Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/FEEC2C90643811EB9D7F624EC4F9AE02.roa
File: FEEC2C90643811EB9D7F624EC4F9AE02.roa (raw, json)
Hash identifier: J1xLa8yTtXAlg7OlLT4nxVjtOt9A7iYZpXvZJDERl8o=
Subject key identifier: C3:62:9C:92:3B:9F:79:85:6E:48:91:CC:FD:9B:BC:A6:4A:CB:ED:CF
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 07ED
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/FEEC2C90643811EB9D7F624EC4F9AE02.roa
Signing time: Tue 28 May 2024 23:03:11 +0000
ROA not before: Tue 28 May 2024 23:03:11 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 134963
IP address blocks: 202.63.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: May 28 23:03:11 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=665662af-f2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:e2:f0:3b:3f:4d:71:e0:45:dd:39:6f:7e:
b9:a0:ed:3b:85:3b:0c:61:88:f6:08:7c:94:e7:77:
8e:b2:7a:23:d7:af:94:d6:14:62:f8:6e:05:f9:9d:
d5:90:78:47:ec:fc:51:47:ff:31:45:aa:14:83:57:
6e:3d:9d:c9:07:e1:bf:0f:78:67:d6:8a:43:f9:e7:
43:6e:3c:b0:37:03:ae:7d:a7:05:95:a5:53:d2:f9:
45:35:3e:c1:18:9f:2c:94:48:68:87:4b:db:51:b0:
0b:f1:7a:c8:0e:c6:0c:a4:9b:15:00:e9:23:ff:88:
18:72:15:24:f9:0f:17:22:38:a1:6d:3d:99:52:cd:
f4:c0:9f:76:73:89:85:73:3e:30:53:55:16:38:1d:
18:6e:1f:8f:94:47:ad:31:83:d8:c4:23:35:9c:a3:
7a:6b:fa:05:09:81:49:d5:60:fa:b8:73:dd:97:3c:
b6:64:c2:01:10:1a:5f:f6:d6:24:28:f8:db:92:08:
fb:0a:90:3c:3d:86:66:5f:9f:26:a0:1e:32:53:21:
55:9b:92:e9:39:3f:b4:d5:10:e6:af:57:19:15:c7:
9b:a7:e9:e2:66:e2:64:cd:5a:85:8f:70:5c:98:6e:
b2:9f:0f:d0:f9:48:d2:d2:f2:33:43:1f:08:da:09:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:62:9C:92:3B:9F:79:85:6E:48:91:CC:FD:9B:BC:A6:4A:CB:ED:CF
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/FEEC2C90643811EB9D7F624EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.63.46.0/24
Signature Algorithm: sha256WithRSAEncryption
29:51:b2:0d:96:24:c8:6c:2f:22:d0:e4:63:66:b3:4d:21:06:
1e:65:b9:e6:a0:54:4f:b2:96:f4:bf:70:72:20:2a:2d:fb:25:
8a:67:e1:70:ec:eb:51:c9:e2:3e:ea:ae:16:1a:e8:44:46:09:
4b:3f:80:dc:84:26:04:9e:48:24:c7:60:07:70:dc:cb:69:1b:
70:46:3e:33:71:10:b7:05:3c:c6:0f:43:48:73:58:0b:8e:0c:
41:d0:0d:c8:d1:83:d9:ac:0c:1a:b7:92:f4:41:bb:35:c3:92:
6f:f8:b0:fc:bc:72:9e:1f:c8:e0:80:5d:c2:83:72:16:7e:1c:
3f:9c:35:21:92:1d:0f:31:9f:fe:15:c9:33:38:b3:a7:24:c9:
cc:a7:64:c3:c5:9e:20:be:3e:7e:66:17:27:0a:70:f1:27:53:
81:71:6d:59:48:cd:30:b6:6e:b2:2b:23:21:38:73:59:88:0f:
83:2f:b4:48:03:08:8d:d2:77:94:13:56:d5:d4:73:c3:41:f5:
f3:4a:ad:56:4c:aa:e2:07:b5:df:74:e7:a8:ba:5a:39:71:a1:
58:1c:1d:14:65:b4:7f:d1:99:21:c3:62:cd:4a:08:a5:36:77:
18:35:81:27:50:3d:83:5e:30:f6:fc:87:0e:17:48:05:51:86:
04:ab:bf:1e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG
RDJCRTgyNjAwHhcNMjQwNTI4MjMwMzExWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU2NjJhZi1mMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZji8Ds/TXHgRd05b365oO07hTsMYYj2CHyU53eOsnoj16+U1hRi+G4F+Z3V
kHhH7PxRR/8xRaoUg1duPZ3JB+G/D3hn1opD+edDbjywNwOufacFlaVT0vlFNT7B
GJ8slEhoh0vbUbAL8XrIDsYMpJsVAOkj/4gYchUk+Q8XIjihbT2ZUs30wJ92c4mF
cz4wU1UWOB0Ybh+PlEetMYPYxCM1nKN6a/oFCYFJ1WD6uHPdlzy2ZMIBEBpf9tYk
KPjbkgj7CpA8PYZmX58moB4yUyFVm5LpOT+01RDmr1cZFcebp+niZuJkzVqFj3Bc
mG6ynw/Q+UjS0vIzQx8I2gn/EQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMNinJI7
n3mFbkiRzP2bvKZKy+3PMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1
RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY5M0EvRkY1MUU1OUVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvRkVFQzJDOTA2
NDM4MTFFQjlEN0Y2MjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKPy4wDQYJKoZIhvcNAQELBQADggEBAClRsg2WJMhsLyLQ
5GNms00hBh5lueagVE+ylvS/cHIgKi37JYpn4XDs61HJ4j7qrhYa6ERGCUs/gNyE
JgSeSCTHYAdw3MtpG3BGPjNxELcFPMYPQ0hzWAuODEHQDcjRg9msDBq3kvRBuzXD
km/4sPy8cp4fyOCAXcKDchZ+HD+cNSGSHQ8xn/4VyTM4s6ckycynZMPFniC+Pn5m
FycKcPEnU4FxbVlIzTC2brIrIyE4c1mID4MvtEgDCI3Sd5QTVtXUc8NB9fNKrVZM
quIHtd9056i6WjlxoVgcHRRltH/RmSHDYs1KCKU2dxg1gSdQPYNeMPb8hw4XSAVR
hgSrvx4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:14 2025 by rpki-client