Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa
File: 0D0517EE716911EDA03D4A50C4F9AE02.roa (raw, json)
Hash identifier: fhtBFY+6U1Q/NDrcrqBZE1BQCslriv3eFT6qN9HqyO4=
Subject key identifier: 61:D6:AB:EC:83:A7:6A:E5:C4:79:B2:7C:27:63:4F:36:31:0D:DF:1E
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 04EE
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa
Signing time: Sun 27 Oct 2024 00:36:18 +0000
ROA not before: Sun 27 Oct 2024 00:36:18 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 23664
IP address blocks: 118.185.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1262 (0x4ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Oct 27 00:36:18 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=671d8b02-1b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:99:92:a8:69:a8:c6:c9:f6:c3:66:22:0b:
81:45:fa:46:41:55:4d:15:82:4a:f0:73:3d:6e:77:
47:d4:42:3d:e5:72:39:65:ac:dc:3e:db:4e:17:b1:
00:49:26:8e:1d:e6:49:34:cf:cc:e6:40:d7:07:de:
9b:17:3f:bc:9a:a9:8c:bf:b0:17:53:98:50:a8:64:
f7:d3:4b:ff:5d:33:1e:42:34:98:ae:eb:4f:47:47:
90:38:9a:58:68:66:6c:4a:f4:12:ac:4b:fc:49:6a:
9d:63:65:4a:df:a9:ba:30:be:a9:32:67:13:6e:b3:
6b:e0:82:f7:60:bc:c7:a1:e7:f4:71:d5:bc:98:30:
e5:3d:b2:5f:5f:e9:79:71:42:eb:1c:be:6c:a0:e3:
ba:f8:07:a6:ff:ef:54:fc:01:bf:21:69:8f:ff:33:
8a:6f:a1:ac:4c:a7:a5:2f:32:d7:3d:19:f9:09:1e:
68:fd:c6:23:26:88:15:1c:87:5f:18:bb:91:f1:e2:
d5:79:ee:d5:c3:b1:cc:3c:93:50:ff:d6:45:4c:ef:
eb:09:54:84:ea:38:32:01:5b:8f:6d:33:67:35:4d:
b2:f5:8b:3d:2a:fb:47:e8:3e:2f:68:38:3a:e5:10:
23:36:be:68:cd:58:01:3c:50:91:03:9b:b4:c7:00:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D6:AB:EC:83:A7:6A:E5:C4:79:B2:7C:27:63:4F:36:31:0D:DF:1E
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.185.96.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:23:6c:12:56:d8:2d:17:8d:5f:a6:26:af:55:41:36:7e:be:
36:e3:9e:39:68:ac:90:d1:be:37:93:04:8b:51:55:9c:d7:44:
06:01:1b:c7:88:bc:3e:40:ae:59:11:97:d5:54:28:0b:e8:ff:
8b:e3:b5:77:c3:cb:c5:be:6b:66:c0:0d:41:12:cc:07:8b:5d:
8f:32:56:3b:4e:9a:4a:7b:05:84:97:42:15:5d:73:0e:93:1d:
74:8a:f8:1b:2c:1f:18:b0:90:ce:a0:66:6d:67:6c:b5:5b:3b:
da:c2:b2:87:80:b6:cc:5e:6a:8e:0f:9b:b2:af:87:73:f6:e1:
20:0b:b2:32:58:fc:ce:b9:28:4d:47:7d:57:99:bf:11:00:35:
7e:dc:29:ba:88:5d:f8:6f:01:e3:68:b1:6a:ce:36:b1:01:e4:
16:fe:a9:67:b9:9d:20:0d:17:ad:ae:0a:9a:e8:08:55:d2:2e:
6c:a4:8b:9c:1f:61:d1:0e:56:97:59:a9:a9:c9:a5:90:5d:e1:
95:f9:81:f0:c8:d6:d8:e6:aa:b2:39:3e:c7:0e:d6:fe:62:04:
3d:e9:17:02:b6:82:cc:0b:f2:74:a7:cf:24:1c:46:8b:20:d5:
9b:dc:18:d0:31:c3:7e:1a:3f:69:f2:a7:d4:69:a0:59:0a:8e:
16:69:e4:e6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3
RDc0MTQ3RjMwHhcNMjQxMDI3MDAzNjE4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFkOGIwMi0xYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqRiZkqhpqMbJ9sNmIguBRfpGQVVNFYJK8HM9bndH1EI95XI5ZazcPttOF7EA
SSaOHeZJNM/M5kDXB96bFz+8mqmMv7AXU5hQqGT300v/XTMeQjSYrutPR0eQOJpY
aGZsSvQSrEv8SWqdY2VK36m6ML6pMmcTbrNr4IL3YLzHoef0cdW8mDDlPbJfX+l5
cULrHL5soOO6+Aem/+9U/AG/IWmP/zOKb6GsTKelLzLXPRn5CR5o/cYjJogVHIdf
GLuR8eLVee7Vw7HMPJNQ/9ZFTO/rCVSE6jgyAVuPbTNnNU2y9Ys9KvtH6D4vaDg6
5RAjNr5ozVgBPFCRA5u0xwAhcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGHWq+yD
p2rlxHmyfCdjTzYxDd8eMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMEQwNTE3RUU3
MTY5MTFFREEwM0Q0QTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB2uWAwDQYJKoZIhvcNAQELBQADggEBAJ8jbBJW2C0XjV+m
Jq9VQTZ+vjbjnjlorJDRvjeTBItRVZzXRAYBG8eIvD5ArlkRl9VUKAvo/4vjtXfD
y8W+a2bADUESzAeLXY8yVjtOmkp7BYSXQhVdcw6THXSK+BssHxiwkM6gZm1nbLVb
O9rCsoeAtsxeao4Pm7Kvh3P24SALsjJY/M65KE1HfVeZvxEANX7cKbqIXfhvAeNo
sWrONrEB5Bb+qWe5nSANF62uCproCFXSLmyki5wfYdEOVpdZqanJpZBd4ZX5gfDI
1tjmqrI5PscO1v5iBD3pFwK2gswL8nSnzyQcRosg1ZvcGNAxw34aP2nyp9RpoFkK
jhZp5OY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:18:14 2025 by rpki-client