9f:bd:0c:4b:43:17:
89:b5:71:85:ba:3c:02:a8:b7:be:af:6d:45:92:a3:
b5:65:06:66:b1:23:ef:0c:7e:f7:92:97:da:86:3e:
1f:95:86:33:50:61:66:10:ca:02:01:0a:79:36:80:
4b:c2:0b:05:74:f3:84:12:47:81:1c:4b:42:7d:5c:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:07:8B:9E:A6:2E:A0:68:86:3C:09:4C:72:E5:75:5C:4D:16:77:D5
X509v3 Authority Key Identifier:
keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
39.109.66.0/24
Signature Algorithm: sha256WithRSAEncryption
66:75:8f:a2:f1:ed:cf:fc:e3:13:6b:b8:b5:e6:f2:dc:f3:c2:
5c:42:38:b2:8c:b8:80:78:28:3e:92:5f:22:d7:4f:41:2c:96:
07:3c:bc:81:36:87:ab:0e:0c:2d:88:dd:9a:d7:03:4d:0f:fe:
fe:bb:fb:f0:dd:89:86:51:1f:1a:f0:79:ac:c0:d0:b5:1a:f8:
9d:c7:af:35:fc:80:73:79:ef:66:c6:90:27:37:af:7d:14:f3:
25:79:45:8a:f0:16:da:8a:62:e7:80:b5:15:b3:d0:8f:19:fe:
c8:f9:dc:51:14:05:e3:f8:1d:91:fc:0e:22:b0:e2:2c:7c:fb:
87:19:3f:28:ff:7f:ae:64:7f:b4:93:ea:99:bd:ac:9f:ae:2a:
d8:ed:21:37:14:42:de:b9:71:d7:bf:84:dc:b6:79:cb:f0:37:
cc:06:f5:b1:19:ca:e9:0f:c1:a6:11:a5:f7:0e:e6:43:08:07:
d5:df:72:5b:4b:71:20:d4:30:f6:1b:5a:34:1d:9e:7f:22:43:
74:ee:73:ea:08:e4:52:56:49:1e:84:d4:5b:e8:26:44:44:7b:
bb:91:b0:30:10:60:8b:f4:b9:4c:62:26:ae:36:bd:76:53:5e:
9d:cc:c1:bf:5f:e8:37:10:85:7b:75:f1:e5:ec:04:f8:67:e1:
c7:6a:48:ce
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4
MDZBNTIxOEEwHhcNMjQwODI0MjAzODU3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmNhNDRlMC1hMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7NzW1AiY4pgUdu76WoFQWkRn2gSNoxMAvS9tAsUgd9RkHzvehti4X0S1c/0
PlscLobKWxXR/r7YWp4OKrU6NCqVSQpQD/UIuZX53+QjdKOORK8qAjvS1bp7mmAj
A0E3uYfxU4qK5FlJ1twTXp5qmYaCg0nwXAwetvemClg0z71XjyifVkeU+ueiOa4j
ZceqTHcCbB+W9g/fuGPFgCx7rza0khyNh+g2z88wcR7qgVgx+hV1QHSECOaghiqf
vQxLQxeJtXGFujwCqLe+r21FkqO1ZQZmsSPvDH73kpfahj4flYYzUGFmEMoCAQp5
NoBLwgsFdPOEEkeBHEtCfVwLKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNkHi56m
LqBohjwJTHLldVxNFnfVMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz
Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODI1MDIvREExNkM2M0E3M0NDMTFFQUEzOTk1MzI2QzRGOUFFMDIvQUFCNDNCRDYy
NDdGMTFFRTlDRUE0OTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAnbUIwDQYJKoZIhvcNAQELBQADggEBAGZ1j6Lx7c/84xNr
uLXm8tzzwlxCOLKMuIB4KD6SXyLXT0Eslgc8vIE2h6sODC2I3ZrXA00P/v67+/Dd
iYZRHxrweazA0LUa+J3HrzX8gHN572bGkCc3r30U8yV5RYrwFtqKYueAtRWz0I8Z
/sj53FEUBeP4HZH8DiKw4ix8+4cZPyj/f65kf7ST6pm9rJ+uKtjtITcUQt65cde/
hNy2ecvwN8wG9bEZyukPwaYRpfcO5kMIB9XfcltLcSDUMPYbWjQdnn8iQ3Tuc+oI
5FJWSR6E1FvoJkREe7uRsDAQYIv0uUxiJq42vXZTXp3Mwb9f6DcQhXt18eXsBPhn
4cdqSM4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:59:11 2025 by rpki-client