Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/40F0E4DC75AB11EFB897AF69C4F9AE02.roa
File: 40F0E4DC75AB11EFB897AF69C4F9AE02.roa (raw, json)
Hash identifier: 66mcnb1x9N203HeKzYtZYqy46nvM7OGyg282gr346uI=
Subject key identifier: 60:5D:75:34:94:54:6D:37:EF:49:64:E5:27:CE:F7:21:CB:02:DB:68
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 0B3D
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/40F0E4DC75AB11EFB897AF69C4F9AE02.roa
Signing time: Wed 18 Sep 2024 10:46:26 +0000
ROA not before: Wed 18 Sep 2024 10:46:26 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 139.190.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2877 (0xb3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Sep 18 10:46:26 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66eaaf82-4559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:d9:7b:68:95:65:a6:49:a0:65:67:91:b5:
31:77:e3:68:c3:44:38:4a:eb:3e:34:b6:ea:60:57:
66:06:63:5a:23:87:89:32:33:c0:f3:5f:40:4b:07:
c2:0a:2c:a3:3f:9b:c0:34:c6:e8:5c:d1:ff:ae:55:
a9:24:36:86:85:d9:9d:c9:58:b2:16:9f:42:58:ad:
b2:8d:19:18:d8:ce:33:73:45:57:d1:be:fe:38:52:
1f:2a:11:3a:ed:7e:e1:ab:20:7c:ab:10:ce:73:6e:
95:b6:8b:ed:04:43:de:31:61:a5:d8:83:b4:71:e4:
ee:4a:c8:b0:72:df:48:c2:26:46:6d:4f:a8:b5:a3:
e2:28:46:05:b8:ca:50:9b:6b:67:87:eb:46:49:58:
86:2c:84:7c:84:b1:8d:5a:4d:69:d5:e8:c5:4a:ca:
8a:5c:d5:b4:6b:45:da:28:01:ab:40:82:24:06:6e:
29:71:9a:7f:bd:fd:c5:de:25:0c:9a:b4:97:8f:e0:
f3:00:51:91:f1:5f:7f:6b:6d:3f:b5:83:90:8a:bc:
e6:e5:f3:4d:a2:a4:3e:49:19:59:67:95:c3:ef:a4:
e2:9e:17:f6:33:aa:1e:d4:a1:39:6e:68:15:2a:fa:
54:3a:27:bd:4f:89:5e:b5:42:16:7b:8b:a7:1d:c3:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5D:75:34:94:54:6D:37:EF:49:64:E5:27:CE:F7:21:CB:02:DB:68
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/40F0E4DC75AB11EFB897AF69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0e:02:a2:41:18:87:3f:05:9c:be:e1:6d:f7:eb:f1:59:05:
22:a9:4e:a3:5b:39:3e:d9:97:2f:5b:7c:fd:fe:63:7e:4d:67:
de:cc:e3:77:06:a0:4d:2d:3a:a1:d0:89:ba:ad:39:c2:df:b0:
aa:74:8a:73:c8:0c:73:ac:21:6d:0c:32:36:7e:ce:51:1f:14:
c7:02:a9:4d:58:33:93:56:28:6f:4d:fb:cb:53:67:22:48:5b:
31:14:7f:dc:0c:70:49:c6:16:06:07:f5:4d:cb:82:b4:19:93:
28:f8:52:09:af:ab:b5:dd:c5:d3:fe:a7:46:ef:63:6d:30:6d:
54:13:c2:4f:71:61:50:89:69:3b:0a:c6:71:f8:dc:c4:ad:3f:
86:d6:63:aa:8c:d0:09:fb:a8:aa:79:02:98:ef:79:94:64:b2:
59:52:cb:d0:a2:63:fe:a2:d0:e2:05:fa:ca:29:35:93:f3:1e:
60:7a:84:01:e4:9a:d6:57:75:c7:6a:d7:f4:e0:70:fd:c8:79:
be:db:ac:2f:b8:aa:14:00:f7:11:07:f0:04:51:58:ab:98:b5:
62:88:0e:e6:b8:20:ea:bd:d5:b8:74:76:04:30:21:1a:fb:b5:
94:a4:54:c4:31:33:17:a4:2f:14:d3:44:a0:0a:84:d5:65:88:
ae:66:60:90
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjQwOTE4MTA0NjI2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmVhYWY4Mi00NTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwbrZe2iVZaZJoGVnkbUxd+Now0Q4Sus+NLbqYFdmBmNaI4eJMjPA819ASwfC
CiyjP5vANMboXNH/rlWpJDaGhdmdyViyFp9CWK2yjRkY2M4zc0VX0b7+OFIfKhE6
7X7hqyB8qxDOc26VtovtBEPeMWGl2IO0ceTuSsiwct9IwiZGbU+otaPiKEYFuMpQ
m2tnh+tGSViGLIR8hLGNWk1p1ejFSsqKXNW0a0XaKAGrQIIkBm4pcZp/vf3F3iUM
mrSXj+DzAFGR8V9/a20/tYOQirzm5fNNoqQ+SRlZZ5XD76Tinhf2M6oe1KE5bmgV
KvpUOie9T4letUIWe4unHcOM/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGBddTSU
VG0370lk5SfO9yHLAttoMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNDBGMEU0REM3
NUFCMTFFRkI4OTdBRjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACLvuowDQYJKoZIhvcNAQELBQADggEBAFwOAqJBGIc/BZy+
4W336/FZBSKpTqNbOT7Zly9bfP3+Y35NZ97M43cGoE0tOqHQibqtOcLfsKp0inPI
DHOsIW0MMjZ+zlEfFMcCqU1YM5NWKG9N+8tTZyJIWzEUf9wMcEnGFgYH9U3LgrQZ
kyj4Ugmvq7XdxdP+p0bvY20wbVQTwk9xYVCJaTsKxnH43MStP4bWY6qM0An7qKp5
ApjveZRksllSy9CiY/6i0OIF+sopNZPzHmB6hAHkmtZXdcdq1/TgcP3Ieb7brC+4
qhQA9xEH8ARRWKuYtWKIDua4IOq91bh0dgQwIRr7tZSkVMQxMxekLxTTRKAKhNVl
iK5mYJA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:53 2025 by rpki-client