Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/64B5B49A052C11F0AFEC0478C4F9AE02.roa
File: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (raw, json)
Hash identifier: osIylBmoiOl0hS+6q4jLTN9ELMVNH7Z3hIxqCI6TGCM=
Subject key identifier: 71:0F:CC:2A:E1:07:77:1D:0B:99:E8:A6:43:31:87:1E:31:4A:A7:63
Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial: 0155
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/64B5B49A052C11F0AFEC0478C4F9AE02.roa
Signing time: Thu 20 Mar 2025 01:41:07 +0000
ROA not before: Thu 20 Mar 2025 01:41:07 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 151664
IP address blocks: 101.1.5.0/24 maxlen: 24
2401:44c0:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A294
Validity
Not Before: Mar 20 01:41:07 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67db7233-d5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:b3:b9:61:08:e0:4d:81:0c:4f:89:80:bf:
7d:74:d9:fb:cb:5d:d1:fc:02:f7:c4:b7:59:60:f1:
92:aa:14:bf:75:53:07:53:97:6d:bb:5f:16:fc:46:
bf:79:73:21:17:dd:27:87:8b:03:c1:34:5d:39:f6:
af:35:b0:73:42:fc:a0:d9:cc:03:00:8f:07:d2:e4:
ef:21:be:ff:00:12:ee:27:66:49:9a:89:ff:51:6e:
bc:5b:84:6d:f7:ac:fc:85:17:dd:af:02:e2:a1:29:
f4:cc:61:59:fc:17:3a:72:32:ce:5f:31:68:05:cd:
55:0d:c1:4a:fe:35:ff:e3:2c:b9:f7:69:15:b5:d0:
c1:50:de:af:58:bb:f8:2d:e2:11:33:8c:28:a4:cb:
63:70:7c:e3:b2:3f:9d:3b:02:a5:54:2d:ed:71:08:
5c:0c:43:24:c7:f3:64:4d:8b:63:31:02:90:fd:30:
4e:c1:18:ec:32:24:67:b9:93:8d:2b:30:93:04:22:
70:7e:6d:d8:ff:24:a6:a4:24:49:21:ec:04:f9:fb:
a7:49:5f:12:61:98:9e:2f:89:70:d5:06:47:e2:97:
0a:f4:cf:1b:a0:65:1b:a9:86:4f:c9:44:77:45:da:
ad:e3:29:0f:5e:8e:4b:b7:0e:e0:d3:1f:36:df:ad:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:CC:2A:E1:07:77:1D:0B:99:E8:A6:43:31:87:1E:31:4A:A7:63
X509v3 Authority Key Identifier:
keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/64B5B49A052C11F0AFEC0478C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.1.5.0/24
IPv6:
2401:44c0:4::/48
Signature Algorithm: sha256WithRSAEncryption
a5:77:5d:d9:53:98:ed:a7:96:12:36:af:a4:f9:7e:a5:72:b5:
e0:bc:c3:07:b2:0f:22:29:2e:cb:c0:de:fc:3a:63:d6:c9:c7:
46:98:0e:f1:6e:a4:40:34:66:6a:a8:b4:6e:e7:79:6d:83:0f:
1d:4e:15:83:ca:1e:05:6b:a9:54:92:ba:f6:ab:b2:96:88:30:
fe:e9:cc:58:c9:c6:d4:0d:a0:a6:a7:33:ec:91:a3:24:a5:68:
28:84:a9:3c:6a:b3:28:7f:6e:7e:9b:55:21:86:89:4c:1a:8c:
d1:75:92:a9:f2:90:0d:34:6e:18:11:96:25:59:66:64:cf:c8:
3c:c1:f2:49:b7:4b:0b:9c:af:e9:f4:89:de:57:bc:12:6c:e2:
b7:8e:5a:09:0b:55:52:8a:0e:e7:e9:73:22:67:21:94:ed:eb:
a5:11:10:16:3b:3b:50:19:15:1a:cf:d8:f8:9b:1a:af:67:3f:
a2:02:82:b3:77:1b:95:a9:6f:a3:b7:eb:41:96:b0:8a:fa:ca:
f5:97:63:48:82:ba:0b:fc:9c:9e:fe:4a:ab:e8:b2:a5:42:07:
0d:84:d8:83:eb:6b:40:fb:a8:c2:2e:0f:8a:e7:a9:a1:06:20:
ac:8b:9b:cc:51:c8:4d:1b:90:95:ab:37:da:a6:a1:35:48:4d:
f4:ac:6c:62
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz
RUUyNjdDMDQwHhcNMjUwMzIwMDE0MTA3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2RiNzIzMy1kNWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs22zuWEI4E2BDE+JgL99dNn7y13R/AL3xLdZYPGSqhS/dVMHU5dtu18W/Ea/
eXMhF90nh4sDwTRdOfavNbBzQvyg2cwDAI8H0uTvIb7/ABLuJ2ZJmon/UW68W4Rt
96z8hRfdrwLioSn0zGFZ/Bc6cjLOXzFoBc1VDcFK/jX/4yy592kVtdDBUN6vWLv4
LeIRM4wopMtjcHzjsj+dOwKlVC3tcQhcDEMkx/NkTYtjMQKQ/TBOwRjsMiRnuZON
KzCTBCJwfm3Y/ySmpCRJIewE+funSV8SYZieL4lw1QZH4pcK9M8boGUbqYZPyUR3
Rdqt4ykPXo5Ltw7g0x82363vjwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHEPzCrh
B3cdC5nopkMxhx4xSqdjMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB
RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkEyOTQvOTkyRjFEMEU0QUQ2MTFFRTk3QjUzRjcyQzRGOUFFMDIvNjRCNUI0OUEw
NTJDMTFGMEFGRUMwNDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABlAQUwDwQCAAIwCQMHACQBRMAABDANBgkqhkiG9w0BAQsF
AAOCAQEApXdd2VOY7aeWEjavpPl+pXK14LzDB7IPIikuy8De/Dpj1snHRpgO8W6k
QDRmaqi0bud5bYMPHU4Vg8oeBWupVJK69quylogw/unMWMnG1A2gpqcz7JGjJKVo
KISpPGqzKH9ufptVIYaJTBqM0XWSqfKQDTRuGBGWJVlmZM/IPMHySbdLC5yv6fSJ
3le8Emzit45aCQtVUooO5+lzImchlO3rpREQFjs7UBkVGs/Y+Jsar2c/ogKCs3cb
lalvo7frQZawivrK9ZdjSIK6C/ycnv5Kq+iypUIHDYTYg+trQPuowi4PiuepoQYg
rIubzFHITRuQlas32qahNUhN9KxsYg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:55:14 2025 by rpki-client