Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa
File: 99D18D463C0211EAA729693AC4F9AE02.roa (raw, json)
Hash identifier: tLtn7CFG0HbQ9XWzYKgOAxAROG1jTzb9mpWP5oMuzzI=
Subject key identifier: 55:67:BD:88:F9:EA:C8:0B:67:26:00:3C:5F:24:F4:FB:5D:1A:AA:5D
Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial: 0A83
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa
Signing time: Wed 31 Jan 2024 15:41:00 +0000
ROA not before: Wed 31 Jan 2024 15:41:00 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 56038
IP address blocks: 137.83.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Validity
Not Before: Jan 31 15:41:00 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65ba6a0c-e3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:9c:b7:fc:0d:16:63:c5:93:68:51:eb:79:
93:2a:68:39:c0:8d:f3:c4:b1:d2:cd:44:00:61:eb:
e5:f6:39:74:5f:e2:07:7c:c6:50:a7:38:f0:b0:bc:
77:48:41:29:c0:fc:21:6c:88:02:f8:75:30:a5:e5:
1a:e3:88:e7:a4:67:4d:fa:64:ae:f0:20:3b:01:a4:
a4:73:34:ec:68:ef:49:77:df:e7:12:a5:c9:d6:96:
12:38:d0:64:39:09:c9:89:49:95:6e:28:cc:52:75:
9c:b6:95:57:bd:a2:bf:8d:36:fe:e6:72:62:a6:07:
22:15:31:52:99:eb:c9:a4:e9:38:bd:2c:15:ad:1e:
7d:46:77:34:30:19:1d:30:64:b8:2c:78:a6:a6:78:
3c:65:65:c5:09:4e:de:f7:c5:83:ed:a6:81:43:54:
12:f9:ca:37:23:90:9c:5b:cd:b4:4e:0c:ab:b1:c7:
23:c7:ea:f5:37:6b:71:91:71:1c:ab:df:09:70:96:
3d:c2:42:3a:ff:e3:f2:a9:00:4b:9a:4f:15:1e:ff:
0a:1a:08:dc:12:af:53:54:9c:73:65:11:d5:dc:6c:
2c:b6:a3:1c:f1:32:c2:01:c3:4e:76:f8:a9:1d:3f:
66:1d:b4:18:50:12:0f:d4:6d:32:99:eb:f8:7e:90:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:67:BD:88:F9:EA:C8:0B:67:26:00:3C:5F:24:F4:FB:5D:1A:AA:5D
X509v3 Authority Key Identifier:
keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.83.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f8:38:ce:d2:34:8e:84:e3:26:b5:57:6c:93:cb:ba:8d:99:
8e:83:45:8f:e4:37:33:31:0a:f2:bf:fc:56:7e:41:86:63:a0:
9b:94:43:64:37:7f:67:98:cc:bb:c2:69:dd:b4:5d:99:c7:fc:
98:ab:71:37:b6:cd:9c:99:1b:15:e7:ad:b5:a7:c5:98:f9:10:
5b:22:c8:8b:9a:47:b5:69:90:73:1c:c4:64:99:9b:1d:76:9a:
4b:63:2a:e0:8d:ad:a0:59:d9:65:43:95:7b:c0:60:94:53:c0:
a2:35:73:ed:31:2e:32:8e:4d:67:f9:42:b3:8f:5d:9b:e2:97:
3c:05:38:64:40:78:ce:ca:72:7a:19:f0:c9:74:e2:19:23:ff:
bf:9c:ff:60:2a:04:ca:64:32:e0:f4:f8:df:20:6e:db:ac:98:
8c:ef:5b:96:c9:41:b5:28:d2:b8:b6:1e:00:75:7c:95:62:5c:
98:30:64:f1:a0:78:b1:42:1e:77:91:b7:32:dd:ad:4b:56:7a:
0f:f2:48:06:92:50:4e:59:38:e5:4a:c6:ca:c2:4a:17:e6:44:
59:27:0d:84:e8:33:8e:aa:e2:23:8f:85:5e:9f:f4:25:86:38:
d7:28:f5:35:f0:ce:63:c4:42:86:5a:3f:57:84:dd:e8:f8:f3:
90:21:8e:5e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcxQ0IxMTAvBgNVBAUTKDdEMDQ1MTY1QjI5QTY4QUZDQjhCQTgxNTk5Q0UzMDY3
NDU0NEZEOEYwHhcNMjQwMTMxMTU0MTAwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWJhNmEwYy1lM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0GOct/wNFmPFk2hR63mTKmg5wI3zxLHSzUQAYevl9jl0X+IHfMZQpzjwsLx3
SEEpwPwhbIgC+HUwpeUa44jnpGdN+mSu8CA7AaSkczTsaO9Jd9/nEqXJ1pYSONBk
OQnJiUmVbijMUnWctpVXvaK/jTb+5nJipgciFTFSmevJpOk4vSwVrR59Rnc0MBkd
MGS4LHimpng8ZWXFCU7e98WD7aaBQ1QS+co3I5CcW820Tgyrsccjx+r1N2txkXEc
q98JcJY9wkI6/+PyqQBLmk8VHv8KGgjcEq9TVJxzZRHV3GwstqMc8TLCAcNOdvip
HT9mHbQYUBIP1G0ymev4fpA8bwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFVnvYj5
6sgLZyYAPF8k9PtdGqpdMB8GA1UdIwQYMBaAFH0EUWWymmivy4uoFZnOMGdFRP2P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi83QTc1MEEwQTJE
RDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFLX0xpNmdWbWM0d1owVkVf
WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZRUlJaYkthYUtfTGk2Z1ZtYzR3WjBWRV9ZOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTcxQ0IvN0E3NTBBMEEyREQ4MTFFQTlDMzUyMDVEQzRGOUFFMDIvOTlEMThENDYz
QzAyMTFFQUE3Mjk2OTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACJUwwwDQYJKoZIhvcNAQELBQADggEBAKP4OM7SNI6E4ya1
V2yTy7qNmY6DRY/kNzMxCvK//FZ+QYZjoJuUQ2Q3f2eYzLvCad20XZnH/JircTe2
zZyZGxXnrbWnxZj5EFsiyIuaR7VpkHMcxGSZmx12mktjKuCNraBZ2WVDlXvAYJRT
wKI1c+0xLjKOTWf5QrOPXZvilzwFOGRAeM7KcnoZ8Ml04hkj/7+c/2AqBMpkMuD0
+N8gbtusmIzvW5bJQbUo0ri2HgB1fJViXJgwZPGgeLFCHneRtzLdrUtWeg/ySAaS
UE5ZOOVKxsrCShfmRFknDYToM46q4iOPhV6f9CWGONco9TXwzmPEQoZaP1eE3ej4
85Ahjl4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:02:47 2025 by rpki-client