Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa
File: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (raw, json)
Hash identifier: kyaeP4GnWsbXlxCp4D/6i9NXeFHyku6R/a5qytSPkww=
Subject key identifier: F0:B2:47:14:F9:8B:AC:94:61:E9:80:8F:BC:7F:23:E1:B3:1C:86:66
Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F
Certificate serial: 07F5
Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa
Signing time: Sat 02 Mar 2024 21:59:49 +0000
ROA not before: Sat 02 Mar 2024 21:59:49 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 55707
IP address blocks: 119.63.200.0/21 maxlen: 24
202.45.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037 (0x7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F
Validity
Not Before: Mar 2 21:59:49 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65e3a155-22a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:43:7f:48:61:a0:49:a0:23:2d:b7:56:4b:2a:
bd:25:43:72:c7:b4:e5:e5:4a:ca:7b:14:1d:ee:59:
72:04:6b:9f:22:ef:49:69:52:78:9c:ce:1c:61:7e:
c0:d7:68:9c:30:6b:1c:d6:40:d3:f1:14:d8:34:f0:
7c:99:e4:05:fe:0d:be:23:7a:1b:ff:6b:d6:cb:08:
d7:89:24:60:a4:75:8c:df:45:fe:05:6d:7e:74:18:
fd:2a:b0:bf:72:8c:56:4d:8a:83:fb:d8:a9:b3:52:
d8:6f:19:5b:a6:33:cf:c9:54:be:ff:3a:5e:c0:ea:
0e:22:ce:e1:1c:65:34:5e:a2:1f:b7:16:20:29:5c:
18:5b:1a:84:14:60:6f:d5:a9:74:35:53:df:a2:19:
1b:29:c1:4a:ba:aa:ee:eb:1c:b5:98:0a:dd:2e:45:
24:82:eb:20:32:a6:a6:81:d5:6b:7e:98:5c:83:62:
d0:47:c6:fc:4a:b8:4b:6a:0c:57:85:30:34:3b:83:
1e:3b:7a:8b:84:b7:03:30:ed:87:cb:ea:c9:46:40:
47:6f:69:ce:28:08:59:03:5a:df:6d:8d:d3:44:ad:
d9:09:45:73:a6:d8:d8:e1:1b:de:14:fe:eb:4a:b4:
1d:3d:e8:29:92:49:f9:5d:a2:e7:9c:63:3a:e2:9d:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:47:14:F9:8B:AC:94:61:E9:80:8F:BC:7F:23:E1:B3:1C:86:66
X509v3 Authority Key Identifier:
keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.63.200.0/21
202.45.152.0/22
Signature Algorithm: sha256WithRSAEncryption
23:09:cb:e7:02:ab:48:ed:73:8e:a6:ff:07:3e:55:73:57:74:
2a:d9:cc:b6:0b:e9:0d:c8:4c:0e:37:51:af:da:8f:4a:10:02:
37:08:59:bf:0d:94:36:16:3d:37:37:e6:6b:c3:b5:ce:93:5c:
e1:40:0a:ae:a4:c9:6b:e4:87:a6:f7:01:d3:7b:be:93:c3:6f:
6d:b3:02:3d:86:98:6c:e4:50:9a:bf:c3:2f:a6:70:b9:db:5e:
94:cd:1f:e3:6b:9e:86:6a:49:c4:f0:42:c9:d2:ad:81:dc:67:
02:74:64:4f:22:f1:93:5a:11:44:f1:24:58:38:4d:00:98:3e:
24:6e:d3:ea:69:65:62:c7:df:55:f2:0e:98:4e:6f:c3:95:06:
71:8e:e3:db:8e:fc:38:4a:10:44:68:92:d8:3e:81:b9:98:64:
a5:b8:f3:4c:df:38:2e:47:67:6c:c1:d4:3b:fa:7a:9c:52:69:
84:74:56:ce:ae:0d:55:1b:a3:4f:68:4a:f1:49:55:1a:01:9e:
37:9c:20:79:52:91:0e:bf:19:cf:0b:5a:c0:7d:a7:b6:16:27:
51:0f:81:02:4f:a6:59:57:19:98:0b:42:44:67:92:22:46:a9:
5d:d6:c9:31:c2:2f:8f:47:fa:7c:34:bc:ae:01:42:2c:74:3f:
9b:e0:3c:4e
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF
OTYwRjA5NkYwHhcNMjQwMzAyMjE1OTQ5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWUzYTE1NS0yMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6UN/SGGgSaAjLbdWSyq9JUNyx7Tl5UrKexQd7llyBGufIu9JaVJ4nM4cYX7A
12icMGsc1kDT8RTYNPB8meQF/g2+I3ob/2vWywjXiSRgpHWM30X+BW1+dBj9KrC/
coxWTYqD+9ips1LYbxlbpjPPyVS+/zpewOoOIs7hHGU0XqIftxYgKVwYWxqEFGBv
1al0NVPfohkbKcFKuqru6xy1mArdLkUkgusgMqamgdVrfphcg2LQR8b8SrhLagxX
hTA0O4MeO3qLhLcDMO2Hy+rJRkBHb2nOKAhZA1rfbY3TRK3ZCUVzptjY4RveFP7r
SrQdPegpkkn5XaLnnGM64p1a7wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPCyRxT5
i6yUYemAj7x/I+GzHIZmMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw
RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUyNjIvRjdBNkQ1OUNCMEZDMTFFQTkyMjg5QzQxQzRGOUFFMDIvREZDMjFDRDhC
MUNGMTFFQUE4NzMyNzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAN3P8gDBALKLZgwDQYJKoZIhvcNAQELBQADggEBACMJy+cC
q0jtc46m/wc+VXNXdCrZzLYL6Q3ITA43Ua/aj0oQAjcIWb8NlDYWPTc35mvDtc6T
XOFACq6kyWvkh6b3AdN7vpPDb22zAj2GmGzkUJq/wy+mcLnbXpTNH+NrnoZqScTw
QsnSrYHcZwJ0ZE8i8ZNaEUTxJFg4TQCYPiRu0+ppZWLH31XyDphOb8OVBnGO49uO
/DhKEERoktg+gbmYZKW480zfOC5HZ2zB1Dv6epxSaYR0Vs6uDVUbo09oSvFJVRoB
njecIHlSkQ6/Gc8LWsB9p7YWJ1EPgQJPpllXGZgLQkRnkiJGqV3WyTHCL49H+nw0
vK4BQix0P5vgPE4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:05:02 2025 by rpki-client