Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa
File: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (raw, json)
Hash identifier: +6Qn9fMMN2JTLH3JCNnMkYnKTJVe5wXPrggbGe55SKw=
Subject key identifier: FF:4F:C5:8B:95:3B:D8:75:04:10:8D:0B:96:D8:D3:EA:16:63:54:5E
Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial: 02A8
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa
Signing time: Thu 01 Aug 2024 04:30:45 +0000
ROA not before: Thu 01 Aug 2024 04:30:45 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 7545
IP address blocks: 202.12.90.0/24 maxlen: 24
203.14.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Validity
Not Before: Aug 1 04:30:45 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66ab0f75-1aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:99:b9:12:65:55:9a:18:45:81:f8:b1:e5:
4e:ca:40:ca:58:d9:ee:b7:fc:e0:05:f1:f0:a3:85:
73:11:19:ed:a4:27:45:13:4f:78:82:ee:3a:94:85:
cf:fe:9d:2d:16:c3:32:41:4f:f9:82:82:e0:28:74:
3f:97:f5:7c:2c:e7:73:2d:c6:79:27:54:ae:ca:7e:
7c:a1:38:59:ba:ec:f4:99:96:e7:e9:2a:a5:01:70:
1c:20:0f:a0:b2:40:06:38:60:23:97:7f:dc:92:ca:
43:ff:d4:53:f6:ce:e5:c4:23:b2:37:0c:6b:4a:5f:
e4:6f:db:d6:e0:b4:f0:16:fb:a4:ad:1e:35:98:8d:
7f:8b:43:a9:cc:9a:42:17:3a:dc:cb:2a:00:d7:69:
f0:4d:fd:83:13:2a:87:98:30:35:b3:c3:ff:bb:99:
08:19:fa:5e:a9:a9:9b:04:12:bd:f9:48:b8:ff:55:
85:23:c7:93:8d:37:67:03:5f:a0:1e:39:3f:44:d6:
7f:4e:31:27:f6:d6:0a:2b:59:81:4e:55:6a:d3:d7:
b2:81:73:b2:63:2d:79:ae:30:2d:d7:e8:d0:9c:fd:
e9:fb:d3:27:7e:f8:56:ea:2d:50:6a:7a:d7:95:7e:
55:da:66:80:86:ca:4c:0e:55:08:63:5b:2d:1c:8c:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:C5:8B:95:3B:D8:75:04:10:8D:0B:96:D8:D3:EA:16:63:54:5E
X509v3 Authority Key Identifier:
keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.90.0/24
203.14.156.0/23
Signature Algorithm: sha256WithRSAEncryption
33:6c:69:30:d7:aa:2c:a5:a1:19:6c:3f:5d:66:73:76:c9:0b:
3b:92:e9:7a:31:cd:57:a7:3e:55:e7:97:be:ae:8d:9a:13:4a:
b2:24:54:d0:07:49:b4:6c:ff:02:aa:bd:61:a1:f9:f3:48:77:
c9:6f:0d:9f:2d:93:95:4f:b8:f1:61:f3:12:74:58:88:61:7d:
b3:97:02:5c:3b:aa:d9:2b:1f:26:ff:a8:be:f9:6c:47:2b:41:
50:84:cf:f4:ea:d4:cb:84:a0:50:ac:de:85:d9:94:c4:94:34:
32:74:6b:83:56:2f:3c:0a:8d:ad:bf:89:57:e4:ef:18:12:61:
72:63:27:82:83:1a:6b:f9:d1:48:7c:f6:be:fe:b8:02:bd:aa:
5d:f9:0c:23:58:b1:71:fe:7b:e4:1d:58:d8:c0:22:c9:fd:e3:
1e:43:8b:c2:f8:b3:a4:49:f3:64:f4:9a:0a:8e:ea:a5:0a:1d:
87:6b:19:3a:f5:dc:a5:94:0b:4e:07:5e:c3:22:50:fe:82:c9:
eb:09:c0:d2:1a:b7:ad:21:47:6c:9b:56:a5:14:10:58:d7:1e:
3c:74:46:7a:c3:3d:a0:7f:06:c2:65:3d:b4:35:cf:17:bb:41:
89:08:32:10:b1:a1:57:6b:8f:8e:02:af:02:da:c2:d5:f1:d3:
9d:c7:fc:92
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx
MjcwMzg2MDgwHhcNMjQwODAxMDQzMDQ1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmFiMGY3NS0xYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAaZuRJlVZoYRYH4seVOykDKWNnut/zgBfHwo4VzERntpCdFE094gu46lIXP
/p0tFsMyQU/5goLgKHQ/l/V8LOdzLcZ5J1Suyn58oThZuuz0mZbn6SqlAXAcIA+g
skAGOGAjl3/ckspD/9RT9s7lxCOyNwxrSl/kb9vW4LTwFvukrR41mI1/i0OpzJpC
FzrcyyoA12nwTf2DEyqHmDA1s8P/u5kIGfpeqambBBK9+Ui4/1WFI8eTjTdnA1+g
Hjk/RNZ/TjEn9tYKK1mBTlVq09eygXOyYy15rjAt1+jQnP3p+9MnfvhW6i1QanrX
lX5V2maAhspMDlUIY1stHIxr1QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP9PxYuV
O9h1BBCNC5bY0+oWY1ReMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC
RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTkxQkMvQUU0NEQyNEFEQkU5MTFFQzk1MTEwNTE1QzRGOUFFMDIvRDFBNENGQkE0
RkJFMTFFRjk3ODEyQjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADKDFoDBAHLDpwwDQYJKoZIhvcNAQELBQADggEBADNsaTDX
qiyloRlsP11mc3bJCzuS6XoxzVenPlXnl76ujZoTSrIkVNAHSbRs/wKqvWGh+fNI
d8lvDZ8tk5VPuPFh8xJ0WIhhfbOXAlw7qtkrHyb/qL75bEcrQVCEz/Tq1MuEoFCs
3oXZlMSUNDJ0a4NWLzwKja2/iVfk7xgSYXJjJ4KDGmv50Uh89r7+uAK9ql35DCNY
sXH+e+QdWNjAIsn94x5Di8L4s6RJ82T0mgqO6qUKHYdrGTr13KWUC04HXsMiUP6C
yesJwNIat60hR2ybVqUUEFjXHjx0RnrDPaB/BsJlPbQ1zxe7QYkIMhCxoVdrj44C
rwLawtXx053H/JI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:46:27 2025 by rpki-client