Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
File: 18066BD682CD11EE82EA6452C4F9AE02.roa (raw, json)
Hash identifier: Qq2SAGpjgK4uluR309YS8e5suVCymWeDT3qQa1R/qak=
Subject key identifier: 4C:46:FD:4F:5B:56:CB:3B:7F:9F:A5:11:47:5F:65:3E:CE:B0:ED:2F
Certificate issuer: /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
Certificate serial: D0
Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
Signing time: Sun 01 Dec 2024 04:27:47 +0000
ROA not before: Sun 01 Dec 2024 04:27:47 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 152103
IP address blocks: 180.131.134.0/23 maxlen: 23
180.131.134.0/24 maxlen: 24
180.131.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
Validity
Not Before: Dec 1 04:27:47 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674be5c2-d197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:ba:1a:c2:b4:ab:e8:d5:88:b4:bb:f8:fc:
e6:ad:9e:40:a2:35:9d:45:6b:9c:d5:7e:dd:78:64:
e1:77:d2:b7:d9:3c:ad:ec:8e:be:08:69:97:b7:77:
d6:9c:a8:1d:31:79:81:39:bb:10:41:29:d3:98:a6:
96:e5:2b:ff:a2:a8:d6:56:67:1c:89:c7:5d:6c:91:
44:f5:be:7d:a8:7a:26:d5:a8:be:63:d7:3b:f1:69:
08:4e:a7:2c:fd:d8:0b:18:b9:09:fe:da:d9:9c:4e:
e5:91:18:4a:57:eb:63:c4:cd:09:1a:5f:f9:fd:85:
b4:24:78:0e:f3:78:65:bd:20:b9:35:b8:9d:93:2d:
25:a1:5e:8b:58:13:1f:39:cd:8c:29:de:ba:dd:fa:
b8:86:37:8f:8b:37:7b:1a:31:2a:47:4b:b6:b3:26:
0f:05:8d:0e:a2:70:f0:25:49:f8:72:c1:b0:11:59:
1e:7a:86:f0:65:97:81:77:94:61:cf:04:71:ff:37:
00:4d:6a:8f:30:a4:d3:5f:b4:3e:99:7e:90:f8:16:
a9:10:fe:d6:f6:63:3f:4c:1c:59:00:c3:79:2a:ae:
27:7d:f2:1e:a4:7e:3d:3c:e2:2e:02:4d:52:da:02:
b1:a3:ea:e3:9a:8a:45:cd:22:d5:8a:e5:fb:57:b0:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:46:FD:4F:5B:56:CB:3B:7F:9F:A5:11:47:5F:65:3E:CE:B0:ED:2F
X509v3 Authority Key Identifier:
keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/18066BD682CD11EE82EA6452C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.131.134.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:84:f3:85:34:8e:1b:a7:8b:f9:7d:0d:b2:d1:94:33:9e:01:
e7:0e:14:48:e7:63:bf:13:ee:10:25:02:db:81:d9:c9:e0:4f:
10:43:85:aa:55:58:ca:f4:62:66:dc:e0:bc:80:fe:77:4b:2c:
26:d3:22:90:80:20:4b:b3:d6:85:3c:b1:b2:1f:97:c4:1d:7f:
3b:b2:b1:8c:75:d3:36:ae:45:f4:5c:3c:ef:62:74:a0:40:16:
55:fd:4e:f5:83:f6:d6:60:7a:95:52:55:c4:9e:5f:14:1e:c2:
51:7e:99:e4:aa:8a:f5:44:0e:52:57:73:94:4f:49:98:5a:8f:
80:4d:0a:43:0d:5b:74:96:66:99:4d:39:5d:91:00:9e:78:67:
5d:24:da:d0:7e:b0:d0:c9:a0:56:fb:dd:b8:7e:da:46:02:ad:
d3:e9:75:f0:94:8f:f6:a4:7a:37:c9:b4:b6:c1:85:c8:d0:23:
b1:ae:01:58:2f:4f:76:c9:b4:eb:23:25:bf:df:20:d7:1c:fd:
66:ca:6f:24:79:50:b8:17:ee:8f:8e:91:31:5b:70:a9:1e:0c:
6f:20:b3:73:af:94:e9:58:30:5a:5c:68:24:e6:27:e4:2b:db:
d5:5f:c4:c3:6f:6e:98:d5:1e:59:3a:f6:34:03:5e:97:f2:a1:
53:18:fc:3e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI5MTYxMTAvBgNVBAUTKEQ1MEQxMTgzNzMwOEFCMUYxNUE3NUYzNTE2NDNGQjdG
QzAxNDg1NEMwHhcNMjQxMjAxMDQyNzQ3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRiZTVjMi1kMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsTW6GsK0q+jViLS7+PzmrZ5AojWdRWuc1X7deGThd9K32Tyt7I6+CGmXt3fW
nKgdMXmBObsQQSnTmKaW5Sv/oqjWVmccicddbJFE9b59qHom1ai+Y9c78WkITqcs
/dgLGLkJ/trZnE7lkRhKV+tjxM0JGl/5/YW0JHgO83hlvSC5Nbidky0loV6LWBMf
Oc2MKd663fq4hjePizd7GjEqR0u2syYPBY0OonDwJUn4csGwEVkeeobwZZeBd5Rh
zwRx/zcATWqPMKTTX7Q+mX6Q+BapEP7W9mM/TBxZAMN5Kq4nffIepH49POIuAk1S
2gKxo+rjmopFzSLViuX7V7AX8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFExG/U9b
Vss7f5+lEUdfZT7OsO0vMB8GA1UdIwQYMBaAFNUNEYNzCKsfFadfNRZD+3/AFIVM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjkxNi83NEVDMzk3RTdE
M0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4OFZwMTgxRmtQN2Y4QVVo
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFRMFJnM01JcXg4VnAxODFGa1A3ZjhBVWhVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI5MTYvNzRFQzM5N0U3RDNEMTFFRTlBRjczOTFBQzRGOUFFMDIvMTgwNjZCRDY4
MkNEMTFFRTgyRUE2NDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAG0g4YwDQYJKoZIhvcNAQELBQADggEBAG+E84U0jhuni/l9
DbLRlDOeAecOFEjnY78T7hAlAtuB2cngTxBDhapVWMr0Ymbc4LyA/ndLLCbTIpCA
IEuz1oU8sbIfl8QdfzuysYx10zauRfRcPO9idKBAFlX9TvWD9tZgepVSVcSeXxQe
wlF+meSqivVEDlJXc5RPSZhaj4BNCkMNW3SWZplNOV2RAJ54Z10k2tB+sNDJoFb7
3bh+2kYCrdPpdfCUj/akejfJtLbBhcjQI7GuAVgvT3bJtOsjJb/fINcc/WbKbyR5
ULgX7o+OkTFbcKkeDG8gs3OvlOlYMFpcaCTmJ+Qr29VfxMNvbpjVHlk69jQDXpfy
oVMY/D4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:00:05 2025 by rpki-client