Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/CA8007604A3011EFB101441AC4F9AE02.roa
File: CA8007604A3011EFB101441AC4F9AE02.roa (raw, json)
Hash identifier: n0scqmjw+mL6oy2aKSd+h7xv61rcn17HzY6G2dTe7Nk=
Subject key identifier: 4B:90:18:B6:5A:CD:84:F9:DB:D7:17:C2:4A:D0:BF:DB:FC:20:69:26
Certificate issuer: /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Certificate serial: 02
Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/CA8007604A3011EFB101441AC4F9AE02.roa
Signing time: Thu 25 Jul 2024 02:51:29 +0000
ROA not before: Thu 25 Jul 2024 02:51:29 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 24074
IP address blocks: 202.49.200.0/23 maxlen: 23
202.49.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Validity
Not Before: Jul 25 02:51:29 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66a1bdb1-42bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:ba:3f:02:3f:a9:e6:c5:66:51:e8:f4:14:
e9:34:e4:2a:c5:82:40:8d:1b:76:8e:1d:bc:c2:11:
21:c3:c8:c7:3b:06:8c:b1:5e:f8:f9:04:d7:69:bf:
29:e9:e6:58:aa:7c:fd:e8:19:5a:3b:8e:4d:8f:f5:
24:1b:b2:dc:a9:5b:6d:32:9b:c4:e3:ed:be:3f:fc:
f6:47:0b:1b:41:6d:5e:2a:b0:29:ba:18:1f:ef:16:
26:7b:86:4d:ae:71:42:54:36:8c:f4:09:3a:c6:8f:
9d:c2:eb:78:24:bd:17:e5:13:b6:86:06:3e:a9:bb:
00:97:0e:b2:96:40:ce:25:e8:4b:92:b3:13:49:e3:
21:1a:23:ab:8d:58:c6:63:f0:a3:75:63:ec:2a:f1:
b7:d7:c4:2c:45:d4:41:e1:39:35:a4:61:43:bb:5f:
a8:41:87:17:53:df:e3:38:aa:93:fd:63:ae:4d:11:
b6:0c:c8:33:01:ef:e6:fb:d2:3e:a2:82:39:9c:cb:
68:00:58:f9:9c:89:3f:91:cc:0c:d6:48:b5:9f:54:
e2:26:26:ee:8c:a4:fc:90:31:dd:18:d9:ab:ce:9e:
15:61:1b:b9:9a:f5:67:c7:26:5e:ec:1e:4b:a4:65:
1c:7a:5f:b5:3f:ac:3d:fe:a6:66:63:73:3b:a7:84:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:90:18:B6:5A:CD:84:F9:DB:D7:17:C2:4A:D0:BF:DB:FC:20:69:26
X509v3 Authority Key Identifier:
keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/CA8007604A3011EFB101441AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.49.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:93:20:0d:3a:24:19:d9:67:f1:6a:53:b8:57:91:28:72:14:
5b:d8:b7:3f:ea:90:ba:3b:b0:57:9d:84:07:a1:93:88:50:e5:
6b:65:04:6c:24:b4:d5:7e:70:ed:43:12:97:3f:0d:4f:36:28:
69:2a:82:97:ae:41:3f:17:1d:d9:3d:1c:da:ce:72:96:b1:8b:
13:fc:80:e8:b4:c8:dc:c9:7b:cf:28:66:54:33:05:96:8e:60:
36:10:d8:14:c8:db:bf:a5:64:63:a6:f4:b8:ad:a3:fe:6e:c8:
44:54:9a:2c:ae:83:a5:64:3d:73:26:5b:33:0d:4c:d9:95:ef:
22:35:b3:2e:72:63:18:d5:a4:97:b4:c7:de:91:dd:a1:95:a5:
6a:dd:a3:22:27:0d:61:be:e9:89:0f:30:41:e0:f5:08:04:6a:
fc:67:02:41:ac:73:78:2c:0a:03:6b:22:96:8b:d0:c2:37:3a:
b7:d9:77:73:41:fc:f1:6c:0e:60:41:dd:eb:fa:f6:44:1a:0f:
19:fe:b1:34:09:3d:5a:85:76:ce:ae:4d:be:e9:4f:32:25:a9:
6f:de:58:e2:ef:3e:76:ce:d2:86:7f:ab:48:a3:e7:26:4a:2b:
07:4e:07:99:e5:0a:b5:9b:eb:06:57:b0:94:8d:fe:8d:99:18:
69:56:77:a9
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RTgxNDExMC8GA1UEBRMoMTE4RDlCREUzMTc1NEY5ODU0Q0I1NTQ3NDBBMjk5RjEz
N0UyNDFFMjAeFw0yNDA3MjUwMjUxMjlaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2YTFiZGIxLTQyYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrnLo/Aj+p5sVmUej0FOk05CrFgkCNG3aOHbzCESHDyMc7BoyxXvj5BNdpvynp
5liqfP3oGVo7jk2P9SQbstypW20ym8Tj7b4//PZHCxtBbV4qsCm6GB/vFiZ7hk2u
cUJUNoz0CTrGj53C63gkvRflE7aGBj6puwCXDrKWQM4l6EuSsxNJ4yEaI6uNWMZj
8KN1Y+wq8bfXxCxF1EHhOTWkYUO7X6hBhxdT3+M4qpP9Y65NEbYMyDMB7+b70j6i
gjmcy2gAWPmciT+RzAzWSLWfVOImJu6MpPyQMd0Y2avOnhVhG7ma9WfHJl7sHkuk
ZRx6X7U/rD3+pmZjczunhIWBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUS5AYtlrN
hPnb1xfCStC/2/wgaSYwHwYDVR0jBBgwFoAUEY2b3jF1T5hUy1VHQKKZ8TfiQeIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFODE0LzhDNTdGMTVBNEEz
MDExRUZBODMwNzcxOUM0RjlBRTAyL0VZMmIzakYxVDVoVXkxVkhRS0taOFRmaVFl
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRVkyYjNqRjFUNWhVeTFWSFFLS1o4VGZpUWVJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTgxNC84QzU3RjE1QTRBMzAxMUVGQTgzMDc3MTlDNEY5QUUwMi9DQTgwMDc2MDRB
MzAxMUVGQjEwMTQ0MUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsoxyDANBgkqhkiG9w0BAQsFAAOCAQEArZMgDTokGdln8WpT
uFeRKHIUW9i3P+qQujuwV52EB6GTiFDla2UEbCS01X5w7UMSlz8NTzYoaSqCl65B
Pxcd2T0c2s5ylrGLE/yA6LTI3Ml7zyhmVDMFlo5gNhDYFMjbv6VkY6b0uK2j/m7I
RFSaLK6DpWQ9cyZbMw1M2ZXvIjWzLnJjGNWkl7TH3pHdoZWlat2jIicNYb7piQ8w
QeD1CARq/GcCQaxzeCwKA2silovQwjc6t9l3c0H88WwOYEHd6/r2RBoPGf6xNAk9
WoV2zq5NvulPMiWpb95Y4u8+ds7Shn+rSKPnJkorB04HmeUKtZvrBlewlI3+jZkY
aVZ3qQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:00 2025 by rpki-client