Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa
File: E4A74BE6255211EB96B9B269C4F9AE02.roa (raw, json)
Hash identifier: Ahmq+kO6A0bgXkAjwTqcQfdgpiGuxiz20RpREd5Xycs=
Subject key identifier: 21:80:40:0F:49:93:C8:42:A9:35:04:21:2F:9A:E5:D1:6D:9C:A6:68
Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Certificate serial: 127A
Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa
Signing time: Mon 26 Feb 2024 17:55:38 +0000
ROA not before: Mon 26 Feb 2024 17:55:38 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136943
IP address blocks: 121.200.0.0/24 maxlen: 24
123.253.151.0/24 maxlen: 24
2403:5800:1::/48 maxlen: 48
2403:5800:3::/48 maxlen: 48
2403:5800:1900::/40 maxlen: 40
2403:5800:1900::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4730 (0x127a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Validity
Not Before: Feb 26 17:55:38 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65dcd09a-0914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:01:39:12:6f:e6:6b:f7:ec:88:7c:ee:e1:47:
67:df:08:1f:f1:6c:08:63:f7:40:6e:12:91:6b:da:
79:c4:0b:5e:4b:f0:1c:a5:4c:47:1d:23:94:fd:11:
4e:42:21:86:0f:7f:98:25:f6:76:49:1c:f8:49:e9:
81:6a:f7:36:c0:d0:32:01:2e:75:26:28:4d:cc:a5:
30:ee:e6:89:b7:7f:30:31:5c:bd:36:ce:e9:76:ed:
c8:65:84:e9:36:af:9c:ba:d5:1c:1d:a1:2a:63:4b:
6c:14:28:5f:ae:78:88:f1:11:3e:89:85:d9:31:2b:
18:2e:50:86:e4:76:b1:66:e8:e8:a5:d3:48:65:c0:
63:88:72:c9:ef:d5:bf:8d:d4:d6:e7:d1:49:c8:c0:
5c:71:42:47:bc:50:09:47:5f:fd:07:e7:fc:ba:90:
2f:e2:99:e5:c8:49:6c:b5:d6:13:17:12:5e:56:ad:
8c:0f:58:58:57:84:81:46:53:5f:71:93:52:e7:d2:
be:56:84:b2:55:d3:81:03:31:93:b0:3d:1c:aa:fa:
4b:47:6c:f2:5f:7d:83:25:73:d9:a0:f7:42:e5:5f:
c4:3e:d1:d1:fb:cd:b9:3c:ab:3b:ae:96:de:8f:4e:
48:53:68:27:ba:7a:f2:a6:bc:07:f4:75:45:4c:f2:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:80:40:0F:49:93:C8:42:A9:35:04:21:2F:9A:E5:D1:6D:9C:A6:68
X509v3 Authority Key Identifier:
keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.200.0.0/24
123.253.151.0/24
IPv6:
2403:5800:1::/48
2403:5800:3::/48
2403:5800:1900::/40
Signature Algorithm: sha256WithRSAEncryption
5f:30:c7:4f:e4:7f:f2:61:7a:48:d1:a9:54:ce:60:d9:61:cc:
d0:97:dc:fb:d4:e5:cf:67:23:f9:49:00:f2:d3:f3:0f:32:07:
60:b2:d0:93:cc:3e:56:c5:cb:69:f0:3c:7f:6e:62:1e:89:34:
c4:66:1b:5f:c8:4b:45:b2:62:07:1a:ae:0b:84:b0:4c:32:33:
9b:5c:76:cd:74:3e:ba:e9:f6:d6:7a:03:1a:f0:16:b2:85:ae:
e1:af:b1:1d:43:92:19:a8:88:00:46:22:ab:26:de:da:dd:9a:
88:08:c3:30:fa:1b:90:64:07:1b:50:16:5d:1d:d2:7d:3c:da:
3d:57:68:72:48:17:55:30:5c:0c:d0:97:ff:aa:d9:f6:ec:dc:
1b:24:25:aa:ff:da:09:27:1b:f6:bd:85:68:2a:0f:88:17:fa:
cf:73:ef:a1:8d:d1:f1:db:01:2d:83:13:60:95:f0:a2:a0:fd:
be:7f:19:53:2e:6e:92:7c:06:54:e4:89:69:bb:d6:09:c7:51:
f2:fb:ff:70:13:46:e0:d9:77:0f:a5:20:2f:42:17:72:2c:94:
a6:68:3f:0f:4e:9f:65:6d:fa:fd:c9:1f:d7:ae:e9:b5:57:5b:
a9:3c:9f:09:82:a7:67:38:83:b3:2b:06:4e:98:89:08:6f:e7:
22:e0:61:89
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgICEnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB
MjJDNjRCM0IwHhcNMjQwMjI2MTc1NTM4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWRjZDA5YS0wOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6QE5Em/ma/fsiHzu4Udn3wgf8WwIY/dAbhKRa9p5xAteS/AcpUxHHSOU/RFO
QiGGD3+YJfZ2SRz4SemBavc2wNAyAS51JihNzKUw7uaJt38wMVy9Ns7pdu3IZYTp
Nq+cutUcHaEqY0tsFChfrniI8RE+iYXZMSsYLlCG5HaxZujopdNIZcBjiHLJ79W/
jdTW59FJyMBccUJHvFAJR1/9B+f8upAv4pnlyElstdYTFxJeVq2MD1hYV4SBRlNf
cZNS59K+VoSyVdOBAzGTsD0cqvpLR2zyX32DJXPZoPdC5V/EPtHR+825PKs7rpbe
j05IU2gnunryprwH9HVFTPJl+QIDAQABo4ICvTCCArkwHQYDVR0OBBYEFCGAQA9J
k8hCqTUEIS+a5dFtnKZoMB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG
RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjFGQTgvRTg2MUZEM0FBRkQ5MTFFOEIyRUQ0QzdGQzRGOUFFMDIvRTRBNzRCRTYy
NTUyMTFFQjk2QjlCMjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E
ODA2MBIEAgABMAwDBAB5yAADBAB7/ZcwIAQCAAIwGgMHACQDWAAAAQMHACQDWAAA
AwMGACQDWAAZMA0GCSqGSIb3DQEBCwUAA4IBAQBfMMdP5H/yYXpI0alUzmDZYczQ
l9z71OXPZyP5SQDy0/MPMgdgstCTzD5Wxctp8Dx/bmIeiTTEZhtfyEtFsmIHGq4L
hLBMMjObXHbNdD666fbWegMa8Bayha7hr7EdQ5IZqIgARiKrJt7a3ZqICMMw+huQ
ZAcbUBZdHdJ9PNo9V2hySBdVMFwM0Jf/qtn27NwbJCWq/9oJJxv2vYVoKg+IF/rP
c++hjdHx2wEtgxNglfCioP2+fxlTLm6SfAZU5Ilpu9YJx1Hy+/9wE0bg2XcPpSAv
QhdyLJSmaD8PTp9lbfr9yR/Xrum1V1upPJ8JgqdnOIOzKwZOmIkIb+ci4GGJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:51 2025 by rpki-client