Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E614D0A2CD5011EF863CDE64C4F9AE02.roa
File: E614D0A2CD5011EF863CDE64C4F9AE02.roa (raw, json)
Hash identifier: VRsqFBw6W6srpeBDnBHvB0NtD3V0u3PzUnUHEjXNhCA=
Subject key identifier: C6:A4:B4:C2:06:10:59:D2:FF:45:34:D6:6E:6B:22:75:69:4C:18:50
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 36D3
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E614D0A2CD5011EF863CDE64C4F9AE02.roa
Signing time: Tue 07 Jan 2025 23:44:36 +0000
ROA not before: Tue 07 Jan 2025 23:44:36 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 9695
IP address blocks: 210.110.199.0/24 maxlen: 24
210.110.200.0/24 maxlen: 24
210.110.201.0/24 maxlen: 24
210.110.202.0/24 maxlen: 24
210.110.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14035 (0x36d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E
Validity
Not Before: Jan 7 23:44:36 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=677dbc63-1b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:12:7f:5b:b2:ad:a7:7e:71:e0:75:ed:ff:
0d:63:6a:99:9d:ee:3b:4e:b2:34:20:bf:19:dd:e9:
ad:b5:b5:3a:66:d8:1a:a8:fc:09:bf:e9:de:9b:8a:
e7:33:b2:f1:c6:5e:75:72:e1:6d:18:4b:1a:3c:d3:
42:49:f4:49:2e:5b:04:22:63:ec:aa:65:38:51:e2:
7b:4a:23:7f:7e:78:76:90:9d:16:b1:c1:1f:7e:40:
b2:5f:fa:01:80:a5:bb:ac:aa:c1:d2:fa:73:48:e7:
71:be:35:ec:79:ee:89:29:0a:5e:50:bf:4b:ee:be:
40:44:0e:9f:f8:54:e8:63:02:a7:89:2c:1b:cb:43:
fc:76:fc:74:48:e0:77:28:97:c5:2a:e4:ec:1b:78:
d8:ca:04:dd:7a:b2:b0:95:39:e5:02:5e:19:ed:c5:
42:0c:c9:72:fa:f6:f1:1d:79:d8:12:fc:00:7e:44:
62:be:88:a9:58:88:e5:5f:66:3a:e3:fd:48:88:3f:
66:44:81:b9:8f:75:e7:9f:48:18:fe:82:af:b6:3a:
04:a6:65:62:0d:d8:69:b5:19:7f:1b:0c:12:2e:b6:
b1:36:ea:35:03:61:f5:43:5a:02:3e:9e:bd:04:88:
af:49:89:58:f2:8d:ce:dc:28:29:28:f2:bc:f7:4e:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A4:B4:C2:06:10:59:D2:FF:45:34:D6:6E:6B:22:75:69:4C:18:50
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E614D0A2CD5011EF863CDE64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.110.199.0-210.110.203.255
Signature Algorithm: sha256WithRSAEncryption
d6:de:d3:2a:9f:62:d5:ef:30:13:67:1d:42:f3:9b:91:d0:b7:
a1:24:02:3d:0d:b3:2a:80:75:0a:46:1b:0b:e7:0b:84:a7:90:
52:3c:e2:5e:26:ed:80:77:cb:a6:1f:ae:6c:2f:f8:bf:c4:38:
65:31:01:1f:be:a6:66:88:c5:31:b2:fc:b4:22:f6:0b:e3:a0:
f9:5d:18:1a:9a:f4:54:9d:d1:45:50:6a:91:be:f3:0d:5c:8a:
bc:92:ff:51:f6:97:b8:d0:ff:c8:52:ec:c1:80:31:b9:e9:52:
c9:88:b1:f2:39:5e:cc:a8:31:f0:0b:02:be:39:15:ce:12:cc:
45:4e:51:b2:7d:a0:d7:1e:1c:d9:6c:d8:b3:ed:e8:e6:e9:11:
eb:17:9c:0e:3a:08:f2:8e:f9:ef:97:95:ef:b4:10:3d:de:08:
e4:a6:13:ee:83:d5:c3:10:a6:ab:0c:82:c7:d7:a5:a2:11:1d:
26:98:71:4d:d3:bd:8d:f8:60:aa:09:34:7f:dc:14:ae:b1:cc:
09:ba:59:d3:9d:8c:ef:75:f4:b3:00:eb:30:06:79:a8:32:f4:
be:8d:88:54:3f:24:d9:ce:4d:b8:88:68:c0:80:13:cc:4b:5f:
46:35:46:2d:0a:e8:50:da:4c:87:8f:1b:48:64:40:3e:72:0b:
bb:7b:08:89
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICNtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjUwMTA3MjM0NDM2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdkYmM2My0xYjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAursSf1uyrad+ceB17f8NY2qZne47TrI0IL8Z3emttbU6ZtgaqPwJv+nem4rn
M7Lxxl51cuFtGEsaPNNCSfRJLlsEImPsqmU4UeJ7SiN/fnh2kJ0WscEffkCyX/oB
gKW7rKrB0vpzSOdxvjXsee6JKQpeUL9L7r5ARA6f+FToYwKniSwby0P8dvx0SOB3
KJfFKuTsG3jYygTderKwlTnlAl4Z7cVCDMly+vbxHXnYEvwAfkRivoipWIjlX2Y6
4/1IiD9mRIG5j3Xnn0gY/oKvtjoEpmViDdhptRl/GwwSLraxNuo1A2H1Q1oCPp69
BIivSYlY8o3O3CgpKPK8905MnQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFMaktMIG
EFnS/0U01m5rInVpTBhQMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvRTYxNEQwQTJD
RDUwMTFFRjg2M0NERTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEANJuxwMEAtJuyDANBgkqhkiG9w0BAQsFAAOCAQEA1t7T
Kp9i1e8wE2cdQvObkdC3oSQCPQ2zKoB1CkYbC+cLhKeQUjziXibtgHfLph+ubC/4
v8Q4ZTEBH76mZojFMbL8tCL2C+Og+V0YGpr0VJ3RRVBqkb7zDVyKvJL/UfaXuND/
yFLswYAxuelSyYix8jlezKgx8AsCvjkVzhLMRU5Rsn2g1x4c2WzYs+3o5ukR6xec
DjoI8o7575eV77QQPd4I5KYT7oPVwxCmqwyCx9elohEdJphxTdO9jfhgqgk0f9wU
rrHMCbpZ052M73X0swDrMAZ5qDL0vo2IVD8k2c5NuIhowIATzEtfRjVGLQroUNpM
h48bSGRAPnILu3sIiQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:57:59 2025 by rpki-client