Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa
File: 16C1510E310711EE8328F181C4F9AE02.roa (raw, json)
Hash identifier: trP7B45/DlDHDIgNDVOVbjedY2D8psgfhXtS/4UA2n0=
Subject key identifier: B3:FB:D5:22:4C:1C:38:4C:3C:9B:01:03:FE:2B:E9:F0:5B:57:2C:22
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 0148
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa
Signing time: Mon 03 Jun 2024 06:55:24 +0000
ROA not before: Mon 03 Jun 2024 06:55:24 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 202.126.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Jun 3 06:55:24 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665d68dc-6241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:95:2f:7e:ea:59:74:f6:42:4d:1d:85:bf:
19:97:8c:9c:da:a1:99:a5:20:b3:60:15:e6:46:06:
f5:66:02:4f:d2:77:07:ad:51:9a:89:37:c3:84:f1:
45:5f:c0:82:a5:64:e6:3e:ad:03:74:1a:0c:95:d9:
05:b5:09:b2:fc:7d:2f:88:3c:98:00:97:f0:5f:1f:
ae:35:f1:8a:c0:93:d7:e7:8b:d8:d9:c6:95:53:48:
41:81:c3:3f:b4:3f:45:df:d6:6c:6a:38:c8:85:e1:
af:f5:05:d5:db:4b:4d:6f:47:0f:7f:d9:6d:25:1e:
ec:51:ea:44:22:29:00:35:e1:ff:54:2b:b9:46:71:
04:c4:df:cc:1e:7c:2c:6b:04:9d:22:26:42:c2:c7:
5c:9e:71:d5:fc:59:8e:4a:bf:3f:b9:cb:fe:58:7d:
e6:37:bb:35:fc:90:f7:a0:78:a5:5b:67:80:b5:6f:
6e:9b:d9:e4:eb:68:9c:38:e9:3c:61:6f:46:31:00:
25:c8:58:6d:7d:80:41:dc:a2:6a:28:5b:35:8b:5a:
43:d3:71:9e:50:e4:6c:e3:c2:74:33:6a:e0:84:70:
40:96:80:b5:6f:8a:3e:ba:aa:47:f4:f7:6f:95:f7:
14:31:ac:b9:01:a1:9d:b3:ee:a6:e1:d1:98:13:bc:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:D5:22:4C:1C:38:4C:3C:9B:01:03:FE:2B:E9:F0:5B:57:2C:22
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.126.106.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a7:24:88:d0:99:a8:a0:c4:50:9d:6b:77:3c:a3:26:8e:4a:
2d:14:df:47:d5:61:6e:8b:33:5b:8e:c0:80:9f:db:4f:21:85:
e5:2e:5f:4d:08:8a:d5:a5:9d:c0:f3:ee:0f:a9:c0:7c:c0:61:
99:42:6c:cf:67:b8:89:4c:54:7a:12:f5:52:13:b8:4e:e3:53:
d5:93:e3:46:d9:fe:6f:89:ad:b7:95:8b:a2:5f:a5:1a:0a:b0:
44:14:4a:e5:30:6d:ed:b1:7d:f0:71:fa:4e:1f:26:8f:70:e8:
54:cb:4e:cc:a3:8d:f2:10:b7:37:71:3a:c5:4b:df:46:7e:53:
48:67:1e:7e:bf:6d:91:83:39:db:1d:9f:4d:a9:19:fc:a6:3e:
61:e3:2c:9d:05:60:83:8e:0a:04:ec:2d:cd:b3:25:1c:72:c6:
73:38:30:8f:73:44:d3:c5:91:ae:af:84:51:8b:0c:05:71:75:
28:0e:17:8e:21:41:1f:d6:7c:0f:5f:8d:e6:a9:1c:3d:15:10:
e5:9c:88:6f:25:15:b1:d7:13:be:2c:c5:19:8c:12:49:fb:50:
a0:c7:e9:d5:f7:8f:73:b4:ff:60:68:bc:6e:1a:56:42:62:11:
2d:3f:54:aa:22:a7:a1:bc:4e:5e:57:0d:73:95:ba:8b:aa:77:
d9:e9:7b:02
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE
Q0Q3ODMzMDUwHhcNMjQwNjAzMDY1NTI0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVkNjhkYy02MjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqi6VL37qWXT2Qk0dhb8Zl4yc2qGZpSCzYBXmRgb1ZgJP0ncHrVGaiTfDhPFF
X8CCpWTmPq0DdBoMldkFtQmy/H0viDyYAJfwXx+uNfGKwJPX54vY2caVU0hBgcM/
tD9F39ZsajjIheGv9QXV20tNb0cPf9ltJR7sUepEIikANeH/VCu5RnEExN/MHnws
awSdIiZCwsdcnnHV/FmOSr8/ucv+WH3mN7s1/JD3oHilW2eAtW9um9nk62icOOk8
YW9GMQAlyFhtfYBB3KJqKFs1i1pD03GeUORs48J0M2rghHBAloC1b4o+uqpH9Pdv
lfcUMay5AaGds+6m4dGYE7yvOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLP71SJM
HDhMPJsBA/4r6fBbVywiMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF
QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvMTZDMTUxMEUz
MTA3MTFFRTgzMjhGMTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKfmowDQYJKoZIhvcNAQELBQADggEBAJ2nJIjQmaigxFCd
a3c8oyaOSi0U30fVYW6LM1uOwICf208hheUuX00IitWlncDz7g+pwHzAYZlCbM9n
uIlMVHoS9VITuE7jU9WT40bZ/m+JrbeVi6JfpRoKsEQUSuUwbe2xffBx+k4fJo9w
6FTLTsyjjfIQtzdxOsVL30Z+U0hnHn6/bZGDOdsdn02pGfymPmHjLJ0FYIOOCgTs
Lc2zJRxyxnM4MI9zRNPFka6vhFGLDAVxdSgOF44hQR/WfA9fjeapHD0VEOWciG8l
FbHXE74sxRmMEkn7UKDH6dX3j3O0/2BovG4aVkJiES0/VKoip6G8Tl5XDXOVuouq
d9npewI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:58:02 2025 by rpki-client