Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa
File: 05054224D8E411E9BEB7986DC4F9AE02.roa (raw, json)
Hash identifier: C8YUnzVpdG1ic9MCuW7celmXkhXkYeCvagfWnZShYbQ=
Subject key identifier: DF:F6:6E:A1:31:52:04:5B:07:C5:F2:79:78:D6:F0:45:C6:D8:AA:64
Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Certificate serial: 0CFF
Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa
Signing time: Wed 22 Jan 2025 17:56:30 +0000
ROA not before: Wed 22 Jan 2025 17:56:30 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 9930
IP address blocks: 161.142.0.0/16 maxlen: 19
192.228.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3327 (0xcff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Validity
Not Before: Jan 22 17:56:30 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6791314e-2397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d2:db:bc:14:84:ba:d4:01:66:36:f7:09:e6:
95:2c:86:35:aa:8d:4e:20:cd:78:d7:f1:c2:51:84:
72:17:c8:e7:10:d7:f9:85:be:5f:56:c2:62:91:70:
11:cc:53:4d:da:cd:00:cd:98:55:58:8c:8d:52:d2:
03:6c:34:65:e4:e2:d9:ae:3b:1f:fa:dd:7e:0e:44:
67:ed:08:9e:30:04:d0:3a:ee:4b:43:e9:b3:70:29:
a4:7e:73:dd:8b:f2:84:c0:df:89:7c:8b:e8:41:2b:
56:73:d8:e8:7d:7e:79:db:68:9b:f2:16:79:04:d4:
bd:7e:46:a8:0e:c7:35:51:90:e6:6f:47:26:e5:c2:
df:b9:53:22:ad:7b:8e:3d:d6:55:e0:4f:33:61:35:
ab:ad:fb:c4:e9:fd:3c:c3:56:f0:74:19:99:b9:7d:
3e:9d:5d:f9:88:cd:1e:6b:ff:fc:f9:84:54:3d:6e:
47:d4:ab:17:5f:ad:99:74:76:a6:e9:88:b4:e1:55:
bc:5c:24:3d:bf:bb:44:dc:28:78:b3:22:c1:b4:1f:
0d:30:88:92:e4:40:7e:38:91:0f:67:b2:b6:00:ae:
48:2a:8f:04:fc:78:8e:f1:c1:d4:87:87:87:21:e3:
35:92:18:0f:ac:54:67:9d:35:be:e8:6d:c1:bb:db:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F6:6E:A1:31:52:04:5B:07:C5:F2:79:78:D6:F0:45:C6:D8:AA:64
X509v3 Authority Key Identifier:
keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.142.0.0/16
192.228.128.0/17
Signature Algorithm: sha256WithRSAEncryption
75:71:0b:a4:0e:90:54:73:74:d5:ae:c6:38:cb:08:fc:8c:05:
31:38:e2:6a:8b:92:9a:3c:a8:ca:7c:d4:a2:0e:74:0e:56:e1:
42:29:88:01:7a:36:74:b6:aa:88:80:29:33:44:d6:47:b2:44:
da:34:f8:ac:5f:92:27:fd:26:ac:1b:3d:a8:80:78:05:9b:96:
9f:58:90:9a:f9:41:95:57:8b:8f:bd:47:93:35:f5:82:41:08:
31:56:3b:f7:01:6c:2a:79:f5:0e:c6:ff:55:a2:37:e7:60:c8:
20:a3:8b:12:e1:dd:5d:1c:2d:c9:c8:e5:06:fb:99:37:4a:55:
03:b9:80:5e:94:ec:2e:76:fa:f2:27:06:d1:f0:93:08:e9:9c:
48:b5:b6:e2:bd:0c:86:90:98:5e:fb:c1:f3:59:22:e3:ec:fd:
18:87:df:ae:d2:bf:90:d6:6e:84:0f:b3:4b:52:8b:1c:17:6d:
06:b4:bf:da:3f:f6:45:39:fc:21:0d:4d:f3:a2:69:40:f9:6b:
2b:d0:32:fb:ab:4c:90:2d:20:e1:0f:cf:0b:66:03:10:fa:28:
2e:84:8b:f7:6a:19:2a:6e:5c:4e:ee:c8:86:d6:35:eb:f4:37:
1e:7e:29:72:38:e1:4d:76:5d:58:01:21:db:6a:06:48:9d:71:
77:db:12:69
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdCQzQxMTAvBgNVBAUTKEEyRjZGNjYxMzEyQzk1QkYwNUEwQjUyMzBCMTM3MUQ0
NjIyRkQ2MjcwHhcNMjUwMTIyMTc1NjMwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzkxMzE0ZS0yMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8dLbvBSEutQBZjb3CeaVLIY1qo1OIM141/HCUYRyF8jnENf5hb5fVsJikXAR
zFNN2s0AzZhVWIyNUtIDbDRl5OLZrjsf+t1+DkRn7QieMATQOu5LQ+mzcCmkfnPd
i/KEwN+JfIvoQStWc9jofX5522ib8hZ5BNS9fkaoDsc1UZDmb0cm5cLfuVMirXuO
PdZV4E8zYTWrrfvE6f08w1bwdBmZuX0+nV35iM0ea//8+YRUPW5H1KsXX62ZdHam
6Yi04VW8XCQ9v7tE3Ch4syLBtB8NMIiS5EB+OJEPZ7K2AK5IKo8E/HiO8cHUh4eH
IeM1khgPrFRnnTW+6G3Bu9vBqQIDAQABo4ICmjCCApYwHQYDVR0OBBYEFN/2bqEx
UgRbB8XyeXjW8EXG2KpkMB8GA1UdIwQYMBaAFKL29mExLJW/BaC1IwsTcdRiL9Yn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yNjFEMjgzMEQ1
MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xiOEZvTFVqQ3hOeDFHSXYx
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL292YjJZVEVzbGI4Rm9MVWpDeE54MUdJdjFpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTdCQzQvMjYxRDI4MzBENTBEMTFFOUJBRDZDMjI2QzRGOUFFMDIvMDUwNTQyMjRE
OEU0MTFFOUJFQjc5ODZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8E
FTATMBEEAgABMAsDAwChjgMEB8DkgDANBgkqhkiG9w0BAQsFAAOCAQEAdXELpA6Q
VHN01a7GOMsI/IwFMTjiaouSmjyoynzUog50DlbhQimIAXo2dLaqiIApM0TWR7JE
2jT4rF+SJ/0mrBs9qIB4BZuWn1iQmvlBlVeLj71HkzX1gkEIMVY79wFsKnn1Dsb/
VaI352DIIKOLEuHdXRwtycjlBvuZN0pVA7mAXpTsLnb68icG0fCTCOmcSLW24r0M
hpCYXvvB81ki4+z9GIffrtK/kNZuhA+zS1KLHBdtBrS/2j/2RTn8IQ1N86JpQPlr
K9Ay+6tMkC0g4Q/PC2YDEPooLoSL92oZKm5cTu7IhtY16/Q3Hn4pcjjhTXZdWAEh
22oGSJ1xd9sSaQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:54:47 2025 by rpki-client