Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/CBAED530FE6A11ECAB640344C4F9AE02.roa
File: CBAED530FE6A11ECAB640344C4F9AE02.roa (raw, json)
Hash identifier: ICClcvVBKcFuPdfdFfNgviyTAzomOOoPWyOYhtZ5b7Q=
Subject key identifier: C0:DB:46:42:98:E8:72:EE:09:61:0F:61:A8:6B:62:CC:54:BE:0A:ED
Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial: 0F9A
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/CBAED530FE6A11ECAB640344C4F9AE02.roa
Signing time: Thu 30 May 2024 18:51:09 +0000
ROA not before: Thu 30 May 2024 18:51:09 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 139341
IP address blocks: 162.14.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3994 (0xf9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974
Validity
Not Before: May 30 18:51:09 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6658ca9d-edcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:bd:1f:60:a5:6c:4b:50:98:ad:36:a0:84:
49:7f:51:d2:f9:a1:98:86:70:83:f1:ac:e1:02:50:
bd:3a:95:67:3c:3a:de:cb:a2:66:7d:0f:3c:b2:e2:
e3:8d:6d:59:99:46:1c:3e:84:8e:4f:f3:39:ed:fe:
78:02:2d:a9:89:90:fb:2b:c6:fe:5f:1b:41:58:00:
64:e3:53:56:79:a8:8f:47:33:09:91:51:2e:7b:42:
c2:a5:04:34:76:d6:f6:e7:d1:07:04:78:95:b1:d7:
a6:56:1d:dc:dc:68:7a:b4:47:97:36:86:0f:1a:fc:
85:62:03:d3:9f:29:fb:3d:56:92:f6:1a:b2:ee:1b:
47:1d:f5:15:50:9b:0e:64:bf:c6:f3:0e:62:24:3b:
fb:b8:bb:14:f6:59:06:6e:dc:3d:b5:70:60:8f:dd:
05:99:4f:6e:21:73:8f:6b:04:51:75:f1:9c:42:49:
a3:c1:be:95:f0:c7:39:f5:0d:e7:ac:6f:1a:c3:f8:
3a:4a:1e:ee:76:84:5e:09:1f:67:0e:27:c6:c3:27:
c8:8f:44:37:5d:44:ee:31:c5:aa:2b:29:c6:c2:b9:
d0:c7:b5:bb:f4:f8:14:c4:2b:01:be:e1:65:fe:f1:
eb:9a:e7:7f:59:d3:bf:22:ee:68:b9:c9:5a:a9:72:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:46:42:98:E8:72:EE:09:61:0F:61:A8:6B:62:CC:54:BE:0A:ED
X509v3 Authority Key Identifier:
keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/CBAED530FE6A11ECAB640344C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.14.40.0/21
Signature Algorithm: sha256WithRSAEncryption
52:97:92:2c:dc:f7:f2:d5:33:01:99:ff:51:e2:64:ee:b3:69:
8c:63:5a:d2:63:58:6b:3d:6a:3a:97:4e:48:8f:58:d1:a1:35:
09:a2:69:56:92:f8:75:f5:79:e9:d6:c5:a4:cc:6e:ea:f7:85:
f5:18:17:fa:b1:a7:71:06:e2:48:72:12:92:11:b1:ae:04:ba:
69:3d:c6:12:67:e3:95:7c:a5:db:c0:8a:49:48:11:ed:3c:a4:
a4:66:b4:6c:80:e9:a0:9a:5e:d7:79:74:3b:cf:52:c0:90:c2:
d5:62:1d:fc:f1:35:f9:35:06:6c:4a:c9:d8:24:dc:d1:6a:30:
03:2a:4e:d6:e0:2c:9e:fc:f1:2b:19:93:b4:7f:90:6c:dd:aa:
f3:1c:f2:ba:5c:8e:94:2b:92:1d:0b:7a:06:d2:39:68:a4:d1:
d1:35:69:09:0f:0b:56:96:3b:9c:98:9a:0f:50:a0:c1:d2:57:
e9:2d:44:d8:aa:ae:71:8b:8e:13:46:db:54:c3:f6:eb:a8:cf:
45:ce:22:ec:fb:00:ab:5d:37:73:b0:50:a4:b1:37:3d:1f:4e:
dc:bd:fb:ce:67:6e:d4:64:8b:05:8b:0f:e7:87:8e:03:24:36:
51:19:0c:98:b5:c9:e7:4b:42:0b:7c:82:bf:1b:d3:ba:21:1d:
1b:6f:6b:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4
ODNCQjkxNDUwHhcNMjQwNTMwMTg1MTA5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU4Y2E5ZC1lZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv7O9H2ClbEtQmK02oIRJf1HS+aGYhnCD8azhAlC9OpVnPDrey6JmfQ88suLj
jW1ZmUYcPoSOT/M57f54Ai2piZD7K8b+XxtBWABk41NWeaiPRzMJkVEue0LCpQQ0
dtb259EHBHiVsdemVh3c3Gh6tEeXNoYPGvyFYgPTnyn7PVaS9hqy7htHHfUVUJsO
ZL/G8w5iJDv7uLsU9lkGbtw9tXBgj90FmU9uIXOPawRRdfGcQkmjwb6V8Mc59Q3n
rG8aw/g6Sh7udoReCR9nDifGwyfIj0Q3XUTuMcWqKynGwrnQx7W79PgUxCsBvuFl
/vHrmud/WdO/Iu5ouclaqXLRowIDAQABo4IClTCCApEwHQYDVR0OBBYEFMDbRkKY
6HLuCWEPYahrYsxUvgrtMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB
NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr
VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjA5NzQvRTEwNUIzQkEzQTQ5MTFFOTk0MEYyRDE2QzRGOUFFMDIvQ0JBRUQ1MzBG
RTZBMTFFQ0FCNjQwMzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOiDigwDQYJKoZIhvcNAQELBQADggEBAFKXkizc9/LVMwGZ
/1HiZO6zaYxjWtJjWGs9ajqXTkiPWNGhNQmiaVaS+HX1eenWxaTMbur3hfUYF/qx
p3EG4khyEpIRsa4Eumk9xhJn45V8pdvAiklIEe08pKRmtGyA6aCaXtd5dDvPUsCQ
wtViHfzxNfk1BmxKydgk3NFqMAMqTtbgLJ788SsZk7R/kGzdqvMc8rpcjpQrkh0L
egbSOWik0dE1aQkPC1aWO5yYmg9QoMHSV+ktRNiqrnGLjhNG21TD9uuoz0XOIuz7
AKtdN3OwUKSxNz0fTty9+85nbtRkiwWLD+eHjgMkNlEZDJi1yedLQgt8gr8b07oh
HRtva5o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:28:50 2025 by rpki-client