Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/33CFE442C07511EE980AEC0CC4F9AE02.roa
File: 33CFE442C07511EE980AEC0CC4F9AE02.roa (raw, json)
Hash identifier: o8EszhqBbS63QDwDle8oJR0ZCRZ42AQ9Rrdqe6ZMAPc=
Subject key identifier: 1C:C9:EA:B9:49:EE:B7:B8:66:F6:88:93:92:E0:3F:12:D7:F0:4C:C7
Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
Certificate serial: 09E8
Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/33CFE442C07511EE980AEC0CC4F9AE02.roa
Signing time: Thu 22 Feb 2024 20:58:36 +0000
ROA not before: Thu 22 Feb 2024 20:58:36 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 134069
IP address blocks: 43.231.224.0/22 maxlen: 24
45.115.220.0/22 maxlen: 24
103.51.48.0/22 maxlen: 22
103.51.48.0/23 maxlen: 23
103.51.50.0/24 maxlen: 24
103.51.51.0/24 maxlen: 24
202.6.248.0/22 maxlen: 24
2402:1a80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
Validity
Not Before: Feb 22 20:58:36 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65d7b57c-91a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:d6:7a:bd:78:ff:e9:82:54:c3:40:d1:57:
3b:41:7f:81:f1:e3:d7:dd:a9:5d:e4:81:56:4c:de:
be:47:e0:ab:78:ec:16:a9:c6:a9:a6:1d:10:92:37:
c3:46:69:2c:c0:1e:e4:ba:0d:9e:e4:41:4e:40:d4:
e9:d6:6c:6c:2d:16:c2:be:e9:f0:f2:07:10:c1:7e:
00:c8:a9:dc:82:8d:d3:8d:e7:db:95:9e:ac:9c:96:
7c:58:03:48:75:82:66:30:95:3c:f0:76:53:a0:91:
d8:3c:73:86:6a:89:63:87:41:c7:2c:0d:3c:c1:d7:
ff:b7:da:6e:fc:02:13:2d:8d:af:b1:4f:5e:6e:b4:
2d:b2:21:60:b8:38:36:3a:97:eb:9a:a0:97:4e:62:
28:fc:d8:da:6b:9c:48:19:ac:d4:6a:f5:f4:e5:ad:
34:d5:46:b4:53:a9:57:c9:15:9e:e4:95:1d:63:6e:
64:49:41:6b:27:90:a5:81:db:21:6f:be:99:0a:27:
70:b9:e9:bc:7c:65:a4:d3:e6:54:26:ee:f3:f8:88:
5c:ee:1e:f8:88:1c:2b:61:93:f1:9e:b5:31:cd:76:
bc:3a:f1:68:f6:b7:a3:50:98:31:ae:8b:e4:2f:98:
ce:3a:b0:fa:02:0a:42:3b:b5:7b:18:0c:c8:ad:75:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C9:EA:B9:49:EE:B7:B8:66:F6:88:93:92:E0:3F:12:D7:F0:4C:C7
X509v3 Authority Key Identifier:
keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/33CFE442C07511EE980AEC0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.224.0/22
45.115.220.0/22
103.51.48.0/22
202.6.248.0/22
IPv6:
2402:1a80::/32
Signature Algorithm: sha256WithRSAEncryption
98:af:51:44:2f:96:24:ec:eb:97:b9:7f:09:5e:fd:eb:15:cd:
d1:af:66:bc:5f:69:5c:42:70:40:c3:73:77:4c:6e:0a:04:ca:
86:b2:02:ac:2d:d8:57:aa:3c:20:b4:c1:69:ac:5e:a5:9a:76:
1e:da:86:21:04:77:b7:35:86:1a:f4:27:82:4d:77:b9:4a:b3:
be:5d:db:6c:5a:64:95:02:0b:e6:45:4f:c5:98:ff:bb:0f:3d:
cd:32:b8:71:37:90:b2:9f:b6:a8:03:6b:ee:9b:5b:c1:7b:11:
64:13:2b:a7:be:10:ed:9c:c3:5e:75:36:28:22:41:6b:53:40:
c1:95:51:9d:4d:a7:dc:ec:be:b4:20:d0:33:f2:87:a1:49:23:
79:85:f6:63:c7:40:04:7a:ae:7b:89:25:75:c9:1b:90:0f:94:
42:96:e1:0e:5c:14:57:a1:d2:29:46:85:00:89:aa:af:c6:32:
f5:70:0d:99:3d:23:44:f5:b7:25:33:ec:8b:9e:38:71:6a:cb:
f9:6b:d4:66:10:8b:cd:73:d7:4c:3d:15:c0:79:90:dc:00:9f:
35:7c:4e:b4:14:b9:78:f5:87:28:de:40:50:72:13:ac:92:f6:
d3:31:99:4c:86:a6:a1:05:2c:f1:f2:1b:d5:80:4c:34:1d:42:
24:44:0b:05
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICCegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy
M0Y1NUNDOEQwHhcNMjQwMjIyMjA1ODM2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQ3YjU3Yy05MWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxnrWer14/+mCVMNA0Vc7QX+B8ePX3ald5IFWTN6+R+CreOwWqcapph0QkjfD
RmkswB7kug2e5EFOQNTp1mxsLRbCvunw8gcQwX4AyKncgo3TjefblZ6snJZ8WANI
dYJmMJU88HZToJHYPHOGaoljh0HHLA08wdf/t9pu/AITLY2vsU9ebrQtsiFguDg2
OpfrmqCXTmIo/Njaa5xIGazUavX05a001Ua0U6lXyRWe5JUdY25kSUFrJ5Clgdsh
b76ZCidwuem8fGWk0+ZUJu7z+Ihc7h74iBwrYZPxnrUxzXa8OvFo9rejUJgxrovk
L5jOOrD6AgpCO7V7GAzIrXXcwQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFBzJ6rlJ
7re4ZvaIk5LgPxLX8EzHMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5
MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTA4NzUvNkQ5MUFBQkM1OTMxMTFFQUFBMzFCNDBBQzRGOUFFMDIvMzNDRkU0NDJD
MDc1MTFFRTk4MEFFQzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E
MTAvMB4EAgABMBgDBAIr5+ADBAItc9wDBAJnMzADBALKBvgwDQQCAAIwBwMFACQC
GoAwDQYJKoZIhvcNAQELBQADggEBAJivUUQvliTs65e5fwle/esVzdGvZrxfaVxC
cEDDc3dMbgoEyoayAqwt2FeqPCC0wWmsXqWadh7ahiEEd7c1hhr0J4JNd7lKs75d
22xaZJUCC+ZFT8WY/7sPPc0yuHE3kLKftqgDa+6bW8F7EWQTK6e+EO2cw151Nigi
QWtTQMGVUZ1Np9zsvrQg0DPyh6FJI3mF9mPHQAR6rnuJJXXJG5APlEKW4Q5cFFeh
0ilGhQCJqq/GMvVwDZk9I0T1tyUz7IueOHFqy/lr1GYQi81z10w9FcB5kNwAnzV8
TrQUuXj1hyjeQFByE6yS9tMxmUyGpqEFLPHyG9WATDQdQiRECwU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:17:54 2025 by rpki-client