Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa
File: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (raw, json)
Hash identifier: cotJkdbyDdnoqnW03wwLgBND9x/lhPuMs/gJ3BCR7lI=
Subject key identifier: E9:FE:1B:7A:7E:C4:79:91:72:3B:BA:C6:82:E7:FB:33:EF:48:F7:D1
Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial: 03A1
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:33:07 +0000
ROA not before: Wed 31 Jul 2024 02:33:07 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 137977
IP address blocks: 147.50.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929 (0x3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA
Validity
Not Before: Jul 31 02:33:07 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a9a263-637c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:ac:80:2e:e4:07:37:da:7c:67:14:50:6a:
f3:38:9f:d5:8e:16:7d:98:6a:2e:81:ab:28:21:d6:
7a:83:55:a2:34:54:ca:66:c7:bf:38:b0:f4:61:bf:
84:cb:0d:1b:de:fc:92:ad:ab:cb:f6:d2:24:5d:11:
9c:59:11:44:da:05:a7:9e:1e:9c:b1:61:5a:9f:6b:
a7:3f:95:db:c8:6b:95:6c:d9:61:1b:ad:fe:33:31:
c7:fd:04:96:f2:ca:1d:02:8f:2d:13:cf:27:7e:44:
a8:46:51:d3:8c:8e:cb:69:6d:e8:55:a2:5c:30:18:
05:73:fc:a4:40:c7:91:9e:57:02:5e:f9:10:5d:30:
ed:17:6c:47:f8:51:97:32:5e:43:6d:e0:df:fc:bc:
60:29:15:f5:45:58:e3:77:63:1a:0e:a7:fa:a3:e0:
72:09:e2:1c:8c:0d:36:68:83:b1:fc:e4:4f:ba:06:
70:8b:e1:8b:4c:64:7d:50:60:91:87:66:2b:89:08:
4a:56:e2:46:2a:10:49:b1:d4:b2:74:40:49:70:a4:
0a:ad:00:af:67:0a:3b:99:23:40:1d:93:c0:2c:2b:
b2:cc:dc:f7:a4:54:a2:69:e6:d5:69:b9:96:8d:73:
a4:6e:62:77:61:7a:fa:0f:ac:c8:1f:0f:f2:24:6b:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FE:1B:7A:7E:C4:79:91:72:3B:BA:C6:82:E7:FB:33:EF:48:F7:D1
X509v3 Authority Key Identifier:
keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a0:59:20:2b:41:f3:33:f3:90:f9:c1:65:66:fc:ca:58:ce:
9d:98:bf:c2:d6:ac:b1:1e:8e:83:56:50:32:98:32:45:a4:6d:
9a:5a:82:07:fe:f6:bc:33:e8:99:21:9d:9e:f6:c9:7e:f1:7e:
0b:83:15:a2:df:ad:55:cc:f2:53:c6:b2:5f:e0:69:b3:80:60:
cb:c2:17:2e:83:66:32:14:84:06:2b:e7:86:3c:b5:8b:55:92:
df:ba:4a:bf:3e:93:ea:33:d4:e4:b3:8d:d8:96:ef:a4:f2:33:
b5:d3:76:31:72:1b:8f:5b:e8:2a:f8:f2:b1:86:93:94:cd:0a:
3a:b5:92:fd:3a:e0:33:76:55:d7:f9:c0:17:02:bb:61:cb:c8:
5a:dd:e1:32:96:45:17:d0:0a:c5:c5:8f:ef:c6:29:7a:0d:ea:
95:e9:d0:98:13:8a:c7:43:89:4a:07:c8:06:fa:7a:f7:2b:19:
b4:56:b6:39:4e:28:08:be:d3:18:f5:5e:16:f2:7a:f4:81:0c:
5c:66:f7:f7:26:6c:ec:fe:44:b0:12:6f:dc:03:43:c9:11:2f:
a3:40:92:0b:3a:e7:33:45:03:a6:93:81:4a:d6:6c:1d:44:a1:
4f:cb:49:f0:35:a8:e0:62:cb:8c:9e:a5:c0:b2:20:e7:64:66:
bb:09:f1:ae
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF
NjdCQTRCQTYwHhcNMjQwNzMxMDIzMzA3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE5YTI2My02MzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3/msgC7kBzfafGcUUGrzOJ/VjhZ9mGougasoIdZ6g1WiNFTKZse/OLD0Yb+E
yw0b3vySravL9tIkXRGcWRFE2gWnnh6csWFan2unP5XbyGuVbNlhG63+MzHH/QSW
8sodAo8tE88nfkSoRlHTjI7LaW3oVaJcMBgFc/ykQMeRnlcCXvkQXTDtF2xH+FGX
Ml5DbeDf/LxgKRX1RVjjd2MaDqf6o+ByCeIcjA02aIOx/ORPugZwi+GLTGR9UGCR
h2YriQhKVuJGKhBJsdSydEBJcKQKrQCvZwo7mSNAHZPALCuyzNz3pFSiaebVabmW
jXOkbmJ3YXr6D6zIHw/yJGsSywIDAQABo4IClTCCApEwHQYDVR0OBBYEFOn+G3p+
xHmRcju6xoLn+zPvSPfRMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRUMxRUU2NTI4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvOUZFRTk1MTZE
RjNFMTFFQzgzQ0NGRTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACTMgIwDQYJKoZIhvcNAQELBQADggEBAD6gWSArQfMz85D5
wWVm/MpYzp2Yv8LWrLEejoNWUDKYMkWkbZpaggf+9rwz6JkhnZ72yX7xfguDFaLf
rVXM8lPGsl/gabOAYMvCFy6DZjIUhAYr54Y8tYtVkt+6Sr8+k+oz1OSzjdiW76Ty
M7XTdjFyG49b6Cr48rGGk5TNCjq1kv064DN2Vdf5wBcCu2HLyFrd4TKWRRfQCsXF
j+/GKXoN6pXp0JgTisdDiUoHyAb6evcrGbRWtjlOKAi+0xj1XhbyevSBDFxm9/cm
bOz+RLASb9wDQ8kRL6NAkgs65zNFA6aTgUrWbB1EoU/LSfA1qOBiy4yepcCyIOdk
ZrsJ8a4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:59 2025 by rpki-client