Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/9052A59870AF11EF87B5DA0DC4F9AE02.roa
File: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (raw, json)
Hash identifier: ThX/kgORO//6BjDOUSvwSiBpiPXxDMuawCnXFSmZzGI=
Subject key identifier: 6B:0B:9D:EE:05:1E:13:1E:F4:01:90:D9:89:95:A3:61:29:C9:2B:89
Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial: 35
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/9052A59870AF11EF87B5DA0DC4F9AE02.roa
Signing time: Thu 12 Sep 2024 02:34:42 +0000
ROA not before: Thu 12 Sep 2024 02:34:42 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 38809
IP address blocks: 202.12.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F2DF
Validity
Not Before: Sep 12 02:34:42 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66e25341-4b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:fb:e5:39:00:1b:4c:a8:43:0b:b6:9e:1d:
a0:0d:8f:8b:c7:af:2f:54:50:d1:b2:7d:88:42:8f:
98:89:c9:3b:b9:3c:73:b7:a9:16:95:10:2b:2f:81:
d1:9a:2e:0a:69:a4:94:30:0e:d5:fa:e5:81:1d:b9:
37:1c:24:c3:ec:36:9b:2a:f5:3b:4c:e8:5f:ef:7d:
92:08:76:91:1c:f5:18:21:8c:a2:72:e8:19:7d:7a:
b2:55:13:b0:5f:b4:0d:ab:51:47:89:94:1e:4c:6f:
23:66:92:46:b5:b0:43:7f:f2:69:1a:a2:ea:55:a7:
5e:1f:11:3c:6b:d1:4c:02:b2:b6:d3:f6:be:85:99:
93:0a:85:8a:53:e4:00:10:4d:a5:f1:dd:d5:7e:f6:
d5:a4:10:3a:3d:0f:7b:2d:12:3f:a7:85:7f:9c:b6:
9f:c2:08:98:1c:d9:a5:86:c1:d0:2d:e8:d7:fa:b0:
d8:b9:26:8f:c3:6e:34:3b:05:c0:be:eb:42:17:f3:
3a:ee:8a:b0:a2:37:7b:9b:41:e2:bd:c8:16:bf:25:
88:58:52:49:0e:49:15:6e:9b:89:4a:af:58:69:ea:
31:1f:c0:e6:04:8e:a4:55:87:20:be:e3:58:1e:93:
ab:3b:44:60:33:35:d1:83:a5:ca:98:3a:45:f2:98:
44:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0B:9D:EE:05:1E:13:1E:F4:01:90:D9:89:95:A3:61:29:C9:2B:89
X509v3 Authority Key Identifier:
keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/9052A59870AF11EF87B5DA0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4c:2d:15:32:cb:08:63:2d:d5:f4:f2:9a:e5:56:60:8a:28:
fc:fd:14:82:87:63:64:e1:7d:b4:b8:b0:11:df:b1:26:3c:31:
e5:e9:93:54:8c:14:f6:e4:c3:a4:0e:c7:6c:e9:f0:76:c0:ae:
22:f7:3f:3a:d2:b7:29:60:00:34:a6:be:2a:6a:1b:ea:3e:c7:
d0:80:83:d4:80:c6:fe:14:da:7c:c2:ec:cf:73:ab:d3:1b:6b:
af:a7:a7:36:83:88:ca:35:e7:f8:27:c7:ab:41:bd:bf:16:33:
9b:13:a7:18:4c:ee:fb:8a:5c:c7:88:9a:1f:70:af:3e:1b:00:
74:fa:2a:24:4a:31:e4:4f:fb:f9:07:3e:44:63:88:f3:ff:a3:
21:d0:ff:0b:15:70:78:3c:95:2c:1d:be:15:ac:b5:62:cd:f2:
39:9b:7f:5e:8e:f8:04:87:a3:d1:7b:cc:b2:23:de:ee:c5:ea:
ea:4b:2f:ab:e9:f4:93:1f:ca:0c:38:cb:58:11:73:5c:9e:38:
1a:c0:fb:52:c7:1e:dc:6e:28:ff:c6:16:de:10:9f:ce:4c:2a:
a8:29:a4:b7:93:a1:b7:81:cf:d1:93:2e:91:61:92:df:20:dc:
cd:11:5e:81:29:80:60:3b:f5:d6:d9:7a:f1:a3:cd:a6:f4:c8:
47:1c:94:83
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RjJERjExMC8GA1UEBRMoNjY0NDA1MUJFMUUxMDcwRDU3MjJEMjRGQ0MxQTY1QkI2
QTY1OTNBQTAeFw0yNDA5MTIwMjM0NDJaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2ZTI1MzQxLTRiN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzxvvlOQAbTKhDC7aeHaANj4vHry9UUNGyfYhCj5iJyTu5PHO3qRaVECsvgdGa
LgpppJQwDtX65YEduTccJMPsNpsq9TtM6F/vfZIIdpEc9RghjKJy6Bl9erJVE7Bf
tA2rUUeJlB5MbyNmkka1sEN/8mkaoupVp14fETxr0UwCsrbT9r6FmZMKhYpT5AAQ
TaXx3dV+9tWkEDo9D3stEj+nhX+ctp/CCJgc2aWGwdAt6Nf6sNi5Jo/DbjQ7BcC+
60IX8zruirCiN3ubQeK9yBa/JYhYUkkOSRVum4lKr1hp6jEfwOYEjqRVhyC+41ge
k6s7RGAzNdGDpcqYOkXymESHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUawud7gUe
Ex70AZDZiZWjYSnJK4kwHwYDVR0jBBgwFoAUZkQFG+HhBw1XItJPzBplu2plk6ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGMkRGLzBBOTg4NzlBMjNB
RTExRUY5NDkzRjQ1Q0M0RjlBRTAyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWmtRRkctSGhCdzFYSXRKUHpCcGx1MnBsazZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi85MDUyQTU5ODcw
QUYxMUVGODdCNURBMERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMoMdzANBgkqhkiG9w0BAQsFAAOCAQEAP0wtFTLLCGMt1fTy
muVWYIoo/P0UgodjZOF9tLiwEd+xJjwx5emTVIwU9uTDpA7HbOnwdsCuIvc/OtK3
KWAANKa+Kmob6j7H0ICD1IDG/hTafMLsz3Or0xtrr6enNoOIyjXn+CfHq0G9vxYz
mxOnGEzu+4pcx4iaH3CvPhsAdPoqJEox5E/7+Qc+RGOI8/+jIdD/CxVweDyVLB2+
Fay1Ys3yOZt/Xo74BIej0XvMsiPe7sXq6ksvq+n0kx/KDDjLWBFzXJ44GsD7Usce
3G4o/8YW3hCfzkwqqCmkt5Oht4HP0ZMukWGS3yDczRFegSmAYDv11tl68aPNpvTI
RxyUgw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:55:16 2025 by rpki-client