Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0F85AB663E011ECB11B2C79C4F9AE02.roa
File: F0F85AB663E011ECB11B2C79C4F9AE02.roa (raw, json)
Hash identifier: B3L9BZggPs6yypN7i/VG+e15LvCUhUuKbw6feY0/iE8=
Subject key identifier: 44:DA:98:FA:6F:44:78:B5:2A:B2:9D:AC:21:3D:36:0E:B0:C5:45:4B
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4551
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0F85AB663E011ECB11B2C79C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:13 +0000
ROA not before: Thu 05 Sep 2024 03:32:13 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131415
IP address blocks: 203.119.64.0/22 maxlen: 24
2001:dc8:9000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17745 (0x4551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:32:13 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9263d-61fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:e9:e1:ea:e7:2d:25:1d:54:84:8c:f9:54:
6d:27:56:c8:b8:df:ad:4a:35:1a:e0:82:63:90:2f:
ae:69:ff:cd:f3:a5:f3:64:fc:33:af:5d:cb:2d:a3:
9d:25:7b:c8:a1:a2:48:19:1f:a6:14:34:fc:15:70:
99:0e:52:3f:4f:0c:8b:56:b1:89:9d:40:6b:37:4f:
6b:aa:f3:b0:96:ee:f5:70:2a:6f:b1:c4:3d:6c:0c:
77:13:d5:97:3f:b3:bd:e1:21:3a:ff:af:af:63:3a:
47:1c:ac:4c:b2:68:3f:6b:6d:7c:fb:56:83:da:b8:
4f:e2:62:60:99:2e:d8:12:dc:38:52:ce:05:0e:d1:
b0:fc:fb:a5:c1:a8:47:22:b3:ac:0d:95:0f:03:2b:
a6:c7:fb:b7:44:a0:60:f5:54:84:ce:a6:83:5b:d0:
ae:4a:fc:c6:f1:10:00:6a:14:0c:8c:14:b6:d5:4b:
62:e9:b7:50:78:89:7a:7d:52:46:be:dd:f1:b7:5f:
97:65:d2:32:69:7c:17:e2:8d:84:5b:43:7d:20:15:
68:97:54:28:c3:37:ca:a6:ce:6f:39:85:98:06:45:
cd:42:02:7e:8d:c8:3d:e9:00:2e:c0:9f:be:2b:63:
be:07:52:aa:e3:59:fb:8e:2b:a0:11:12:d6:15:a7:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:98:FA:6F:44:78:B5:2A:B2:9D:AC:21:3D:36:0E:B0:C5:45:4B
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0F85AB663E011ECB11B2C79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.119.64.0/22
IPv6:
2001:dc8:9000::/48
Signature Algorithm: sha256WithRSAEncryption
2a:99:58:bf:96:b7:03:0e:a9:e0:6d:6d:82:e9:27:8d:ac:34:
e2:41:9b:9e:a6:06:35:f8:2e:1b:7b:0d:bc:c5:6f:89:a1:e5:
1f:97:e3:fd:3d:25:1f:fd:ae:6b:ae:26:57:6b:70:d8:5f:68:
79:77:f9:8d:9f:68:10:cc:9a:6e:19:ee:fb:98:38:eb:58:ce:
f0:26:25:2b:16:a0:2a:20:ff:82:14:b6:2a:cd:45:1e:82:fc:
de:b4:ee:cb:71:57:cf:59:34:d2:92:15:57:6b:03:2b:0c:87:
bd:2d:dc:9e:77:d1:25:fe:77:21:34:9a:34:54:4e:96:fd:4d:
5a:6e:f4:94:b5:bc:01:76:dc:28:de:57:1b:0a:5f:b6:41:6a:
51:53:ea:a4:48:25:7a:ca:23:7d:f0:47:50:b6:47:09:7d:e4:
e8:bf:5a:75:9c:23:cc:37:5e:69:c3:74:2b:58:71:cd:14:e2:
b7:02:7c:bf:24:ec:d8:fe:a7:c5:d5:08:19:49:c7:fc:25:5b:
6f:3b:d8:8a:e9:ae:17:83:ed:d9:55:9c:a1:66:a9:84:11:bd:
dc:97:b1:0d:92:d3:a6:44:32:4f:3c:1f:55:a9:93:68:8e:7c:
20:7b:26:ef:92:d2:96:30:25:99:ea:ef:73:7e:64:51:f7:5a:
b3:0d:a5:e6
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICRVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjEzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjYzZC02MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwVPp4ernLSUdVISM+VRtJ1bIuN+tSjUa4IJjkC+uaf/N86XzZPwzr13LLaOd
JXvIoaJIGR+mFDT8FXCZDlI/TwyLVrGJnUBrN09rqvOwlu71cCpvscQ9bAx3E9WX
P7O94SE6/6+vYzpHHKxMsmg/a218+1aD2rhP4mJgmS7YEtw4Us4FDtGw/PulwahH
IrOsDZUPAyumx/u3RKBg9VSEzqaDW9CuSvzG8RAAahQMjBS21Uti6bdQeIl6fVJG
vt3xt1+XZdIyaXwX4o2EW0N9IBVol1QowzfKps5vOYWYBkXNQgJ+jcg96QAuwJ++
K2O+B1Kq41n7jiugERLWFae6IwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFETamPpv
RHi1KrKdrCE9Ng6wxUVLMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRjBGODVBQjY2
M0UwMTFFQ0IxMUIyQzc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBALLd0AwDwQCAAIwCQMHACABDciQADANBgkqhkiG9w0BAQsF
AAOCAQEAKplYv5a3Aw6p4G1tguknjaw04kGbnqYGNfguG3sNvMVviaHlH5fj/T0l
H/2ua64mV2tw2F9oeXf5jZ9oEMyabhnu+5g461jO8CYlKxagKiD/ghS2Ks1FHoL8
3rTuy3FXz1k00pIVV2sDKwyHvS3cnnfRJf53ITSaNFROlv1NWm70lLW8AXbcKN5X
GwpftkFqUVPqpEglesojffBHULZHCX3k6L9adZwjzDdeacN0K1hxzRTitwJ8vyTs
2P6nxdUIGUnH/CVbbzvYiumuF4Pt2VWcoWaphBG93JexDZLTpkQyTzwfVamTaI58
IHsm75LSljAlmervc35kUfdasw2l5g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:20 2025 by rpki-client