Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/60629332FE4611EFB15A9D48C4F9AE02.roa
File: 60629332FE4611EFB15A9D48C4F9AE02.roa (raw, json)
Hash identifier: 3EtrP079py1XOOa3Ek7irmapcKEfNhwqmeBlfZT1l7s=
Subject key identifier: 04:22:90:36:C3:1B:90:85:00:66:D6:2F:F0:4D:32:E4:D7:62:FE:02
Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial: 3489
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/60629332FE4611EFB15A9D48C4F9AE02.roa
Signing time: Tue 11 Mar 2025 06:59:29 +0000
ROA not before: Tue 11 Mar 2025 06:59:29 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 9934
IP address blocks: 202.5.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13449 (0x3489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912142C
Validity
Not Before: Mar 11 06:59:29 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67cfdf51-a3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:0a:4e:73:7c:55:b3:95:4a:45:af:a2:3c:
1c:b7:98:a3:6e:a6:99:37:ae:df:d0:86:0b:58:7a:
a0:ee:dc:ba:68:24:97:7d:e1:a5:c8:b8:57:15:d9:
78:a6:a5:65:ee:6b:3e:77:90:c8:09:e7:a8:73:fe:
9f:0d:0b:09:df:0e:a9:1f:aa:9e:80:89:cc:1a:49:
dd:fd:b7:57:a0:8f:56:79:58:15:36:6c:6b:69:bf:
f0:e2:e0:73:a1:13:f1:ad:50:46:f1:38:c2:99:75:
42:c1:a6:05:1d:67:0f:73:e4:67:90:d4:08:c4:28:
f4:f1:c8:42:6d:ff:5a:a2:0f:48:85:10:66:f2:63:
a7:fd:b6:59:cc:7b:75:d3:ea:5e:12:1f:be:48:ba:
f5:93:75:f7:07:1b:d5:84:e9:fe:c0:6a:b1:c0:9d:
2e:4e:e9:96:78:1b:5a:3e:7e:94:9e:08:ff:27:10:
be:25:35:c3:1f:24:7a:2d:e3:8d:9b:63:76:82:d9:
e6:f0:4c:9b:e3:29:ba:19:52:91:ef:43:38:ae:d0:
67:98:86:ad:bd:74:ad:f1:86:1d:5a:9c:9e:bc:e2:
e3:2a:13:48:2c:9f:ef:cd:75:9c:5a:ed:79:e8:19:
f4:cd:ed:d0:da:75:5e:a0:a2:f2:ad:30:d6:1c:b0:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:22:90:36:C3:1B:90:85:00:66:D6:2F:F0:4D:32:E4:D7:62:FE:02
X509v3 Authority Key Identifier:
keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/60629332FE4611EFB15A9D48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.5.196.0/24
Signature Algorithm: sha256WithRSAEncryption
61:25:69:54:2d:29:a8:14:5f:30:b9:cf:a2:55:2e:16:d2:da:
11:23:d2:d9:5e:bd:79:9a:0b:78:d3:58:1a:75:0f:63:61:15:
28:72:ba:58:35:12:e6:cc:bc:65:c7:98:6a:7c:b6:fb:e0:2f:
b0:85:f6:8a:c8:a8:eb:c9:9d:74:3c:d7:58:a2:7e:66:05:92:
a0:02:a4:3f:bb:c9:af:db:4b:fd:c0:8c:18:4c:bf:49:da:9d:
66:bb:10:f4:5c:71:47:ef:94:00:93:be:ef:5e:1f:a8:2a:1b:
aa:e2:6e:6e:92:d7:f9:fb:87:f0:d9:2f:a4:4c:44:38:8f:3d:
1b:f3:80:c9:4c:49:04:9c:d0:3c:5d:7c:cd:44:f6:1e:65:d1:
28:4f:30:5d:28:04:ce:50:e7:1f:46:69:5c:f6:2f:e5:21:fb:
5b:11:c3:6d:bb:bf:f1:d6:5e:69:c4:ec:14:93:42:8d:96:34:
f1:fa:c9:a3:9c:7f:e0:9d:52:4a:77:f6:28:03:48:a3:e3:91:
a4:0a:62:d2:1f:b2:6b:81:94:70:21:d0:58:ab:7d:12:e0:23:
48:ca:a3:e8:2b:35:9f:de:ee:e5:00:7e:a3:19:d5:d2:2c:23:
ba:96:e2:cf:56:50:97:92:06:e6:a8:15:7c:ef:a9:f9:c5:9a:
e3:4e:c2:68
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE0MkMxMTAvBgNVBAUTKEJGNTgzRkYwN0RBMzU2RkRFMjgyODE5RjQ3QkNFRTI0
NzUxMzExOUEwHhcNMjUwMzExMDY1OTI5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2NmZGY1MS1hM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwlIKTnN8VbOVSkWvojwct5ijbqaZN67f0IYLWHqg7ty6aCSXfeGlyLhXFdl4
pqVl7ms+d5DICeeoc/6fDQsJ3w6pH6qegInMGknd/bdXoI9WeVgVNmxrab/w4uBz
oRPxrVBG8TjCmXVCwaYFHWcPc+RnkNQIxCj08chCbf9aog9IhRBm8mOn/bZZzHt1
0+peEh++SLr1k3X3BxvVhOn+wGqxwJ0uTumWeBtaPn6Ungj/JxC+JTXDHyR6LeON
m2N2gtnm8Eyb4ym6GVKR70M4rtBnmIatvXSt8YYdWpyevOLjKhNILJ/vzXWcWu15
6Bn0ze3Q2nVeoKLyrTDWHLBEYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAQikDbD
G5CFAGbWL/BNMuTXYv4CMB8GA1UdIwQYMBaAFL9YP/B9o1b94oKBn0e87iR1ExGa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yMEIzN0NGRTFE
ODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2M2lnb0dmUjd6dUpIVVRF
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3YxZ184SDJqVnYzaWdvR2ZSN3p1SkhVVEVaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjE0MkMvMjBCMzdDRkUxRDg3MTFFMkJERUZGN0RFMDhCMDJDRDIvNjA2MjkzMzJG
RTQ2MTFFRkIxNUE5RDQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKBcQwDQYJKoZIhvcNAQELBQADggEBAGElaVQtKagUXzC5
z6JVLhbS2hEj0tlevXmaC3jTWBp1D2NhFShyulg1EubMvGXHmGp8tvvgL7CF9orI
qOvJnXQ811iifmYFkqACpD+7ya/bS/3AjBhMv0nanWa7EPRccUfvlACTvu9eH6gq
G6ribm6S1/n7h/DZL6RMRDiPPRvzgMlMSQSc0DxdfM1E9h5l0ShPMF0oBM5Q5x9G
aVz2L+Uh+1sRw227v/HWXmnE7BSTQo2WNPH6yaOcf+CdUkp39igDSKPjkaQKYtIf
smuBlHAh0FirfRLgI0jKo+grNZ/e7uUAfqMZ1dIsI7qW4s9WUJeSBuaoFXzvqfnF
muNOwmg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:42 2025 by rpki-client