Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa
File: 902F4AAC567011EFA451BD7CC4F9AE02.roa (raw, json)
Hash identifier: qmlGrSLmYcGa18yom8d6PeePfMWIiWVkajsGQGVwEAE=
Subject key identifier: F0:71:C2:98:9C:DA:67:D9:13:C1:E2:C1:2B:93:63:22:55:A8:CD:17
Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial: 32C8
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa
Signing time: Fri 20 Dec 2024 15:51:57 +0000
ROA not before: Fri 20 Dec 2024 15:51:57 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 58867
IP address blocks: 163.47.176.0/24 maxlen: 24
203.175.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13000 (0x32c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Validity
Not Before: Dec 20 15:51:57 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6765929d-99e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:14:71:68:63:1a:fd:0b:35:2e:45:39:a3:
93:22:bc:b7:99:e1:fe:df:33:45:3e:49:fa:b6:ff:
d5:ca:23:aa:11:30:e7:76:4e:9e:b1:16:a5:b1:64:
f3:db:f4:6a:f1:cb:54:4f:b9:ac:56:75:9b:70:2c:
dd:e3:b9:c2:bf:3d:a0:b5:03:ec:01:70:b5:4d:00:
89:aa:c4:c4:ee:28:aa:ae:aa:70:89:79:35:87:d5:
82:8a:0b:f5:48:55:32:08:3f:ce:f6:df:35:a9:2d:
95:fb:c4:ba:36:10:e9:16:1e:10:63:86:e8:27:aa:
05:82:cc:8e:84:db:eb:44:83:7d:51:ed:45:63:2a:
16:d0:34:9d:d2:11:63:20:f7:db:1b:8d:37:86:18:
46:24:17:e3:a0:05:20:1b:e0:8b:ba:bf:3c:c2:6c:
b7:44:dd:a1:02:00:86:a8:56:11:f2:45:b3:7b:c6:
c2:5a:a4:db:77:99:30:cf:19:6f:c7:2c:87:27:a3:
b6:85:91:62:25:c9:87:a4:d2:5d:21:2e:a5:51:30:
4e:4b:0f:bd:27:bc:bd:83:35:bc:f7:14:3f:83:09:
37:cf:1a:80:ba:9c:7d:56:47:d2:a9:25:bb:c0:41:
53:4a:89:e7:eb:48:b5:e1:19:76:b0:dc:63:bd:1f:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:C2:98:9C:DA:67:D9:13:C1:E2:C1:2B:93:63:22:55:A8:CD:17
X509v3 Authority Key Identifier:
keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.47.176.0/24
203.175.175.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b7:79:f5:c6:12:38:fd:68:3b:dd:e7:0c:0b:ad:08:bd:02:
a7:d7:60:d9:97:62:5e:d0:03:f5:e3:b5:ae:43:17:9b:94:82:
c8:94:4e:35:2a:ff:9b:41:9f:4f:a9:50:48:0d:ba:77:42:76:
8b:88:15:17:df:88:e9:61:62:f2:6e:c5:49:55:dd:a4:0c:3c:
21:91:71:23:16:e9:ec:63:f4:1b:55:8f:c5:47:00:c3:a2:7b:
61:ab:d9:d3:b9:c9:0f:bd:3e:5e:e2:95:1e:99:97:42:a2:b3:
90:97:87:f8:db:42:9b:bd:02:68:58:6f:56:43:53:ef:f5:3d:
dc:10:65:ea:7d:28:fc:db:ca:af:93:3a:63:83:ad:e1:5c:1f:
52:e7:9d:d1:38:22:d8:47:1c:c1:25:93:83:1f:f7:73:09:1c:
b6:8b:6d:25:ab:e8:7c:bd:2d:3c:95:8d:ef:7a:72:16:a1:e5:
3f:a7:0b:6a:a3:c3:21:cb:29:8f:41:c0:36:7d:fb:af:ca:b6:
df:f5:f7:09:ce:d0:fc:ee:59:72:85:3e:2c:66:d8:34:03:92:
6f:b6:55:e7:dc:17:fd:e1:16:00:02:37:58:76:27:61:15:7d:
a3:e3:b0:11:d2:6e:9d:ad:0a:34:7b:f7:9b:42:0e:5e:91:23:
fa:ac:c1:4d
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICMsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG
NUE2QjkzNDgwHhcNMjQxMjIwMTU1MTU3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY1OTI5ZC05OWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2PsUcWhjGv0LNS5FOaOTIry3meH+3zNFPkn6tv/VyiOqETDndk6esRalsWTz
2/Rq8ctUT7msVnWbcCzd47nCvz2gtQPsAXC1TQCJqsTE7iiqrqpwiXk1h9WCigv1
SFUyCD/O9t81qS2V+8S6NhDpFh4QY4boJ6oFgsyOhNvrRIN9Ue1FYyoW0DSd0hFj
IPfbG403hhhGJBfjoAUgG+CLur88wmy3RN2hAgCGqFYR8kWze8bCWqTbd5kwzxlv
xyyHJ6O2hZFiJcmHpNJdIS6lUTBOSw+9J7y9gzW89xQ/gwk3zxqAupx9VkfSqSW7
wEFTSonn60i14Rl2sNxjvR/+kwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPBxwpic
2mfZE8HiwSuTYyJVqM0XMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx
NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY4NjMvQkZFNTRBNjg4MTVCMTFFMjlCNThBNzNCMzI5MkI1RTgvOTAyRjRBQUM1
NjcwMTFFRkE0NTFCRDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBACjL7ADBADLr68wDQYJKoZIhvcNAQELBQADggEBAIm3efXG
Ejj9aDvd5wwLrQi9AqfXYNmXYl7QA/Xjta5DF5uUgsiUTjUq/5tBn0+pUEgNundC
douIFRffiOlhYvJuxUlV3aQMPCGRcSMW6exj9BtVj8VHAMOie2Gr2dO5yQ+9Pl7i
lR6Zl0Kis5CXh/jbQpu9AmhYb1ZDU+/1PdwQZep9KPzbyq+TOmODreFcH1LnndE4
IthHHMElk4Mf93MJHLaLbSWr6Hy9LTyVje96chah5T+nC2qjwyHLKY9BwDZ9+6/K
tt/19wnO0PzuWXKFPixm2DQDkm+2VefcF/3hFgACN1h2J2EVfaPjsBHSbp2tCjR7
95tCDl6RI/qswU0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:11:39 2025 by rpki-client