Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/2A26D2607E1311EEAF8FD93EC4F9AE02.roa
File: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (raw, json)
Hash identifier: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=
Subject key identifier: 35:36:64:14:5C:22:20:03:39:E3:8D:1C:94:4F:5E:3D:BB:FA:3A:31
Certificate issuer: /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Certificate serial: DE
Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/2A26D2607E1311EEAF8FD93EC4F9AE02.roa
Signing time: Tue 17 Dec 2024 03:57:36 +0000
ROA not before: Tue 17 Dec 2024 03:57:36 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 151989
IP address blocks: 115.84.168.0/23 maxlen: 23
115.84.168.0/24 maxlen: 24
115.84.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32
Validity
Not Before: Dec 17 03:57:36 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6760f6af-a10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:de:05:b8:95:3f:59:b0:4d:39:41:bf:1b:
da:fb:57:97:83:b8:f7:2d:c9:cd:6d:77:dc:58:65:
a6:8f:c5:e5:ea:f2:d8:b3:f9:11:c9:d3:f8:c2:9c:
80:cf:dc:b9:40:a8:79:53:54:a9:4b:bd:aa:7a:51:
9b:a8:7d:aa:1c:64:24:b0:b3:8f:ea:d0:fb:f8:8b:
da:10:71:fa:87:f2:b9:f0:a9:be:6b:aa:08:4c:6f:
19:db:f8:22:a9:e4:82:a3:d5:fe:f0:dc:46:09:62:
1f:ed:6b:47:04:37:c4:09:63:95:b6:e9:f0:6b:03:
43:7c:13:7f:d5:1c:58:45:16:7e:41:48:e1:21:79:
08:ea:ca:82:aa:89:26:da:20:f9:fd:2c:ac:58:15:
3c:26:d9:64:03:2b:0e:ca:f0:b4:90:66:8f:67:cf:
d3:13:1d:bf:9d:f1:3b:ed:ca:42:96:74:69:92:da:
2f:14:da:3e:9b:9c:56:bb:69:fd:d5:8f:13:0b:3d:
17:53:36:2a:15:52:a5:7e:5c:81:f7:7a:a6:2b:d8:
3d:26:08:b4:c0:6f:44:e4:9d:8b:58:c9:4f:91:6c:
e2:98:05:6d:0b:9e:f2:69:f5:52:53:60:57:2e:1a:
13:12:d7:a4:eb:bc:f7:07:46:6f:c4:1f:c5:b3:9f:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:36:64:14:5C:22:20:03:39:E3:8D:1C:94:4F:5E:3D:BB:FA:3A:31
X509v3 Authority Key Identifier:
keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/2A26D2607E1311EEAF8FD93EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.84.168.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:fc:76:eb:af:5d:c6:0e:0e:1f:2c:fd:b3:91:66:71:33:36:
d8:c0:45:54:86:b1:e5:60:6b:3e:e6:0e:ba:38:73:a7:27:5f:
b1:65:1f:51:1b:b3:60:ca:3a:6a:3f:9b:5a:ac:27:64:6a:1c:
1d:29:dd:77:cf:62:55:31:74:bd:90:1c:c3:7d:b8:77:cf:02:
1b:a5:a7:89:01:ee:fa:81:23:a5:7b:ca:39:65:02:00:5d:53:
b3:a2:1f:17:7b:42:fa:50:bc:cf:52:1f:57:63:ae:c9:70:db:
4f:07:34:9c:f7:54:28:b2:da:34:6f:6a:d3:6c:7d:1b:5a:c4:
87:91:7e:f1:d3:d7:93:d7:ac:2b:99:af:09:19:cf:38:16:90:
a4:01:71:10:fc:5f:1a:95:14:3b:4f:74:1b:a0:4c:57:3b:35:
9d:2f:28:d9:3e:cc:f3:d7:76:19:cf:04:86:af:c2:9e:f0:6b:
3b:ce:f5:45:5a:1a:62:6f:0b:fc:f9:14:70:e8:50:47:9e:b5:
60:a9:72:18:3a:ee:e7:76:40:7f:6c:de:4d:62:b6:8d:a9:05:
f8:05:3a:18:0e:22:eb:12:91:6c:b7:f6:b2:4a:91:5e:b6:ac:
9d:44:55:c7:eb:21:16:5a:3e:31:9a:21:0a:b4:12:e9:71:21:
3f:f6:5c:af
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE1QUQxMTAvBgNVBAUTKDdGMzUyQTc2OTU2RDc3MDJGQzc3QUY2MEZDQzEyOUU2
MUZEQkVBMzIwHhcNMjQxMjE3MDM1NzM2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzYwZjZhZi1hMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy+veBbiVP1mwTTlBvxva+1eXg7j3LcnNbXfcWGWmj8Xl6vLYs/kRydP4wpyA
z9y5QKh5U1SpS72qelGbqH2qHGQksLOP6tD7+IvaEHH6h/K58Km+a6oITG8Z2/gi
qeSCo9X+8NxGCWIf7WtHBDfECWOVtunwawNDfBN/1RxYRRZ+QUjhIXkI6sqCqokm
2iD5/SysWBU8JtlkAysOyvC0kGaPZ8/TEx2/nfE77cpClnRpktovFNo+m5xWu2n9
1Y8TCz0XUzYqFVKlflyB93qmK9g9Jgi0wG9E5J2LWMlPkWzimAVtC57yafVSU2BX
LhoTEtek67z3B0ZvxB/Fs5+/gQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDU2ZBRc
IiADOeONHJRPXj27+joxMB8GA1UdIwQYMBaAFH81KnaVbXcC/HevYPzBKeYf2+oy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVBRC9COEI5MUM0NjdF
MTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3TDhkNjlnX01FcDVoX2I2
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE1QUQvQjhCOTFDNDY3RTEyMTFFRTlDQjExRjNFQzRGOUFFMDIvMkEyNkQyNjA3
RTEzMTFFRUFGOEZEOTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFzVKgwDQYJKoZIhvcNAQELBQADggEBALL8duuvXcYODh8s
/bORZnEzNtjARVSGseVgaz7mDro4c6cnX7FlH1Ebs2DKOmo/m1qsJ2RqHB0p3XfP
YlUxdL2QHMN9uHfPAhulp4kB7vqBI6V7yjllAgBdU7OiHxd7QvpQvM9SH1djrslw
208HNJz3VCiy2jRvatNsfRtaxIeRfvHT15PXrCuZrwkZzzgWkKQBcRD8XxqVFDtP
dBugTFc7NZ0vKNk+zPPXdhnPBIavwp7wazvO9UVaGmJvC/z5FHDoUEeetWCpchg6
7ud2QH9s3k1ito2pBfgFOhgOIusSkWy39rJKkV62rJ1EVcfrIRZaPjGaIQq0Eulx
IT/2XK8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:56 2025 by rpki-client