Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa
File: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (raw, json)
Hash identifier: y03lKIB42nw4jlkFQ7G75iFQPvcCfwFRDTzAnmoLg+c=
Subject key identifier: BE:29:0D:AC:A3:7C:C4:AF:56:83:33:2E:50:06:4D:07:01:C1:A4:21
Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0
Certificate serial: 02
Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa
Signing time: Fri 15 Mar 2024 16:46:03 +0000
ROA not before: Fri 15 Mar 2024 16:46:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152646
IP address blocks: 202.50.154.0/24 maxlen: 24
202.50.155.0/24 maxlen: 24
2001:df3:8d40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0
Validity
Not Before: Mar 15 16:46:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65f47b4b-f41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:25:62:23:22:94:88:59:e5:94:33:7c:08:60:
3d:7f:ce:c9:59:bc:fe:55:fc:63:89:f5:52:16:2e:
e6:58:fd:b9:8e:f9:2e:a4:1a:1b:0e:4e:c8:b6:10:
34:33:4e:ff:7a:81:b4:70:03:e5:6d:70:0d:d7:49:
74:e4:b1:07:2c:f7:0d:87:4c:31:60:96:69:ac:6f:
78:8f:6f:73:30:31:fc:62:c5:b7:e0:87:28:b8:70:
4d:a8:c9:ee:4b:31:ff:67:b3:0b:a5:c5:e1:1c:03:
a4:c4:21:7b:38:de:03:c4:d8:c0:09:6d:e4:70:77:
44:27:1e:3c:ba:86:db:ab:ee:7a:f3:52:8a:08:08:
56:f5:86:22:13:04:7a:7d:97:04:67:63:14:67:e4:
df:a2:b8:6d:46:22:a2:83:7a:56:10:fd:89:fb:a5:
cf:6c:f6:6e:3a:58:7d:66:1a:10:e7:78:b0:2e:98:
56:39:9b:e4:04:15:c3:98:32:c4:b4:6b:b5:d1:2d:
17:ee:0c:34:2e:bb:bc:32:f4:b8:5e:56:bf:a2:2f:
98:39:c2:55:f2:c7:2f:90:cc:7b:5b:3d:4e:90:a9:
dc:5f:4d:3f:f5:0b:b8:c2:6d:e7:30:9e:ca:8a:dc:
a7:76:35:d6:8a:16:94:2b:9c:55:7f:3f:8c:56:0f:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:29:0D:AC:A3:7C:C4:AF:56:83:33:2E:50:06:4D:07:01:C1:A4:21
X509v3 Authority Key Identifier:
keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.50.154.0/23
IPv6:
2001:df3:8d40::/48
Signature Algorithm: sha256WithRSAEncryption
40:a1:49:5d:87:81:57:74:60:cd:9c:0e:cc:f8:cb:15:4a:5e:
a0:bb:4d:a8:26:10:79:9a:c5:12:82:b6:6d:f2:fc:11:03:a8:
01:a0:75:8f:34:cf:b9:dd:82:a2:76:95:c6:9e:10:b2:0e:d5:
a7:5d:59:ce:1e:a1:c1:aa:14:6b:10:21:20:01:f7:8b:3d:cc:
cf:19:f4:49:01:2b:c6:fd:c0:4a:82:5e:cd:82:1b:78:af:60:
87:a7:71:ea:e0:3e:d6:28:4a:30:0f:9d:42:fb:5f:0d:57:59:
51:ea:62:29:93:d9:14:ef:48:20:9e:cf:ae:99:93:66:5d:0d:
2d:3c:a4:56:3a:ba:a0:4d:d5:e8:f9:24:95:b2:d5:1f:75:c2:
84:8b:dc:cd:e6:c8:b0:d9:9c:42:c4:75:a2:a8:fd:86:b8:2f:
e8:9c:d0:19:bf:24:cf:11:e6:c0:6d:f7:7a:a1:76:ee:c3:e5:
63:90:9d:51:c0:47:ff:b4:0c:40:af:39:33:ea:ab:a0:fb:60:
d7:67:fe:18:5b:59:a2:02:4d:be:05:b9:00:72:4b:9c:08:cb:
2b:de:fa:d7:1b:6c:0c:9e:50:22:1f:30:01:52:60:f2:a2:96:
19:f6:8d:79:f6:6b:9d:e1:2c:82:cc:e5:57:9c:12:f4:26:ca:
f7:8e:21:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NzcyRjExMC8GA1UEBRMoMUJGOTc2RUZFQUIyMzEyRUEyREFDODZCOThBMzk4Q0Yw
QzVCRDZGMDAeFw0yNDAzMTUxNjQ2MDNaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1ZjQ3YjRiLWY0MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD5JWIjIpSIWeWUM3wIYD1/zslZvP5V/GOJ9VIWLuZY/bmO+S6kGhsOTsi2EDQz
Tv96gbRwA+VtcA3XSXTksQcs9w2HTDFglmmsb3iPb3MwMfxixbfghyi4cE2oye5L
Mf9nswulxeEcA6TEIXs43gPE2MAJbeRwd0QnHjy6htur7nrzUooICFb1hiITBHp9
lwRnYxRn5N+iuG1GIqKDelYQ/Yn7pc9s9m46WH1mGhDneLAumFY5m+QEFcOYMsS0
a7XRLRfuDDQuu7wy9LheVr+iL5g5wlXyxy+QzHtbPU6QqdxfTT/1C7jCbecwnsqK
3Kd2NdaKFpQrnFV/P4xWD29zAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUvikNrKN8
xK9WgzMuUAZNBwHBpCEwHwYDVR0jBBgwFoAUG/l27+qyMS6i2shrmKOYzwxb1vAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3NzJGLzFFNzdFNzMyRTJF
QjExRUVBRDZFOUEwQkM0RjlBRTAyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR19sMjctcXlNUzZpMnNocm1LT1l6d3hiMXZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzcyRi8xRTc3RTczMkUyRUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi84Mjc0M0EwNkUy
RUIxMUVFQkFDNzNEMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAcoymjAPBAIAAjAJAwcAIAEN841AMA0GCSqGSIb3DQEBCwUA
A4IBAQBAoUldh4FXdGDNnA7M+MsVSl6gu02oJhB5msUSgrZt8vwRA6gBoHWPNM+5
3YKidpXGnhCyDtWnXVnOHqHBqhRrECEgAfeLPczPGfRJASvG/cBKgl7Nght4r2CH
p3Hq4D7WKEowD51C+18NV1lR6mIpk9kU70ggns+umZNmXQ0tPKRWOrqgTdXo+SSV
stUfdcKEi9zN5siw2ZxCxHWiqP2GuC/onNAZvyTPEebAbfd6oXbuw+VjkJ1RwEf/
tAxArzkz6qug+2DXZ/4YW1miAk2+BbkAckucCMsr3vrXG2wMnlAiHzABUmDyopYZ
9o159mud4SyCzOVXnBL0Jsr3jiG3
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:49 2025 by rpki-client