Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa
File: 7E87079C721B11EF81654E68C4F9AE02.roa (raw, json)
Hash identifier: 92w1fye0SxPyuMXOUo3oQSR/PutSLU3xezGSyrJIQ0o=
Subject key identifier: B3:12:01:73:F1:CC:F1:8E:C0:42:B6:C5:59:6D:18:5C:EF:B0:D6:62
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: B4
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa
Signing time: Sat 21 Dec 2024 05:49:55 +0000
ROA not before: Sat 21 Dec 2024 05:49:55 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 140618
IP address blocks: 202.28.72.0/24 maxlen: 24
202.28.73.0/24 maxlen: 24
202.28.74.0/24 maxlen: 24
202.28.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 21 05:49:55 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67665703-11f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:49:ce:ce:1b:5a:7c:81:fd:74:97:0b:3b:
7d:ca:e9:f7:5f:e1:2e:83:70:36:d7:ee:5d:89:ff:
11:82:36:0f:f8:3e:49:2f:3c:59:f6:89:e3:36:48:
09:dd:cd:30:1d:18:6d:d4:d0:f4:65:e2:7c:04:b8:
de:ae:a5:8f:be:01:07:2b:8c:81:4d:67:75:b5:7b:
65:d3:29:71:09:30:f7:26:50:2b:4a:39:75:93:98:
60:b0:c6:ef:49:4c:8f:58:3d:9e:4c:1f:24:6b:5d:
a1:1c:4b:ab:27:db:a3:37:96:92:89:e6:b2:44:51:
ba:f6:6f:04:4e:26:1a:21:0a:34:57:eb:61:dc:92:
8e:4d:c9:6b:ac:0b:53:25:9b:4a:d2:9c:00:cf:4d:
61:6f:91:77:bc:01:b3:a8:fe:76:fc:99:c5:98:b4:
66:29:23:1e:4e:17:fe:98:cc:28:3c:3a:a1:86:ba:
39:b2:3f:45:7f:2b:26:3c:73:43:ae:b3:10:d0:19:
75:ac:54:7e:9c:d5:32:e1:04:5a:73:80:32:d7:07:
38:a6:f6:6f:ca:58:ca:b8:dc:d9:1e:e1:d5:6d:6c:
3d:71:ea:2b:b5:8a:81:52:76:57:df:f3:6d:44:2a:
fc:15:aa:9b:27:11:5d:38:4d:8b:98:ca:98:7e:7d:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:12:01:73:F1:CC:F1:8E:C0:42:B6:C5:59:6D:18:5C:EF:B0:D6:62
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
49:01:2c:3e:8c:9d:83:fe:a2:e9:63:4b:b4:18:e8:07:f2:bc:
1d:8f:4e:6a:f3:5f:6e:a4:4f:61:d1:52:71:9a:6d:a6:e1:4f:
ea:24:d6:4c:0e:d9:21:38:10:0c:1c:1c:30:94:c0:6a:d9:2f:
05:78:84:ee:16:8c:17:50:ca:77:e2:f4:09:5a:97:98:a1:98:
7b:c1:6f:e1:17:e9:24:06:82:3a:40:62:a1:32:e8:b1:49:03:
dd:cb:fe:01:32:bf:74:58:5d:90:ac:55:47:d8:e9:23:c7:b6:
17:63:ea:a5:1c:96:16:32:f1:ea:a0:a5:2a:4b:13:24:ac:92:
5a:da:5a:6a:a9:e3:c9:44:6a:59:a3:17:4a:cb:5d:29:bb:29:
94:bf:d6:06:1f:3f:30:54:8a:56:c8:e5:23:c7:14:42:98:79:
c4:f9:54:47:5f:23:80:fc:df:8f:4e:80:6c:1b:60:9f:31:a4:
5f:a2:b7:1f:44:38:4b:a8:6b:45:8c:e5:a9:1f:b1:37:f8:98:
3c:28:91:87:b6:ad:a0:89:83:35:fd:de:a2:d9:f2:a9:50:98:
1c:d0:bb:84:d7:dd:55:43:8a:04:d4:e4:e4:d8:93:c2:58:b2:
fc:39:25:74:bf:3e:9a:ef:c9:57:e1:04:1c:89:e8:c7:b6:2a:
4a:2e:d0:0a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB
MzQ2MkUxMjYwHhcNMjQxMjIxMDU0OTU1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY2NTcwMy0xMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfVJzs4bWnyB/XSXCzt9yun3X+Eug3A21+5dif8RgjYP+D5JLzxZ9onjNkgJ
3c0wHRht1ND0ZeJ8BLjerqWPvgEHK4yBTWd1tXtl0ylxCTD3JlArSjl1k5hgsMbv
SUyPWD2eTB8ka12hHEurJ9ujN5aSieayRFG69m8ETiYaIQo0V+th3JKOTclrrAtT
JZtK0pwAz01hb5F3vAGzqP52/JnFmLRmKSMeThf+mMwoPDqhhro5sj9FfysmPHND
rrMQ0Bl1rFR+nNUy4QRac4Ay1wc4pvZvyljKuNzZHuHVbWw9ceortYqBUnZX3/Nt
RCr8FaqbJxFdOE2LmMqYfn0uYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLMSAXPx
zPGOwEK2xVltGFzvsNZiMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF
ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvN0U4NzA3OUM3
MjFCMTFFRjgxNjU0RTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALKHEgwDQYJKoZIhvcNAQELBQADggEBAEkBLD6MnYP+oulj
S7QY6AfyvB2PTmrzX26kT2HRUnGababhT+ok1kwO2SE4EAwcHDCUwGrZLwV4hO4W
jBdQynfi9Alal5ihmHvBb+EX6SQGgjpAYqEy6LFJA93L/gEyv3RYXZCsVUfY6SPH
thdj6qUclhYy8eqgpSpLEySsklraWmqp48lEalmjF0rLXSm7KZS/1gYfPzBUilbI
5SPHFEKYecT5VEdfI4D8349OgGwbYJ8xpF+itx9EOEuoa0WM5akfsTf4mDwokYe2
raCJgzX93qLZ8qlQmBzQu4TX3VVDigTU5OTYk8JYsvw5JXS/PprvyVfhBByJ6Me2
Kkou0Ao=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:21 2025 by rpki-client