Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7D232E6033A611EB8B013530C4F9AE02.roa
File: 7D232E6033A611EB8B013530C4F9AE02.roa (raw, json)
Hash identifier: 7lwNL3t/JdazFMQVAAWu8rGphtVMmdlmg5/1e8s3fEI=
Subject key identifier: A9:CA:E7:73:7F:40:B3:BD:C6:86:21:73:48:E6:A1:EC:DC:BA:48:9D
Certificate issuer: /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial: 0699
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7D232E6033A611EB8B013530C4F9AE02.roa
Signing time: Tue 02 Jul 2024 23:11:49 +0000
ROA not before: Tue 02 Jul 2024 23:11:49 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 2497
IP address blocks: 149.234.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1689 (0x699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Validity
Not Before: Jul 2 23:11:49 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66848934-cd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:9b:18:0f:91:be:98:bd:ba:9d:0f:73:b7:
e8:0f:d2:59:d0:37:a5:7c:a8:19:f9:ba:27:7b:44:
5c:ff:f8:51:4b:2b:85:8f:82:39:24:21:70:00:90:
1f:bd:65:9a:df:88:a4:af:ce:e1:32:be:77:54:03:
8f:c6:77:36:96:af:98:d6:df:2c:9a:26:d3:6e:22:
d3:74:7b:ef:ed:d6:ab:72:53:98:dd:e8:d7:42:9e:
1b:39:81:ed:9b:fa:f7:91:c2:09:a2:63:2a:96:d3:
36:11:50:23:77:e3:a0:53:a9:cd:22:57:a7:bf:69:
c2:d4:6f:19:78:a1:dc:cc:be:56:e7:7a:a9:b4:9f:
c0:35:f7:7f:5d:c2:cd:77:87:08:b0:ea:e0:b1:73:
54:cf:4a:2c:ee:33:8f:ef:c7:de:73:ac:29:d3:bb:
6d:23:c1:8a:c2:1d:91:f5:a7:92:ee:3f:8b:d4:5c:
aa:6f:e5:ed:18:18:3a:54:9b:c6:fb:2c:48:eb:65:
33:0b:e7:b9:9b:ae:7b:f6:92:fa:bb:3c:83:f2:1f:
a5:0a:15:e8:ad:ed:b7:22:af:21:20:23:65:70:ef:
32:69:bf:dd:8c:77:b7:f5:59:1f:fb:27:f1:0a:df:
62:9a:fb:65:a5:55:31:dd:cc:b7:09:a7:5c:0d:d9:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:E7:73:7F:40:B3:BD:C6:86:21:73:48:E6:A1:EC:DC:BA:48:9D
X509v3 Authority Key Identifier:
keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7D232E6033A611EB8B013530C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
149.234.188.0/24
Signature Algorithm: sha256WithRSAEncryption
00:61:04:ba:4b:7c:1c:e2:d0:af:2d:d0:da:bd:44:cd:ae:91:
be:08:64:34:07:d7:3a:cf:40:0e:61:19:d6:d4:56:89:31:1b:
46:d0:3d:77:01:e3:6b:46:93:e2:18:f4:f7:c5:c7:85:7e:7d:
24:83:4e:88:a0:f8:01:4b:d6:91:5b:0e:3a:4d:2f:80:c8:d9:
86:bf:09:66:8b:78:e8:cd:e8:c2:b7:37:ee:a7:1b:00:f3:9d:
03:93:c4:29:2b:a9:5a:1f:4b:38:0a:aa:21:fb:3c:46:0a:17:
a4:0c:f9:09:c6:26:2d:e2:da:3c:b6:d9:dc:96:93:23:8a:14:
08:37:fa:6c:9e:bd:49:78:06:03:e9:db:bc:74:07:e2:31:f0:
8a:1f:bf:d8:34:8e:fe:5d:6c:08:54:28:b1:63:b1:f2:72:26:
21:71:ab:26:38:94:d8:a8:b5:1b:cb:80:f2:ee:13:97:28:9d:
8e:57:69:f3:a1:ba:9a:c7:93:b5:ff:f0:22:4a:bd:0d:50:66:
22:51:f8:02:fb:f5:89:5a:91:53:26:c1:ef:10:04:47:a4:b0:
cb:17:10:51:69:7f:43:fd:a6:e9:41:47:12:45:0e:a9:a9:68:
e4:78:db:da:de:77:94:79:fc:52:7f:87:34:30:ca:34:25:40:
2e:ac:37:fd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwNkExMTAvBgNVBAUTKEJDQjgwREU0NDcwNUNGQzRGODM5Nzg1OTBDOUYzRkMy
RTJDMkY4NTIwHhcNMjQwNzAyMjMxMTQ5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg0ODkzNC1jZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1SbGA+Rvpi9up0Pc7foD9JZ0DelfKgZ+bone0Rc//hRSyuFj4I5JCFwAJAf
vWWa34ikr87hMr53VAOPxnc2lq+Y1t8smibTbiLTdHvv7darclOY3ejXQp4bOYHt
m/r3kcIJomMqltM2EVAjd+OgU6nNIlenv2nC1G8ZeKHczL5W53qptJ/ANfd/XcLN
d4cIsOrgsXNUz0os7jOP78fec6wp07ttI8GKwh2R9aeS7j+L1Fyqb+XtGBg6VJvG
+yxI62UzC+e5m6579pL6uzyD8h+lChXore23Iq8hICNlcO8yab/djHe39Vkf+yfx
Ct9imvtlpVUx3cy3CadcDdkXowIDAQABo4IClTCCApEwHQYDVR0OBBYEFKnK53N/
QLO9xoYhc0jmoezcukidMB8GA1UdIwQYMBaAFLy4DeRHBc/E+Dl4WQyfP8LiwvhS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GMUE5QkFCQzMz
QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi92TGdONUVjRno4VDRPWGhaREo4X3d1TEMt
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZMZ041RWNGejhUNE9YaFpESjhfd3VMQy1GSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUYwNkEvRjFBOUJBQkMzM0E0MTFFQkFDNTQ4NTJFQzRGOUFFMDIvN0QyMzJFNjAz
M0E2MTFFQjhCMDEzNTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACV6rwwDQYJKoZIhvcNAQELBQADggEBAABhBLpLfBzi0K8t
0Nq9RM2ukb4IZDQH1zrPQA5hGdbUVokxG0bQPXcB42tGk+IY9PfFx4V+fSSDToig
+AFL1pFbDjpNL4DI2Ya/CWaLeOjN6MK3N+6nGwDznQOTxCkrqVofSzgKqiH7PEYK
F6QM+QnGJi3i2jy22dyWkyOKFAg3+myevUl4BgPp27x0B+Ix8Iofv9g0jv5dbAhU
KLFjsfJyJiFxqyY4lNiotRvLgPLuE5conY5XafOhuprHk7X/8CJKvQ1QZiJR+AL7
9YlakVMmwe8QBEeksMsXEFFpf0P9pulBRxJFDqmpaOR429red5R5/FJ/hzQwyjQl
QC6sN/0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:26:42 2025 by rpki-client