Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/47C532D045B911EF93633071C4F9AE02.roa
File: 47C532D045B911EF93633071C4F9AE02.roa (raw, json)
Hash identifier: wnnmQPYTxqkM9WvnTTi4MEpEuQ7gabJzkmyVQ4uhwWk=
Subject key identifier: F4:2E:FF:AB:62:5D:35:0F:E0:4F:20:C0:69:06:FD:A1:78:C1:E7:E2
Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
Certificate serial: 5D
Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/47C532D045B911EF93633071C4F9AE02.roa
Signing time: Thu 09 Jan 2025 05:20:46 +0000
ROA not before: Thu 09 Jan 2025 05:20:46 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152317
IP address blocks: 157.10.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
Validity
Not Before: Jan 9 05:20:46 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=677f5cae-611f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:fb:b1:2c:75:5e:9d:61:1f:57:d8:ef:32:
da:b8:62:00:cc:93:c4:4c:d0:3d:62:9a:4b:c4:19:
e3:7e:39:dd:6c:4a:b4:84:9a:92:44:25:ef:74:cc:
12:21:16:8c:4f:6f:e4:8b:d2:dd:bf:c7:2c:aa:e2:
15:5a:d0:ba:7c:1f:03:37:2a:fb:7b:eb:47:a9:c6:
a8:d8:74:67:b1:fd:d1:43:72:97:b3:0f:ae:77:51:
3c:bd:b6:ef:c6:d7:6e:fc:2c:04:f1:c6:1e:ec:3a:
09:2c:7f:c6:e7:0f:6b:47:f8:0c:86:79:da:8b:cb:
ee:3b:ba:56:01:f5:e6:b7:90:62:77:35:79:06:ed:
cd:d8:ac:34:8a:4b:38:d8:8f:b0:86:dd:de:22:19:
1c:a3:87:02:44:40:39:bb:a8:b3:32:71:9c:c7:d9:
4c:d9:61:03:90:24:5c:15:41:1a:1b:48:b6:ec:03:
57:23:c4:c1:d9:a9:18:a8:2d:8b:ff:b5:85:d3:04:
b9:de:b9:8a:a6:1d:2d:72:a7:c6:cc:c5:48:4a:91:
a1:67:e7:53:e2:36:9d:51:3b:a9:0e:a7:43:6a:e9:
52:0a:8f:84:8f:87:5d:dc:98:91:f5:d6:d8:5f:97:
72:d1:03:89:fc:84:20:48:25:fe:b4:f8:2a:a9:93:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:FF:AB:62:5D:35:0F:E0:4F:20:C0:69:06:FD:A1:78:C1:E7:E2
X509v3 Authority Key Identifier:
keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/47C532D045B911EF93633071C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.146.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:f9:a2:ed:05:52:68:32:db:44:c8:06:71:2e:6d:fa:b4:0c:
c6:8d:b5:7d:0a:ee:4a:a7:98:6b:f0:e1:db:c4:e1:13:39:71:
ba:8f:7a:76:a5:b0:30:03:13:f8:1b:6f:9f:1c:fd:b7:34:17:
1f:72:01:06:62:f5:ec:53:80:dd:aa:a7:16:ed:0e:71:b5:29:
e8:f6:80:0e:a4:f2:6b:0f:b7:7a:c2:16:60:d3:f9:f0:a5:6f:
20:84:14:44:fb:f2:1f:7c:36:27:5e:96:56:a1:10:bf:27:ac:
ce:75:f0:82:7f:e2:0a:3d:b1:f9:c1:ef:fa:4f:38:c2:36:c6:
70:90:a3:c4:9e:47:a9:7f:b9:14:3e:ef:3b:27:cd:14:b1:25:
c9:bd:34:78:ad:62:a7:64:1c:2b:57:72:8e:d1:6d:18:0b:dc:
60:c6:b1:bc:7f:8e:fe:3e:20:9e:8d:ac:64:9d:a9:1b:87:b6:
27:88:f0:02:70:81:ea:71:9f:c8:b3:db:23:45:9b:0d:a8:a0:
0c:08:19:d3:0b:90:83:aa:56:2e:49:d1:a3:95:2e:6e:96:d4:
dc:28:9a:68:c6:a6:62:49:81:f5:8c:a3:dd:a6:af:a0:b8:5d:
00:d6:3a:65:fa:e4:47:78:6e:00:c6:cc:ef:93:f2:92:bf:56:
2d:77:3d:43
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MzREMDExMC8GA1UEBRMoRTA2RkU4NDFDNkJCNDk4QTFGQkY2N0VFM0FBOEM4QTlD
NTM4N0QwRjAeFw0yNTAxMDkwNTIwNDZaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3N2Y1Y2FlLTYxMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbE/uxLHVenWEfV9jvMtq4YgDMk8RM0D1imkvEGeN+Od1sSrSEmpJEJe90zBIh
FoxPb+SL0t2/xyyq4hVa0Lp8HwM3Kvt760epxqjYdGex/dFDcpezD653UTy9tu/G
1278LATxxh7sOgksf8bnD2tH+AyGedqLy+47ulYB9ea3kGJ3NXkG7c3YrDSKSzjY
j7CG3d4iGRyjhwJEQDm7qLMycZzH2UzZYQOQJFwVQRobSLbsA1cjxMHZqRioLYv/
tYXTBLneuYqmHS1yp8bMxUhKkaFn51PiNp1RO6kOp0Nq6VIKj4SPh13cmJH11thf
l3LRA4n8hCBIJf60+Cqpk4qTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9C7/q2Jd
NQ/gTyDAaQb9oXjB5+IwHwYDVR0jBBgwFoAU4G/oQca7SYofv2fuOqjIqcU4fQ8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNEQwL0VDRjgwRjg2NDVC
NzExRUZBM0Q5QTA0OUM0RjlBRTAyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZR
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNEdfb1FjYTdTWW9mdjJmdU9xaklxY1U0ZlE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzREMC9FQ0Y4MEY4NjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80N0M1MzJEMDQ1
QjkxMUVGOTM2MzMwNzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZ0KkjANBgkqhkiG9w0BAQsFAAOCAQEA0/mi7QVSaDLbRMgG
cS5t+rQMxo21fQruSqeYa/Dh28ThEzlxuo96dqWwMAMT+Btvnxz9tzQXH3IBBmL1
7FOA3aqnFu0OcbUp6PaADqTyaw+3esIWYNP58KVvIIQURPvyH3w2J16WVqEQvyes
znXwgn/iCj2x+cHv+k84wjbGcJCjxJ5HqX+5FD7vOyfNFLElyb00eK1ip2QcK1dy
jtFtGAvcYMaxvH+O/j4gno2sZJ2pG4e2J4jwAnCB6nGfyLPbI0WbDaigDAgZ0wuQ
g6pWLknRo5UubpbU3CiaaMamYkmB9Yyj3aavoLhdANY6ZfrkR3huAMbM75Pykr9W
LXc9Qw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:19:24 2025 by rpki-client