Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/55EF0CDEBDC911E7BBC5D915C4F9AE02.roa
File: 55EF0CDEBDC911E7BBC5D915C4F9AE02.roa (raw, json)
Hash identifier: ZJwLijzZD83NVC10RkVMsHxseWrZ4pAmW8JIXGjhsRo=
Subject key identifier: 25:EC:D4:DD:08:F4:5A:C2:CB:2C:ED:C7:A4:7D:B4:FB:99:61:E6:40
Certificate issuer: /CN=A911344E/serialNumber=6C563ADA47CAC374D313199F7DB963FB0A899DB3
Certificate serial: 179A
Authority key identifier: 6C:56:3A:DA:47:CA:C3:74:D3:13:19:9F:7D:B9:63:FB:0A:89:9D:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFY62kfKw3TTExmffblj-wqJnbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/55EF0CDEBDC911E7BBC5D915C4F9AE02.roa
Signing time: Tue 31 Dec 2024 16:54:19 +0000
ROA not before: Tue 31 Dec 2024 16:54:19 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 49544
IP address blocks: 45.124.132.0/22 maxlen: 22
2402:b180:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6042 (0x179a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911344E, serialNumber=6C563ADA47CAC374D313199F7DB963FB0A899DB3
Validity
Not Before: Dec 31 16:54:19 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=677421bb-adcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:13:e7:ce:be:36:84:c7:21:0a:b6:67:97:
78:ec:f3:e3:3c:1b:47:a2:b7:2c:50:0a:3b:80:23:
db:21:4d:96:5d:a4:eb:f3:b7:96:57:42:35:73:12:
cb:e0:16:13:d0:83:1b:46:a8:a4:8a:50:45:16:97:
0c:a4:65:87:a4:01:58:2e:20:4d:3e:0a:9b:8e:7d:
bb:c0:c7:3b:20:20:9a:d5:ad:5a:f0:a9:eb:fa:f2:
e7:98:ca:0b:30:d8:d6:cc:86:4b:f8:f5:59:9d:32:
6a:b9:63:22:12:48:98:68:01:11:24:23:4d:a0:81:
56:17:89:ca:d6:fa:5e:b6:ab:a3:53:49:fe:7c:2d:
27:17:13:6c:e0:12:fa:f4:db:e8:57:23:77:f6:06:
5d:3d:32:13:ca:3a:ff:8f:d2:94:b3:ff:b0:3f:4c:
e9:6c:29:f5:6a:f8:85:be:9a:ee:39:5e:2f:8a:07:
bb:1a:74:28:c1:5b:49:73:6d:45:ae:24:82:a3:ac:
f8:9f:a1:33:59:e7:06:19:f1:84:4a:ec:77:2f:4d:
f4:d5:dd:a2:35:4e:a8:6e:77:b7:59:d0:aa:99:90:
d5:76:a7:55:99:8a:cd:62:9c:11:99:90:5f:8b:29:
16:30:d1:b2:9d:d7:17:8f:a4:f4:60:05:3c:69:c0:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EC:D4:DD:08:F4:5A:C2:CB:2C:ED:C7:A4:7D:B4:FB:99:61:E6:40
X509v3 Authority Key Identifier:
keyid:6C:56:3A:DA:47:CA:C3:74:D3:13:19:9F:7D:B9:63:FB:0A:89:9D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFY62kfKw3TTExmffblj-wqJnbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/55EF0CDEBDC911E7BBC5D915C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.124.132.0/22
IPv6:
2402:b180:9000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:6b:d8:29:19:48:6b:a6:37:a6:81:ff:7e:30:6f:60:ea:41:
64:52:1f:61:75:94:ff:c7:9c:d8:c2:6d:41:ae:aa:18:f6:31:
15:2a:d1:7a:25:f5:2e:73:9f:1a:01:d9:66:bb:87:f0:96:89:
a2:1f:7e:57:f6:65:92:48:18:a5:c0:2c:e7:76:22:0c:d8:82:
1f:c2:b4:08:f8:66:be:6e:90:85:00:02:0c:eb:eb:2c:4a:2a:
aa:c1:d4:0c:80:85:60:b9:fb:20:a5:59:63:61:36:b8:c4:ec:
bf:59:a6:00:31:2d:78:18:9a:62:6f:58:3b:04:81:bd:cf:cd:
70:f7:88:3c:f6:26:ce:60:a5:43:17:d7:79:04:06:34:cd:ea:
db:9c:70:b9:23:ae:b7:e9:2e:c1:a6:ab:01:9b:c6:0d:ec:2f:
e9:97:04:77:84:a4:30:08:ce:4f:5d:14:d3:bc:5a:60:9d:21:
60:8a:86:d5:7e:b3:54:80:9b:50:ca:f3:cb:47:74:4e:86:a4:
b9:e6:6b:cf:8b:e8:23:72:f5:85:87:c9:71:4a:1b:49:12:f6:
b0:75:da:e5:7a:83:b4:4a:5b:99:c1:c9:23:d8:64:d4:6d:4a:
35:13:58:f9:cb:64:e3:26:6c:fa:6f:3a:0c:f8:29:49:01:68:
04:74:79:a9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICF5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM0NEUxMTAvBgNVBAUTKDZDNTYzQURBNDdDQUMzNzREMzEzMTk5RjdEQjk2M0ZC
MEE4OTlEQjMwHhcNMjQxMjMxMTY1NDE5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc0MjFiYi1hZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwWIT586+NoTHIQq2Z5d47PPjPBtHorcsUAo7gCPbIU2WXaTr87eWV0I1cxLL
4BYT0IMbRqikilBFFpcMpGWHpAFYLiBNPgqbjn27wMc7ICCa1a1a8Knr+vLnmMoL
MNjWzIZL+PVZnTJquWMiEkiYaAERJCNNoIFWF4nK1vpetqujU0n+fC0nFxNs4BL6
9NvoVyN39gZdPTITyjr/j9KUs/+wP0zpbCn1aviFvpruOV4vige7GnQowVtJc21F
riSCo6z4n6EzWecGGfGESux3L0301d2iNU6obne3WdCqmZDVdqdVmYrNYpwRmZBf
iykWMNGyndcXj6T0YAU8acAiFwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCXs1N0I
9FrCyyztx6R9tPuZYeZAMB8GA1UdIwQYMBaAFGxWOtpHysN00xMZn325Y/sKiZ2z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzQ0RS9EMDFBNzU3MkJE
QzcxMUU3OUJEMTI5MTJDNEY5QUUwMi9iRlk2MmtmS3czVFRFeG1mZmJsai13cUpu
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JGWTYya2ZLdzNUVEV4bWZmYmxqLXdxSm5iTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTM0NEUvRDAxQTc1NzJCREM3MTFFNzlCRDEyOTEyQzRGOUFFMDIvNTVFRjBDREVC
REM5MTFFN0JCQzVEOTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E
IDAeMAwEAgABMAYDBAItfIQwDgQCAAIwCAMGBCQCsYCQMA0GCSqGSIb3DQEBCwUA
A4IBAQCaa9gpGUhrpjemgf9+MG9g6kFkUh9hdZT/x5zYwm1BrqoY9jEVKtF6JfUu
c58aAdlmu4fwlomiH35X9mWSSBilwCzndiIM2IIfwrQI+Ga+bpCFAAIM6+ssSiqq
wdQMgIVgufsgpVljYTa4xOy/WaYAMS14GJpib1g7BIG9z81w94g89ibOYKVDF9d5
BAY0zerbnHC5I6636S7BpqsBm8YN7C/plwR3hKQwCM5PXRTTvFpgnSFgiobVfrNU
gJtQyvPLR3ROhqS55mvPi+gjcvWFh8lxShtJEvawddrleoO0SluZwckj2GTUbUo1
E1j5y2TjJmz6bzoM+ClJAWgEdHmp
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:10 2025 by rpki-client