Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/FE2FF9B0E64611EEA8AE7979C4F9AE02.roa
File: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (raw, json)
Hash identifier: zTFWSulVee4Ly8DKhZ3WsgppSiRMvqo0mmrNlUemSBc=
Subject key identifier: 7C:AF:9A:6F:D7:35:12:BC:6A:42:3E:CA:E1:EF:07:D4:3F:C5:63:F0
Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E
Certificate serial: 06
Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/FE2FF9B0E64611EEA8AE7979C4F9AE02.roa
Signing time: Tue 19 Mar 2024 23:18:28 +0000
ROA not before: Tue 19 Mar 2024 23:18:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133855
IP address blocks: 202.71.188.0/23 maxlen: 24
2001:df3:90c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E
Validity
Not Before: Mar 19 23:18:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65fa1d44-f642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:33:fc:55:f8:14:d0:6c:13:d6:09:eb:13:
45:9f:88:b4:74:0a:6e:8b:f1:fe:30:fe:48:d4:67:
05:fa:17:86:2b:f7:37:85:78:89:52:d4:ae:02:7e:
bc:5a:6c:d4:b5:9e:23:cf:3c:d7:a9:e5:d9:99:d1:
d1:f6:e5:cb:65:6e:df:dd:aa:1f:d3:be:71:0c:86:
cd:53:66:3a:50:58:0f:9c:70:f4:5b:05:b8:7a:ce:
2c:f4:a4:35:86:17:a4:ae:90:df:d6:dd:1d:21:e0:
8b:a2:2b:84:79:0b:05:da:25:d8:f7:d9:a9:db:bd:
8d:e8:a0:a5:e6:f5:66:7f:3f:1d:cf:64:8c:c1:8a:
e7:e4:64:66:a2:7c:5e:5a:d8:49:bf:8e:d2:07:9d:
40:2d:a7:46:d6:63:5a:d3:8a:9a:54:9f:f8:59:38:
22:6d:d6:09:a4:f8:77:ad:30:18:55:7a:45:d3:0b:
60:99:3f:36:45:c1:fe:df:4d:73:b1:f4:f1:b6:12:
cd:0d:12:26:8a:28:24:ff:eb:b6:f8:79:a8:df:0c:
55:c1:3d:ae:13:b2:4f:8f:c1:07:cf:d8:7b:97:13:
35:31:90:25:91:e3:24:70:3d:ac:9e:67:a9:b9:b4:
4b:2f:1d:48:1d:4b:9e:03:1d:f5:3d:b1:23:ac:41:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AF:9A:6F:D7:35:12:BC:6A:42:3E:CA:E1:EF:07:D4:3F:C5:63:F0
X509v3 Authority Key Identifier:
keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/FE2FF9B0E64611EEA8AE7979C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.71.188.0/23
IPv6:
2001:df3:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
57:90:51:7a:15:a0:f8:f2:55:39:82:1b:66:80:71:06:df:ad:
ae:5e:ad:f1:ff:55:20:68:68:6c:93:c8:ee:1b:ce:36:89:5f:
fc:3d:f8:27:5e:a3:33:ce:6e:d3:e4:d1:73:f2:35:a0:31:5d:
0d:1f:58:ae:5e:1f:58:32:01:cd:9b:db:d2:04:d3:cd:6f:ed:
53:6e:e2:83:9f:a3:76:15:65:cb:b0:bf:48:a3:56:27:46:5c:
ca:30:dd:a7:8c:d9:65:8b:96:a7:ce:0a:c6:d8:60:4e:70:4d:
a8:e5:4c:f1:8b:68:4c:ca:06:a8:c1:9a:55:45:ee:0d:f8:a4:
3f:ff:b5:e2:4b:f5:74:75:ca:0b:6d:02:a7:4e:a4:8d:4a:e9:
b4:e4:0d:b2:6e:0b:60:3f:58:7f:fc:54:c8:e6:be:a8:8b:eb:
f1:17:98:f6:2e:68:18:c4:f3:62:00:e1:ba:7f:60:dc:de:8a:
d4:fa:c2:4b:75:69:2c:20:fc:66:4e:cc:84:2d:fa:b8:e5:b1:
0f:fc:ff:8d:ce:74:bb:82:43:b3:50:b6:3c:63:43:09:51:cc:
eb:54:5f:8d:b3:5c:87:b1:ba:d6:96:cf:ce:d6:89:2f:d1:8c:
58:13:cb:d7:c4:cb:3b:a1:6d:6a:32:94:a0:7d:ce:22:6a:e6:
b6:ef:2c:a0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OUEyNDExMC8GA1UEBRMoNDcxMEU0REU2NDE1QzQ4RThCNTMxQjU5Q0Q0N0E0MUNE
NzkzNDU1RTAeFw0yNDAzMTkyMzE4MjhaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ZmExZDQ0LWY2NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3jjP8VfgU0GwT1gnrE0WfiLR0Cm6L8f4w/kjUZwX6F4Yr9zeFeIlS1K4Cfrxa
bNS1niPPPNep5dmZ0dH25ctlbt/dqh/TvnEMhs1TZjpQWA+ccPRbBbh6ziz0pDWG
F6SukN/W3R0h4IuiK4R5CwXaJdj32anbvY3ooKXm9WZ/Px3PZIzBiufkZGaifF5a
2Em/jtIHnUAtp0bWY1rTippUn/hZOCJt1gmk+HetMBhVekXTC2CZPzZFwf7fTXOx
9PG2Es0NEiaKKCT/67b4eajfDFXBPa4Tsk+PwQfP2HuXEzUxkCWR4yRwPayeZ6m5
tEsvHUgdS54DHfU9sSOsQWXHAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUfK+ab9c1
ErxqQj7K4e8H1D/FY/AwHwYDVR0jBBgwFoAURxDk3mQVxI6LUxtZzUekHNeTRV4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5QTI0LzkzOTg0Q0YyRTY0
NTExRUVCNUE3MzU3N0M0RjlBRTAyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJW
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUnhEazNtUVZ4STZMVXh0WnpVZWtITmVUUlY0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9GRTJGRjlCMEU2
NDYxMUVFQThBRTc5NzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAcpHvDAPBAIAAjAJAwcAIAEN85DAMA0GCSqGSIb3DQEBCwUA
A4IBAQBXkFF6FaD48lU5ghtmgHEG362uXq3x/1UgaGhsk8juG842iV/8PfgnXqMz
zm7T5NFz8jWgMV0NH1iuXh9YMgHNm9vSBNPNb+1TbuKDn6N2FWXLsL9Io1YnRlzK
MN2njNlli5anzgrG2GBOcE2o5Uzxi2hMygaowZpVRe4N+KQ//7XiS/V0dcoLbQKn
TqSNSum05A2ybgtgP1h//FTI5r6oi+vxF5j2LmgYxPNiAOG6f2Dc3orU+sJLdWks
IPxmTsyELfq45bEP/P+NznS7gkOzULY8Y0MJUczrVF+Ns1yHsbrWls/O1okv0YxY
E8vXxMs7oW1qMpSgfc4iaua27yyg
-----END CERTIFICATE-----
Generated at Mon May 12 13:58:19 2025 by rpki-client