Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa
File: 08AF618871AB11EFB81ED37EC4F9AE02.roa (raw, json)
Hash identifier: H6wFp/NH+6z23J96UWXmKdMRoLofVK3B3YCLmq4N9xk=
Subject key identifier: 99:ED:27:FE:A1:DF:13:DD:DC:DD:24:12:17:07:B1:04:4B:54:5A:26
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: A4
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa
Signing time: Sat 21 Dec 2024 05:49:41 +0000
ROA not before: Sat 21 Dec 2024 05:49:41 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 133919
IP address blocks: 202.29.104.0/24 maxlen: 24
2001:3c8:100f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 21 05:49:41 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676656f5-36cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:fe:27:e0:0a:0b:5b:bb:d6:8e:a3:85:55:
28:64:a3:0f:84:9d:f7:d8:17:4d:84:cc:ed:db:03:
8f:b5:91:d8:67:a9:d3:89:18:cd:1d:0d:30:c1:9f:
d9:91:85:da:f0:e8:9b:f7:54:63:34:a0:d4:2d:1e:
2c:57:84:39:bd:cc:b2:f1:43:6f:35:7a:2b:78:fd:
16:fa:fd:65:07:81:85:8d:2f:8a:dd:0d:41:14:07:
3c:f9:54:c0:c1:29:2f:fe:69:fb:cc:5a:a6:c3:f7:
bd:9e:b2:98:f6:f1:3c:35:23:9a:a6:a0:d2:7c:9e:
2f:df:5d:2f:ed:29:bf:4d:cf:47:4f:74:d6:13:d7:
80:71:55:70:fe:54:9b:86:60:ff:e9:8a:e3:19:d1:
d8:25:22:b6:23:9d:f3:38:21:48:57:f9:82:3a:46:
ac:de:6f:59:12:33:e0:26:1f:df:00:db:27:36:b7:
90:22:e4:f7:6d:1c:2d:a9:e8:e7:22:cf:e1:9c:86:
e6:53:cf:c3:16:34:b8:a6:59:60:e9:cc:47:a5:0e:
89:c8:15:da:d5:67:3c:7b:b9:18:85:1b:2d:3d:ec:
63:92:78:50:8d:1d:7c:63:1e:ea:81:27:d2:54:82:
4b:bc:35:1c:a6:19:9e:03:eb:6e:a6:5d:65:96:94:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:27:FE:A1:DF:13:DD:DC:DD:24:12:17:07:B1:04:4B:54:5A:26
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/08AF618871AB11EFB81ED37EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.29.104.0/24
IPv6:
2001:3c8:100f::/48
Signature Algorithm: sha256WithRSAEncryption
47:c9:2d:c6:52:64:39:ba:d1:ae:a9:66:2b:73:c8:8f:4c:a5:
3e:5e:0d:cb:b0:19:ee:f2:16:a3:98:38:78:89:81:b1:98:52:
f5:5c:6e:b6:15:9d:f0:27:ad:9d:01:95:a5:a6:bc:3b:4f:15:
42:20:58:3b:d9:83:90:f2:b7:7f:a6:8f:de:e4:7e:bd:67:b6:
10:1e:f7:de:6b:8a:04:20:a6:d3:99:62:74:33:fb:f0:32:71:
3b:25:20:a9:ca:00:97:c8:bd:75:1f:c1:d7:49:08:12:ea:6e:
7c:8a:63:93:2f:63:a5:b4:97:d3:db:20:26:c9:4c:64:c0:6e:
c4:1a:74:ae:69:09:7f:8d:ee:be:1d:bb:3f:04:0f:7f:72:1e:
42:94:f9:14:67:fb:24:16:cb:36:9f:a7:74:e1:18:5b:4e:bb:
9a:77:da:3e:65:ff:0d:93:c2:48:94:10:d4:7c:ba:e4:23:fc:
ac:ff:3f:74:ea:55:3f:75:ca:56:f6:a8:bc:e9:fb:c7:68:86:
8c:04:c3:15:59:c4:6b:23:39:d7:88:2f:c7:89:25:ef:11:81:
b5:f5:f0:b2:ae:e4:8e:84:fa:ad:5e:fa:85:7b:9a:c6:37:bb:
6e:9e:7c:76:1c:39:41:28:65:4b:6b:ac:a7:2e:97:fb:14:44:
57:c7:0b:f9
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB
MzQ2MkUxMjYwHhcNMjQxMjIxMDU0OTQxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY2NTZmNS0zNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZz+J+AKC1u71o6jhVUoZKMPhJ332BdNhMzt2wOPtZHYZ6nTiRjNHQ0wwZ/Z
kYXa8Oib91RjNKDULR4sV4Q5vcyy8UNvNXoreP0W+v1lB4GFjS+K3Q1BFAc8+VTA
wSkv/mn7zFqmw/e9nrKY9vE8NSOapqDSfJ4v310v7Sm/Tc9HT3TWE9eAcVVw/lSb
hmD/6YrjGdHYJSK2I53zOCFIV/mCOkas3m9ZEjPgJh/fANsnNreQIuT3bRwtqejn
Is/hnIbmU8/DFjS4pllg6cxHpQ6JyBXa1Wc8e7kYhRstPexjknhQjR18Yx7qgSfS
VIJLvDUcphmeA+tupl1llpT46wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJntJ/6h
3xPd3N0kEhcHsQRLVFomMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF
ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvMDhBRjYxODg3
MUFCMTFFRkI4MUVEMzdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBADKHWgwDwQCAAIwCQMHACABA8gQDzANBgkqhkiG9w0BAQsF
AAOCAQEAR8ktxlJkObrRrqlmK3PIj0ylPl4Ny7AZ7vIWo5g4eImBsZhS9VxuthWd
8CetnQGVpaa8O08VQiBYO9mDkPK3f6aP3uR+vWe2EB733muKBCCm05lidDP78DJx
OyUgqcoAl8i9dR/B10kIEupufIpjky9jpbSX09sgJslMZMBuxBp0rmkJf43uvh27
PwQPf3IeQpT5FGf7JBbLNp+ndOEYW067mnfaPmX/DZPCSJQQ1Hy65CP8rP8/dOpV
P3XKVvaovOn7x2iGjATDFVnEayM514gvx4kl7xGBtfXwsq7kjoT6rV76hXuaxje7
bp58dhw5QShlS2uspy6X+xREV8cL+Q==
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:43 2025 by rpki-client