Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa
File: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (raw, json)
Hash identifier: oApvSZT8Sv3uSmM9SxIKbWqw6D6WWZsa1SWpMmDS0a4=
Subject key identifier: 4F:34:01:B1:47:94:5E:B4:35:8F:E3:08:FD:CD:B1:E0:19:9E:91:2E
Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97
Certificate serial: D3
Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa
Signing time: Fri 03 Jan 2025 04:07:21 +0000
ROA not before: Fri 03 Jan 2025 04:07:21 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 152137
IP address blocks: 210.79.182.0/23 maxlen: 23
210.79.182.0/24 maxlen: 24
210.79.183.0/24 maxlen: 24
2001:df3:3bc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B3F2
Validity
Not Before: Jan 3 04:07:21 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67776279-86af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:0b:cb:30:50:a6:d4:19:ed:d9:76:7a:ff:
3f:29:c1:80:74:ac:63:6c:b5:76:a8:03:12:9e:b2:
3a:db:55:82:9e:c6:c4:ef:3e:71:2b:0a:2d:40:af:
ec:6d:d3:22:73:fa:7f:03:94:e2:e1:0c:13:fe:e9:
5a:68:20:cd:33:b6:66:a5:6b:74:97:06:6c:37:03:
f0:89:b9:cf:e3:01:80:dd:92:89:e9:4d:58:d4:d6:
32:c7:6a:fa:fc:12:e4:43:c6:ea:5a:8c:3b:5f:6c:
b2:6c:b9:d6:25:0a:db:20:6d:c8:ec:76:50:13:2c:
63:fe:ab:68:fa:58:69:10:ab:c2:d5:cf:40:bb:c8:
a9:1b:46:87:e9:80:09:d3:ef:46:c0:2a:0e:a3:8d:
63:d2:e5:12:60:98:b0:5e:47:83:20:15:1f:ff:b9:
b5:22:bc:52:1a:51:11:89:cb:a0:05:7c:f0:48:62:
00:eb:12:3d:06:12:81:c0:e8:c2:4d:e7:48:ae:a3:
bc:2f:98:fb:6e:cd:05:1d:8b:1c:91:1d:64:9a:f4:
4f:a2:9c:14:1c:e2:3c:95:cd:7e:06:7b:f3:01:1a:
60:83:6e:93:0e:fa:cf:94:86:c4:11:74:36:69:de:
55:83:7f:e4:89:76:23:36:17:ee:5d:2c:24:f9:d8:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:34:01:B1:47:94:5E:B4:35:8F:E3:08:FD:CD:B1:E0:19:9E:91:2E
X509v3 Authority Key Identifier:
keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/16083E10A95E11EEBC0A7E5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.182.0/23
IPv6:
2001:df3:3bc0::/48
Signature Algorithm: sha256WithRSAEncryption
94:53:22:50:f1:9c:9b:ae:dd:25:36:46:67:80:5b:fb:0f:94:
fa:90:46:a1:32:fd:d1:b1:cf:e9:38:0b:c2:79:22:6b:d9:03:
50:40:94:eb:ef:15:a5:19:af:59:2b:a9:fc:29:ba:55:3e:40:
8a:01:6e:c4:57:38:c4:2d:c8:37:f0:f0:cb:14:f3:17:b4:3f:
5f:31:7e:80:21:3b:92:ff:34:d5:63:40:bf:16:d8:3a:a5:75:
46:cc:e1:97:da:68:8e:f4:f8:40:2c:d5:43:79:e6:08:b4:cd:
1c:ff:71:87:bb:8e:dd:3c:f6:c6:4e:42:91:2f:8c:34:d4:9d:
1b:d1:e3:ff:95:b7:45:79:01:9c:97:46:db:11:ac:1a:62:28:
77:3e:13:8b:52:4b:8e:90:3d:78:cc:c5:79:05:99:0e:f3:22:
06:42:32:73:12:d2:54:fe:a1:8e:a5:a1:72:5d:3b:14:b4:6d:
36:aa:9a:79:29:b5:2c:a3:39:49:e4:89:01:7f:e6:eb:13:a7:
c8:a6:71:a9:83:94:4b:36:ad:ba:d4:11:76:d6:f7:b5:79:4f:
83:25:57:85:a6:45:78:3e:2a:74:d3:bb:fb:3f:a6:2a:48:ce:
85:48:24:66:7e:4f:85:3c:1c:ca:26:95:1d:5f:33:97:a6:d4:
3e:64:e6:44
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF
NzMxMjFGOTcwHhcNMjUwMTAzMDQwNzIxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzc3NjI3OS04NmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2TMLyzBQptQZ7dl2ev8/KcGAdKxjbLV2qAMSnrI621WCnsbE7z5xKwotQK/s
bdMic/p/A5Ti4QwT/ulaaCDNM7ZmpWt0lwZsNwPwibnP4wGA3ZKJ6U1Y1NYyx2r6
/BLkQ8bqWow7X2yybLnWJQrbIG3I7HZQEyxj/qto+lhpEKvC1c9Au8ipG0aH6YAJ
0+9GwCoOo41j0uUSYJiwXkeDIBUf/7m1IrxSGlERicugBXzwSGIA6xI9BhKBwOjC
TedIrqO8L5j7bs0FHYsckR1kmvRPopwUHOI8lc1+BnvzARpgg26TDvrPlIbEEXQ2
ad5Vg3/kiXYjNhfuXSwk+dgATQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFE80AbFH
lF60NY/jCP3NseAZnpEuMB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3
RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI
NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0IzRjIvMDA1MURCQ0M5N0UyMTFFRTg5ODEzRDIzQzRGOUFFMDIvMTYwODNFMTBB
OTVFMTFFRUJDMEE3RTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAHST7YwDwQCAAIwCQMHACABDfM7wDANBgkqhkiG9w0BAQsF
AAOCAQEAlFMiUPGcm67dJTZGZ4Bb+w+U+pBGoTL90bHP6TgLwnkia9kDUECU6+8V
pRmvWSup/Cm6VT5AigFuxFc4xC3IN/DwyxTzF7Q/XzF+gCE7kv801WNAvxbYOqV1
Rszhl9pojvT4QCzVQ3nmCLTNHP9xh7uO3Tz2xk5CkS+MNNSdG9Hj/5W3RXkBnJdG
2xGsGmIodz4Ti1JLjpA9eMzFeQWZDvMiBkIycxLSVP6hjqWhcl07FLRtNqqaeSm1
LKM5SeSJAX/m6xOnyKZxqYOUSzatutQRdtb3tXlPgyVXhaZFeD4qdNO7+z+mKkjO
hUgkZn5PhTwcyiaVHV8zl6bUPmTmRA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:06 2025 by rpki-client