Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/900E2272349F11EDA1460419C4F9AE02.roa
File: 900E2272349F11EDA1460419C4F9AE02.roa (raw, json)
Hash identifier: GurqPE7vf79zU82Gehwj1ctZametXlaKlIqkpoDGL9A=
Subject key identifier: 2A:4E:BE:D4:6A:C5:0F:29:7B:8C:EE:6C:51:00:5A:A8:5E:04:61:7D
Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial: 08B0
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/900E2272349F11EDA1460419C4F9AE02.roa
Signing time: Sat 28 Dec 2024 20:09:10 +0000
ROA not before: Sat 28 Dec 2024 20:09:10 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 209242
IP address blocks: 202.82.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2224 (0x8b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16
Validity
Not Before: Dec 28 20:09:10 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67705ae6-18a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:e1:ca:57:8b:11:5f:68:d4:09:ac:f2:e3:
ba:29:80:42:07:ab:a1:c6:35:c3:32:96:c1:d4:4b:
e4:16:19:24:87:7d:28:cc:15:b3:df:f6:c8:4d:ca:
3f:d4:1d:04:a7:61:4a:dd:ad:86:b2:83:27:4c:53:
82:f4:3c:79:fe:57:a9:b5:d4:4b:44:bb:3d:17:0a:
13:3d:6f:be:d3:70:1d:23:6b:c8:7b:8a:6e:0f:81:
e8:b1:65:6d:e3:24:8f:53:a3:77:48:cf:b2:b4:85:
fe:02:84:35:63:71:be:aa:63:f2:e4:89:3f:f4:ca:
80:99:43:38:46:97:16:a0:c3:ea:69:3d:b3:4c:ce:
c4:e7:2e:e3:cf:16:50:cf:1b:56:19:39:23:38:a6:
4d:53:7a:0e:28:ba:30:77:19:78:2b:ff:a0:7e:9a:
f6:29:04:ba:f8:29:10:ef:59:69:dd:3e:4f:9b:e0:
81:3d:d0:a1:27:bb:35:5e:c7:5b:35:cd:83:d2:85:
7b:40:17:14:cd:74:55:f9:b4:de:a2:f8:4f:65:25:
a9:b6:13:0a:45:84:1e:cc:dd:d6:8e:47:8a:b1:2c:
9c:9a:ff:b2:a8:74:ae:39:5f:98:44:03:4d:c3:58:
4a:1c:b0:08:76:68:d5:ba:0a:1f:94:55:6e:6e:20:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4E:BE:D4:6A:C5:0F:29:7B:8C:EE:6C:51:00:5A:A8:5E:04:61:7D
X509v3 Authority Key Identifier:
keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/900E2272349F11EDA1460419C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.82.250.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c0:79:93:b2:16:93:f4:da:bc:b1:0a:84:5c:7b:94:e5:5a:
c8:7c:da:a9:2f:e8:61:38:1f:c0:eb:bb:06:52:c5:7c:70:73:
2d:7f:e6:a7:7f:05:e8:a9:92:1a:ab:a5:3d:27:9e:c7:0e:d2:
49:aa:aa:45:0d:64:38:4b:29:f0:6e:7e:cd:bc:ad:d2:0f:bf:
e4:31:38:ce:69:e4:64:35:e4:14:fd:8f:41:55:ff:cb:88:07:
e2:e4:f2:b9:91:90:a1:60:03:25:e7:d5:c0:d3:28:42:83:e4:
de:60:4f:6e:9a:63:b7:82:92:1a:4d:ce:53:57:cd:d1:a8:71:
5b:0b:a2:40:8a:61:bd:29:0d:44:67:7e:7d:32:ca:e8:ea:e5:
5e:df:f5:01:3d:cf:73:34:d2:79:65:fe:c8:1e:42:c4:b2:5f:
bd:e7:f1:8a:4d:ea:c8:19:a9:c3:9d:7a:27:be:ca:7a:45:18:
85:41:c4:c4:5b:73:97:77:5a:9d:12:48:8b:5b:a5:ad:b7:24:
38:54:a6:65:23:2f:a8:af:7e:e7:a8:28:65:5b:b6:d9:63:6d:
28:d4:7d:43:44:44:ea:fb:4b:37:11:fb:0c:c2:c0:e3:44:ff:
5a:a8:b8:11:c1:d9:3e:b4:c3:00:60:5d:b8:cb:26:04:0d:6e:
cf:ba:44:75
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNFMTYxMTAvBgNVBAUTKDMxQzRGOTA2NEY4OUU1NkIxOTRFQjg4NDkyRTkwMjFD
MTUyREVCM0UwHhcNMjQxMjI4MjAwOTEwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzcwNWFlNi0xOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyz7hyleLEV9o1Ams8uO6KYBCB6uhxjXDMpbB1EvkFhkkh30ozBWz3/bITco/
1B0Ep2FK3a2GsoMnTFOC9Dx5/leptdRLRLs9FwoTPW++03AdI2vIe4puD4HosWVt
4ySPU6N3SM+ytIX+AoQ1Y3G+qmPy5Ik/9MqAmUM4RpcWoMPqaT2zTM7E5y7jzxZQ
zxtWGTkjOKZNU3oOKLowdxl4K/+gfpr2KQS6+CkQ71lp3T5Pm+CBPdChJ7s1Xsdb
Nc2D0oV7QBcUzXRV+bTeovhPZSWpthMKRYQezN3WjkeKsSycmv+yqHSuOV+YRANN
w1hKHLAIdmjVugoflFVubiApAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCpOvtRq
xQ8pe4zubFEAWqheBGF9MB8GA1UdIwQYMBaAFDHE+QZPieVrGU64hJLpAhwVLes+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9EQzU0RDlBNkFD
NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVXc1pUcmlFa3VrQ0hCVXQ2
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01jVDVCay1KNVdzWlRyaUVrdWtDSEJVdDZ6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzNFMTYvREM1NEQ5QTZBQzc0MTFFQTg2RUE5RjQ4QzRGOUFFMDIvOTAwRTIyNzIz
NDlGMTFFREExNDYwNDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKUvowDQYJKoZIhvcNAQELBQADggEBAGjAeZOyFpP02ryx
CoRce5TlWsh82qkv6GE4H8DruwZSxXxwcy1/5qd/BeipkhqrpT0nnscO0kmqqkUN
ZDhLKfBufs28rdIPv+QxOM5p5GQ15BT9j0FV/8uIB+Lk8rmRkKFgAyXn1cDTKEKD
5N5gT26aY7eCkhpNzlNXzdGocVsLokCKYb0pDURnfn0yyujq5V7f9QE9z3M00nll
/sgeQsSyX73n8YpN6sgZqcOdeie+ynpFGIVBxMRbc5d3Wp0SSItbpa23JDhUpmUj
L6ivfueoKGVbttljbSjUfUNEROr7SzcR+wzCwONE/1qouBHB2T60wwBgXbjLJgQN
bs+6RHU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:01 2025 by rpki-client