Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa
File: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (raw, json)
Hash identifier: OJdZE6RjgM3Hz2T07Mg2BJv0nC0BL01Q/08oABlyEMA=
Subject key identifier: 18:1F:7A:ED:BD:FA:D8:16:7E:FE:2F:18:1A:0F:25:1D:2C:13:89:31
Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial: 8A
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa
Signing time: Tue 11 Mar 2025 05:53:31 +0000
ROA not before: Tue 11 Mar 2025 05:53:31 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 135302
IP address blocks: 2402:1300::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139A90
Validity
Not Before: Mar 11 05:53:31 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67cfcfda-f0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:51:38:a8:7e:02:f9:4e:ad:cb:60:3f:3d:
0b:36:3c:a6:cc:4d:f9:a5:f7:18:c2:2a:3c:0e:e3:
ff:c8:78:f6:3f:14:4f:0f:6b:04:a4:f9:22:52:48:
e4:1d:68:bf:eb:f4:56:cd:e4:f6:4a:26:99:5b:e8:
f3:7c:25:59:a2:0d:75:d9:17:42:55:87:f2:72:43:
7c:2a:ac:1f:93:07:4a:40:bc:8f:cd:7f:8d:5d:75:
88:20:a7:2f:89:16:71:1b:cb:77:ba:88:06:8e:52:
7f:d2:ea:8e:bc:69:3d:0a:16:59:37:6f:88:b5:a4:
8e:99:9b:24:66:6c:fc:e4:92:1d:ad:92:48:c9:9e:
b0:01:e1:b5:f2:9e:3b:ea:3e:29:45:1a:a0:75:eb:
26:3b:89:46:82:5f:a7:c4:dc:5f:5c:38:a1:67:25:
45:ad:56:5d:f0:b0:f0:49:fb:09:44:20:e1:63:5f:
85:a2:8d:fb:bc:9d:0f:2e:26:f2:5d:28:60:4e:af:
69:3e:ab:22:03:0a:0d:73:9d:a7:e1:6e:bf:ea:4f:
60:88:12:71:d2:2d:fd:56:1b:11:ff:1e:a2:e1:bc:
32:87:de:92:eb:f3:7a:6f:7a:aa:3a:f2:5b:eb:0c:
d3:b2:a2:7f:9c:36:9c:f1:05:68:d8:b3:dd:b4:20:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1F:7A:ED:BD:FA:D8:16:7E:FE:2F:18:1A:0F:25:1D:2C:13:89:31
X509v3 Authority Key Identifier:
keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:1300::/32
Signature Algorithm: sha256WithRSAEncryption
ac:c1:86:fe:c1:91:ca:81:b3:60:45:5f:d7:70:96:f3:7d:42:
f1:ef:94:91:d8:3e:c1:86:eb:8c:96:33:65:af:0b:f4:3c:f0:
24:7a:6d:bb:e9:30:c1:e8:80:b0:b6:76:5d:39:d1:0e:e4:d0:
1e:e3:44:ec:8a:b4:ef:17:93:db:ed:ac:60:14:0f:0a:d9:cd:
60:e3:85:86:42:57:d6:ca:be:e0:a9:cb:69:7f:ad:a8:1f:56:
a8:cb:ca:04:00:1f:51:94:7c:1f:30:e8:07:e5:63:21:8a:f6:
05:e3:33:c0:79:ee:1e:97:e5:ef:88:fe:1d:82:43:d1:b9:bc:
d0:d8:87:92:4e:32:0d:6d:30:d4:63:56:2e:a5:74:66:b6:17:
9c:f5:55:69:c9:46:58:c7:61:95:ab:e3:9f:41:f1:35:57:84:
22:4c:03:8e:dd:dc:6d:37:a3:69:f0:a7:5c:6a:54:20:90:46:
cf:54:ae:71:21:fa:b5:47:f1:85:ea:cf:ad:56:90:e6:23:9a:
61:60:6a:ab:90:f5:12:ba:6d:e6:f7:77:28:b0:3a:f3:f6:1c:
a2:0c:6f:da:c3:db:bc:94:aa:84:a8:aa:94:38:b4:e5:cb:72:
29:ee:73:7e:64:52:08:6e:60:d2:9b:74:77:ef:53:ae:59:6c:
cf:65:d8:d0
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlBOTAxMTAvBgNVBAUTKDUxODkyQkU1QjBCNEFCQzYwMjU0NDVGNDAzOUZDNzk1
RDhCQTU4RTIwHhcNMjUwMzExMDU1MzMxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2NmY2ZkYS1mMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAreFROKh+AvlOrctgPz0LNjymzE35pfcYwio8DuP/yHj2PxRPD2sEpPkiUkjk
HWi/6/RWzeT2SiaZW+jzfCVZog112RdCVYfyckN8KqwfkwdKQLyPzX+NXXWIIKcv
iRZxG8t3uogGjlJ/0uqOvGk9ChZZN2+ItaSOmZskZmz85JIdrZJIyZ6wAeG18p47
6j4pRRqgdesmO4lGgl+nxNxfXDihZyVFrVZd8LDwSfsJRCDhY1+Foo37vJ0PLiby
XShgTq9pPqsiAwoNc52n4W6/6k9giBJx0i39VhsR/x6i4bwyh96S6/N6b3qqOvJb
6wzTsqJ/nDac8QVo2LPdtCCiDwIDAQABo4ICljCCApIwHQYDVR0OBBYEFBgfeu29
+tgWfv4vGBoPJR0sE4kxMB8GA1UdIwQYMBaAFFGJK+WwtKvGAlRF9AOfx5XYulji
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUE5MC8xRkU4NEVEMjMz
NzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4WUNWRVgwQTVfSGxkaTZX
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VZa3I1YkMwcThZQ1ZFWDBBNV9IbGRpNldPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzlBOTAvMUZFODRFRDIzMzc2MTFFRjk5M0U0NjczQzRGOUFFMDIvQUU5NzdERjgz
MzdFMTFFRkIzQ0NENzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkAhMAMA0GCSqGSIb3DQEBCwUAA4IBAQCswYb+wZHKgbNg
RV/XcJbzfULx75SR2D7BhuuMljNlrwv0PPAkem276TDB6ICwtnZdOdEO5NAe40Ts
irTvF5Pb7axgFA8K2c1g44WGQlfWyr7gqctpf62oH1aoy8oEAB9RlHwfMOgH5WMh
ivYF4zPAee4el+XviP4dgkPRubzQ2IeSTjINbTDUY1YupXRmthec9VVpyUZYx2GV
q+OfQfE1V4QiTAOO3dxtN6Np8KdcalQgkEbPVK5xIfq1R/GF6s+tVpDmI5phYGqr
kPUSum3m93cosDrz9hyiDG/aw9u8lKqEqKqUOLTly3Ip7nN+ZFIIbmDSm3R371Ou
WWzPZdjQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:47:55 2025 by rpki-client