Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/DE72D5AEBED411EF835BB47AC4F9AE02.roa
File: DE72D5AEBED411EF835BB47AC4F9AE02.roa (raw, json)
Hash identifier: 5j81/BZOYpTkz0ooChEWGP+uFOoiaPO0/qxC0SgYzdY=
Subject key identifier: 99:E8:5E:9D:EB:B5:CF:20:CD:FB:FF:75:00:2C:03:E1:90:74:71:F8
Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Certificate serial: 02
Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/DE72D5AEBED411EF835BB47AC4F9AE02.roa
Signing time: Fri 20 Dec 2024 13:18:15 +0000
ROA not before: Fri 20 Dec 2024 13:18:15 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 133496
IP address blocks: 161.248.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Validity
Not Before: Dec 20 13:18:15 2024 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67656e96-0faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:e1:68:90:6b:8f:d5:03:10:66:39:7b:5f:
38:99:df:d0:66:0c:3f:8d:6e:4f:d2:53:f9:36:f8:
25:e7:eb:5d:7f:72:5b:0e:fa:bf:0d:0a:58:ce:47:
a5:00:5f:8d:8f:92:82:25:94:12:41:ae:dd:aa:a7:
9b:fb:27:d7:e6:1f:8e:7c:3e:48:53:37:e2:aa:1f:
45:36:ab:69:b6:0e:ba:55:94:73:e7:ff:aa:41:89:
1a:68:89:a8:e1:31:f4:a1:9d:78:d8:4b:8c:cd:2f:
05:27:a9:9c:70:58:36:7c:c3:2d:91:7d:7a:58:a0:
3e:1b:7e:0e:14:e3:3f:c9:70:fe:53:30:72:f5:a2:
6b:86:9c:73:d8:f8:24:21:b8:1a:d3:8b:ef:f6:f6:
d4:3e:48:3f:c7:79:a8:2b:4a:1a:f4:f3:35:ba:1d:
cc:aa:4c:df:51:bb:90:89:f9:57:98:3d:82:c3:65:
99:d6:9e:14:33:d4:7f:85:59:67:02:df:fd:d6:d1:
d2:90:34:49:86:31:bf:90:53:9a:1a:88:a1:55:29:
23:4c:55:5c:75:19:98:b2:3a:1c:dd:3a:99:2d:3b:
f8:b5:1c:95:21:6c:e1:99:12:cf:09:36:c4:58:45:
c0:eb:2c:82:c1:41:1a:21:fb:ef:f2:59:86:97:ef:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:5E:9D:EB:B5:CF:20:CD:FB:FF:75:00:2C:03:E1:90:74:71:F8
X509v3 Authority Key Identifier:
keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/DE72D5AEBED411EF835BB47AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.6.0/23
Signature Algorithm: sha256WithRSAEncryption
e5:fc:fb:9d:c2:04:92:07:f5:35:da:e1:29:e4:59:dd:19:d3:
8f:a9:ab:ab:24:bc:29:c6:2f:fb:72:3a:8d:c1:73:58:ce:c4:
21:69:a6:c5:d9:00:45:4c:0b:c1:05:db:24:b2:c0:ef:d3:dc:
fd:82:ed:cf:71:eb:7e:89:9b:c3:f8:e2:f1:5b:f6:75:46:41:
59:c5:7c:00:21:b6:57:d6:e9:ec:d2:e2:e9:bb:74:6f:c4:69:
21:01:39:ec:58:9d:6a:1c:46:9f:c4:22:dd:ca:ab:41:01:33:
d3:08:91:ba:47:6e:5c:9f:44:5c:1c:5a:ee:2b:d6:69:90:43:
31:4c:24:40:45:df:90:ad:6a:50:ec:71:ac:82:5c:a3:86:d1:
e2:d8:77:11:cd:3e:de:a4:70:cc:1d:01:af:eb:b1:f2:c1:11:
b4:4b:f5:a2:be:96:e0:a5:bc:8b:28:a1:bb:a5:76:42:72:3f:
9e:a3:81:c7:ad:96:f7:94:ba:5f:4d:93:e4:95:2b:76:d9:68:
c6:1c:c2:39:89:2b:9c:60:e0:f7:be:90:dd:c4:70:93:4f:cb:
c9:52:df:74:5a:b2:7b:f1:7c:6e:20:6d:42:28:d6:6f:53:b0:
4d:58:b9:c0:cc:07:33:10:83:86:db:1c:31:f0:91:a5:8f:e0:
85:a7:de:43
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
ODMwNzExMC8GA1UEBRMoNEIwOTJERjEwNDI4MEY0NUJDM0YyNzk2RjQwMUNDMkI0
QzYxNDRFOTAeFw0yNDEyMjAxMzE4MTVaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3NjU2ZTk2LTBmYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmJeFokGuP1QMQZjl7XziZ39BmDD+Nbk/SU/k2+CXn611/clsO+r8NCljOR6UA
X42PkoIllBJBrt2qp5v7J9fmH458PkhTN+KqH0U2q2m2DrpVlHPn/6pBiRpoiajh
MfShnXjYS4zNLwUnqZxwWDZ8wy2RfXpYoD4bfg4U4z/JcP5TMHL1omuGnHPY+CQh
uBrTi+/29tQ+SD/HeagrShr08zW6HcyqTN9Ru5CJ+VeYPYLDZZnWnhQz1H+FWWcC
3/3W0dKQNEmGMb+QU5oaiKFVKSNMVVx1GZiyOhzdOpktO/i1HJUhbOGZEs8JNsRY
RcDrLILBQRoh++/yWYaX7zaHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmeheneu1
zyDN+/91ACwD4ZB0cfgwHwYDVR0jBBgwFoAUSwkt8QQoD0W8PyeW9AHMK0xhROkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4MzA3LzJCQzkyNDUwQkVD
RDExRUY5OEM3NDEzMkM0RjlBRTAyL1N3a3Q4UVFvRDBXOFB5ZVc5QUhNSzB4aFJP
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU3drdDhRUW9EMFc4UHllVzlBSE1LMHhoUk9rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODMwNy8yQkM5MjQ1MEJFQ0QxMUVGOThDNzQxMzJDNEY5QUUwMi9ERTcyRDVBRUJF
RDQxMUVGODM1QkI0N0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaH4BjANBgkqhkiG9w0BAQsFAAOCAQEA5fz7ncIEkgf1Ndrh
KeRZ3RnTj6mrqyS8KcYv+3I6jcFzWM7EIWmmxdkARUwLwQXbJLLA79Pc/YLtz3Hr
fombw/ji8Vv2dUZBWcV8ACG2V9bp7NLi6bt0b8RpIQE57FidahxGn8Qi3cqrQQEz
0wiRukduXJ9EXBxa7ivWaZBDMUwkQEXfkK1qUOxxrIJco4bR4th3Ec0+3qRwzB0B
r+ux8sERtEv1or6W4KW8iyihu6V2QnI/nqOBx62W95S6X02T5JUrdtloxhzCOYkr
nGDg976Q3cRwk0/LyVLfdFqye/F8biBtQijWb1OwTVi5wMwHMxCDhtscMfCRpY/g
hafeQw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:36:21 2025 by rpki-client