Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/912586FA7F4F11ED96FDE369C4F9AE02.roa
File: 912586FA7F4F11ED96FDE369C4F9AE02.roa (raw, json)
Hash identifier: vg/uug9ogWENghuoz8JvK8TWhFT7WTN1jNAJcLX1AUM=
Subject key identifier: 8B:67:B1:4B:AA:92:DD:02:AB:41:CC:54:E7:6E:48:01:8C:C0:55:21
Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Certificate serial: 018F
Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/912586FA7F4F11ED96FDE369C4F9AE02.roa
Signing time: Sun 15 Dec 2024 02:25:50 +0000
ROA not before: Sun 15 Dec 2024 02:25:50 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 8071
IP address blocks: 167.220.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3
Validity
Not Before: Dec 15 02:25:50 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=675e3e2d-dcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:a2:d3:bb:ef:00:1d:45:4e:af:a7:9b:de:
b7:d8:61:f1:a5:c5:8c:3a:1b:87:41:48:5e:be:a8:
73:06:a0:63:93:60:96:72:21:e0:6b:c4:d6:0f:4c:
60:7c:1f:36:3e:55:2a:10:be:32:52:7a:51:7e:7b:
8a:f5:6a:cc:1e:e6:8d:f7:ca:52:f9:33:51:40:0e:
db:6a:c9:62:32:8c:7a:fb:66:3b:99:49:0b:fb:78:
ad:01:a8:e7:19:c8:f6:bf:f5:14:d3:47:8e:0d:20:
93:ae:0f:5c:a3:06:36:91:e0:1b:ef:bc:4b:68:27:
80:f4:36:ce:7f:2f:c0:60:a2:53:e3:0d:d3:47:04:
86:89:bf:31:fc:88:37:91:2b:ba:af:2e:8e:b9:ca:
d7:65:33:72:0c:5b:69:3b:db:01:ad:24:d3:46:55:
0f:8a:6a:f7:c1:6f:94:a3:a6:50:ec:79:8a:16:b2:
8f:c7:cb:ec:c2:4f:19:61:aa:08:b7:be:92:fb:cd:
42:a7:a3:f4:30:25:33:31:21:51:f9:4c:d0:ca:8c:
9f:c9:24:6d:a1:b5:73:26:73:37:a6:3b:5d:37:86:
08:56:b1:c0:72:bd:21:d5:e4:35:08:84:44:5c:c2:
8f:6b:c3:68:16:b7:93:94:8b:e2:1a:c6:43:d0:d7:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:67:B1:4B:AA:92:DD:02:AB:41:CC:54:E7:6E:48:01:8C:C0:55:21
X509v3 Authority Key Identifier:
keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/912586FA7F4F11ED96FDE369C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
167.220.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:50:88:04:bc:29:e0:ca:47:4a:62:8a:c1:af:0c:67:da:17:
b9:83:1a:55:35:62:4e:dd:22:b5:dc:d3:bb:29:32:04:c8:01:
8a:7e:69:d4:69:37:2a:2d:9c:1b:ef:88:ab:6a:e4:8f:c1:ee:
e7:a1:c9:1f:8c:e2:e5:f0:bc:2d:62:c6:30:c7:85:e9:1e:59:
cc:06:02:1f:af:e6:66:1d:2d:6f:87:e6:3a:be:68:a8:1f:40:
ea:93:ac:c7:7a:85:64:1c:c0:7a:1c:62:a5:7a:10:76:e7:7f:
bf:3c:65:dd:b9:6b:b1:6c:99:69:fd:a9:47:f2:52:1a:5d:c1:
a7:31:69:14:96:35:42:58:89:8f:71:b4:0a:be:d9:c7:c4:ac:
b4:82:47:f7:dc:a0:b5:c9:d9:c3:6e:98:c5:42:ff:f4:ba:5b:
f4:19:bf:02:c2:a2:50:db:4e:e1:cf:30:57:ac:70:b7:70:64:
be:9d:8b:b4:6f:5f:b0:7f:54:46:2f:05:85:a8:db:ee:a7:46:
d8:39:7d:f6:56:ef:fb:e7:df:b2:0e:55:74:91:ad:8e:82:d3:
2c:c6:64:aa:6f:4a:31:35:c6:5d:3b:7c:45:d8:26:a1:22:c6:
ee:05:00:9a:2b:a0:8e:d4:ad:06:d1:69:b6:c6:d6:1d:d1:d0:
34:08:64:0f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx
MTBENDVCRTMwHhcNMjQxMjE1MDIyNTUwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzVlM2UyZC1kY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsIui07vvAB1FTq+nm9632GHxpcWMOhuHQUhevqhzBqBjk2CWciHga8TWD0xg
fB82PlUqEL4yUnpRfnuK9WrMHuaN98pS+TNRQA7basliMox6+2Y7mUkL+3itAajn
Gcj2v/UU00eODSCTrg9cowY2keAb77xLaCeA9DbOfy/AYKJT4w3TRwSGib8x/Ig3
kSu6ry6OucrXZTNyDFtpO9sBrSTTRlUPimr3wW+Uo6ZQ7HmKFrKPx8vswk8ZYaoI
t76S+81Cp6P0MCUzMSFR+UzQyoyfySRtobVzJnM3pjtdN4YIVrHAcr0h1eQ1CIRE
XMKPa8NoFreTlIviGsZD0Ncm9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFItnsUuq
kt0Cq0HMVOduSAGMwFUhMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD
REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTNFM0YvMzA1RUI4NzY3Q0RCMTFFREFCODQ0QzE5QzRGOUFFMDIvOTEyNTg2RkE3
RjRGMTFFRDk2RkRFMzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKn3OgwDQYJKoZIhvcNAQELBQADggEBAE9QiAS8KeDKR0pi
isGvDGfaF7mDGlU1Yk7dIrXc07spMgTIAYp+adRpNyotnBvviKtq5I/B7uehyR+M
4uXwvC1ixjDHhekeWcwGAh+v5mYdLW+H5jq+aKgfQOqTrMd6hWQcwHocYqV6EHbn
f788Zd25a7FsmWn9qUfyUhpdwacxaRSWNUJYiY9xtAq+2cfErLSCR/fcoLXJ2cNu
mMVC//S6W/QZvwLColDbTuHPMFescLdwZL6di7RvX7B/VEYvBYWo2+6nRtg5ffZW
7/vn37IOVXSRrY6C0yzGZKpvSjE1xl07fEXYJqEixu4FAJoroI7UrQbRabbG1h3R
0DQIZA8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:33 2025 by rpki-client