Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/1CA71D84493D11EAAB30C638C4F9AE02.roa
File: 1CA71D84493D11EAAB30C638C4F9AE02.roa (raw, json)
Hash identifier: 5pUcv+0LLLp1O/NzGX71FS1/aeQUGa83zSCV7bRjRQY=
Subject key identifier: E5:E8:08:7C:81:83:52:81:6E:7D:B5:36:BE:32:2F:7F:AB:4C:A2:E4
Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Certificate serial: 133A
Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/1CA71D84493D11EAAB30C638C4F9AE02.roa
Signing time: Mon 22 Apr 2024 17:55:28 +0000
ROA not before: Mon 22 Apr 2024 17:55:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64095
IP address blocks: 103.212.52.0/22 maxlen: 22
139.5.164.0/22 maxlen: 22
2404:9e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4922 (0x133a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Validity
Not Before: Apr 22 17:55:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6626a490-78ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:84:df:83:f8:24:77:87:7f:b6:2b:63:cc:4c:
d3:8e:6d:5a:27:d1:01:36:b4:e5:b0:70:1c:9d:f1:
3a:95:bf:0d:50:74:6f:68:30:6c:21:e1:bd:ce:dd:
06:b7:3a:ee:a5:fc:33:13:23:96:3b:a1:e3:b6:d9:
3f:8a:20:a1:0d:3b:9f:f0:da:24:47:ad:e5:5b:10:
49:42:94:b1:87:3c:0d:c5:13:ef:4f:b4:8b:f0:1d:
b1:f1:9a:a6:ed:9f:3a:bd:de:90:83:d4:d4:af:1e:
7d:00:fd:23:d6:f3:c2:f6:50:8b:8e:a1:4d:47:33:
7e:e5:b7:a6:2a:fc:93:e4:b7:70:44:40:6a:62:d1:
90:3e:df:04:84:fe:ad:4d:fc:17:29:32:e5:68:e6:
4d:68:4e:34:bb:dd:79:67:62:3f:00:1e:bb:08:51:
d1:c0:3e:63:13:84:cd:8e:08:7e:7f:1d:af:7b:1e:
0d:13:ba:7f:6a:54:e1:a0:83:93:55:6d:be:59:fc:
8a:43:88:41:15:2b:fb:66:c7:0d:55:25:44:be:46:
e8:26:62:77:bd:b1:00:c8:c4:e4:77:57:37:52:6f:
62:aa:f1:45:2f:12:05:5f:68:99:22:ac:86:e2:fb:
05:60:d4:8f:62:66:b0:30:62:99:8a:75:a5:80:e4:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:08:7C:81:83:52:81:6E:7D:B5:36:BE:32:2F:7F:AB:4C:A2:E4
X509v3 Authority Key Identifier:
keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/1CA71D84493D11EAAB30C638C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.212.52.0/22
139.5.164.0/22
IPv6:
2404:9e80::/32
Signature Algorithm: sha256WithRSAEncryption
44:a7:fa:07:2a:9a:8f:01:16:f7:4c:8a:a7:84:9a:34:1d:5e:
ec:e7:56:fa:4d:37:5a:e5:f0:f1:f0:08:8a:88:0c:21:e3:1c:
18:40:a1:1c:47:b8:fa:ec:92:ad:eb:2e:0b:37:05:79:99:dd:
ac:d5:8b:6e:b4:09:64:c5:b4:ca:fc:a9:f7:c4:ed:79:5c:81:
38:c3:de:7e:8b:8d:3e:93:3b:ba:6c:2a:74:f2:86:a2:eb:f4:
19:ef:9c:da:dd:ca:78:96:0b:6d:3c:18:9a:38:92:03:d9:fb:
9b:7d:cc:02:a4:58:fc:7f:3d:68:ad:14:79:14:21:ca:f6:d0:
3a:11:db:93:fe:21:ea:6b:12:ea:e8:02:3a:04:a6:af:50:3e:
ca:61:85:72:00:0b:c6:53:7d:cc:9c:9b:9c:54:9e:10:8d:23:
ed:43:d5:ed:20:db:4e:56:a0:c9:3d:5b:81:c4:7a:73:71:da:
8d:ce:27:a9:c5:bf:db:57:c3:a0:ed:04:fc:34:91:01:02:e9:
7f:61:89:45:4d:b2:bc:c7:bf:59:7a:e4:58:e8:59:22:f7:74:
05:2e:ed:47:13:03:c1:2b:d8:27:ab:47:15:0c:1c:61:01:35:
2e:28:01:d9:d2:cc:c1:7b:61:d0:40:34:e6:d4:25:91:67:48:
f6:a8:56:71
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICEzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4
NjcwQzg5Q0IwHhcNMjQwNDIyMTc1NTI4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjI2YTQ5MC03OGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA44Tfg/gkd4d/titjzEzTjm1aJ9EBNrTlsHAcnfE6lb8NUHRvaDBsIeG9zt0G
tzrupfwzEyOWO6Hjttk/iiChDTuf8NokR63lWxBJQpSxhzwNxRPvT7SL8B2x8Zqm
7Z86vd6Qg9TUrx59AP0j1vPC9lCLjqFNRzN+5bemKvyT5LdwREBqYtGQPt8EhP6t
TfwXKTLlaOZNaE40u915Z2I/AB67CFHRwD5jE4TNjgh+fx2vex4NE7p/alThoIOT
VW2+WfyKQ4hBFSv7ZscNVSVEvkboJmJ3vbEAyMTkd1c3Um9iqvFFLxIFX2iZIqyG
4vsFYNSPYmawMGKZinWlgORcywIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOXoCHyB
g1KBbn21Nr4yL3+rTKLkMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG
NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjQyODYvQjIxQUEwOTQ3RjQ5MTFFODg4RDM1NjQyQzRGOUFFMDIvMUNBNzFEODQ0
OTNEMTFFQUFCMzBDNjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJn1DQDBAKLBaQwDQQCAAIwBwMFACQEnoAwDQYJKoZIhvcN
AQELBQADggEBAESn+gcqmo8BFvdMiqeEmjQdXuznVvpNN1rl8PHwCIqIDCHjHBhA
oRxHuPrskq3rLgs3BXmZ3azVi260CWTFtMr8qffE7XlcgTjD3n6LjT6TO7psKnTy
hqLr9BnvnNrdyniWC208GJo4kgPZ+5t9zAKkWPx/PWitFHkUIcr20DoR25P+Iepr
EuroAjoEpq9QPsphhXIAC8ZTfcycm5xUnhCNI+1D1e0g205WoMk9W4HEenNx2o3O
J6nFv9tXw6DtBPw0kQEC6X9hiUVNsrzHv1l65FjoWSL3dAUu7UcTA8Er2CerRxUM
HGEBNS4oAdnSzMF7YdBANObUJZFnSPaoVnE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:20 2025 by rpki-client