Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/56C3DC822B0B11EF97C4A74AC4F9AE02.roa
File: 56C3DC822B0B11EF97C4A74AC4F9AE02.roa (raw, json)
Hash identifier: CVWZvuJMAyjtpzrMYgtcHwOIm2n01TzT8z4GiPVYHFA=
Subject key identifier: AA:E7:75:A7:4B:EA:88:1D:CA:DC:A2:14:4D:42:C7:46:1A:BB:F6:7A
Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial: 33BA
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/56C3DC822B0B11EF97C4A74AC4F9AE02.roa
Signing time: Thu 02 Jan 2025 15:40:58 +0000
ROA not before: Thu 02 Jan 2025 15:40:58 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 58779
IP address blocks: 43.243.224.0/22 maxlen: 24
2405:ef00::/32 maxlen: 32
2405:ef00::/32 maxlen: 48
2405:ef00:17::/48 maxlen: 48
2405:ef00:17::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13242 (0x33ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Validity
Not Before: Jan 2 15:40:58 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6776b38a-a7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:17:74:00:9e:85:34:1b:04:8b:a4:8e:5c:
a3:af:33:d1:db:78:96:e7:4b:5b:29:e3:33:a9:1b:
8f:a6:26:67:04:a0:97:09:4e:a0:28:dc:a3:c4:e3:
20:8d:cf:be:4a:f2:29:85:78:4f:09:70:5e:c3:7a:
4b:00:b4:42:7c:79:3c:da:69:50:19:99:e7:10:cc:
c1:1b:09:ca:f7:6e:a3:b9:c2:c3:06:2e:84:09:81:
c5:68:7e:76:fa:f6:e7:f7:59:72:be:8b:7f:85:8e:
7c:20:f5:6b:8f:f6:7a:eb:48:40:17:3e:0f:d8:02:
0e:fd:db:fb:55:6a:2f:43:4f:eb:21:00:06:2f:99:
07:8b:ca:52:3e:ef:22:3f:2b:af:11:85:fa:a0:09:
ae:87:90:5f:65:fd:a8:ee:86:e7:45:47:fc:5d:3e:
27:70:db:74:36:db:46:e5:b1:6d:4f:f7:c0:e5:d6:
14:12:3d:bf:a8:62:33:c9:cc:20:72:4d:ca:27:0f:
3a:61:74:ff:8f:56:ae:f5:c4:3b:e8:8e:be:6d:d3:
1c:76:17:20:2b:12:88:dc:98:60:b3:30:b7:9a:55:
76:1d:68:5e:b4:dd:fb:bf:3a:16:e5:ec:d1:7d:9c:
1a:b0:f1:4c:59:37:74:8c:7f:d1:1d:ff:53:c1:31:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:75:A7:4B:EA:88:1D:CA:DC:A2:14:4D:42:C7:46:1A:BB:F6:7A
X509v3 Authority Key Identifier:
keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/56C3DC822B0B11EF97C4A74AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.224.0/22
IPv6:
2405:ef00::/32
Signature Algorithm: sha256WithRSAEncryption
80:6c:d8:d4:1d:cd:76:89:1a:d2:8e:a3:ee:69:92:02:67:41:
c6:42:cb:4e:a2:d2:16:48:47:60:ca:4c:65:41:b0:ab:b4:88:
fd:68:41:99:60:3d:10:af:bf:3c:18:80:aa:aa:62:e2:33:f9:
59:8e:62:b6:ea:e9:1e:f8:6b:78:12:cd:6f:6c:91:da:d4:e4:
6a:35:e9:e7:0b:b8:6c:0b:93:cb:46:6b:de:d3:4f:e6:e8:0c:
d7:49:d2:eb:05:51:37:d1:68:3d:b1:f1:56:7e:ab:10:e4:19:
22:81:25:4c:b0:dc:bf:6a:28:93:87:37:b5:c3:b0:1f:53:29:
1a:af:78:06:06:cb:96:ce:d0:a2:27:39:6e:72:76:50:7b:ad:
a7:ee:95:6d:06:a3:cb:26:f5:97:6f:0d:6b:dc:55:4c:af:c0:
d9:f0:c8:3f:66:5b:e7:e2:1f:af:30:15:fb:53:80:f2:46:57:
77:1f:68:45:37:d5:0c:eb:af:3e:ad:ba:0a:0f:01:d0:b6:a0:
9d:27:52:ac:ba:33:aa:ac:06:e7:ae:8b:a2:fd:35:a9:11:da:
a8:69:1b:73:4b:18:58:da:a7:38:d5:6c:f3:6b:c1:89:8a:7b:
20:2a:1c:3b:8b:fd:db:da:e1:cd:97:16:a6:17:b3:1d:c5:17:
fa:8b:bd:c5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICM7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZERjczMjNCNTAz
QzQ5MzExREIwHhcNMjUwMTAyMTU0MDU4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc2YjM4YS1hN2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxt8XdACehTQbBIukjlyjrzPR23iW50tbKeMzqRuPpiZnBKCXCU6gKNyjxOMg
jc++SvIphXhPCXBew3pLALRCfHk82mlQGZnnEMzBGwnK926jucLDBi6ECYHFaH52
+vbn91lyvot/hY58IPVrj/Z660hAFz4P2AIO/dv7VWovQ0/rIQAGL5kHi8pSPu8i
PyuvEYX6oAmuh5BfZf2o7obnRUf8XT4ncNt0NttG5bFtT/fA5dYUEj2/qGIzycwg
ck3KJw86YXT/j1au9cQ76I6+bdMcdhcgKxKI3JhgszC3mlV2HWhetN37vzoW5ezR
fZwasPFMWTd0jH/RHf9TwTF3cQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKrndadL
6ogdytyiFE1Cx0Yau/Z6MB8GA1UdIwQYMBaAFGvkPmsTlkPLTBnm33MjtQPEkxHb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyNy9DMEM1ODA3MDQy
RTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4dE1HZWJmY3lPMUE4U1RF
ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EtUS1heE9XUTh0TUdlYmZjeU8xQThTVEVkcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThEMjcvQzBDNTgwNzA0MkU5MTFFMjk3NTBBMzJFMjk3OUJCMjAvNTZDM0RDODIy
QjBCMTFFRjk3QzRBNzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAIr8+AwDQQCAAIwBwMFACQF7wAwDQYJKoZIhvcNAQELBQAD
ggEBAIBs2NQdzXaJGtKOo+5pkgJnQcZCy06i0hZIR2DKTGVBsKu0iP1oQZlgPRCv
vzwYgKqqYuIz+VmOYrbq6R74a3gSzW9skdrU5Go16ecLuGwLk8tGa97TT+boDNdJ
0usFUTfRaD2x8VZ+qxDkGSKBJUyw3L9qKJOHN7XDsB9TKRqveAYGy5bO0KInOW5y
dlB7rafulW0Go8sm9ZdvDWvcVUyvwNnwyD9mW+fiH68wFftTgPJGV3cfaEU31Qzr
rz6tugoPAdC2oJ0nUqy6M6qsBueui6L9NakR2qhpG3NLGFjapzjVbPNrwYmKeyAq
HDuL/dva4c2XFqYXsx3FF/qLvcU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:32:50 2025 by rpki-client