Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/7E1ADD74E00E11EDA7E1B640C4F9AE02.roa
File: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (raw, json)
Hash identifier: l8rbVcrxpBL4K1nr5JzCpQg12eUyxOnsIOK36gYUlKo=
Subject key identifier: 9F:7B:47:73:8D:12:5B:6D:A3:5F:5B:6C:CC:34:07:EE:91:88:5B:F9
Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial: 1A8E
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/7E1ADD74E00E11EDA7E1B640C4F9AE02.roa
Signing time: Fri 20 Sep 2024 16:34:32 +0000
ROA not before: Fri 20 Sep 2024 16:34:32 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 23764
IP address blocks: 139.189.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6798 (0x1a8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4
Validity
Not Before: Sep 20 16:34:32 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66eda418-ce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:85:86:dc:68:9c:5d:39:cc:4b:3c:35:90:
66:2b:c1:92:40:93:ce:ac:67:da:da:d2:a5:0a:bf:
08:03:64:78:a0:3f:d0:d6:64:a5:c5:64:3a:38:bd:
73:b0:b2:a2:47:64:7f:39:08:6d:ac:8b:37:d0:e3:
c6:2f:f2:c2:39:94:dd:31:97:bf:e6:8a:d3:da:cd:
11:29:e4:65:f5:d0:3e:05:c7:45:c6:69:97:c0:dc:
ca:62:39:ed:93:02:b4:75:6f:22:04:53:3a:62:9a:
af:cf:8e:62:41:09:39:e7:f4:63:e7:e0:d6:92:31:
b6:a3:79:89:c8:39:8d:11:35:59:77:01:8b:6c:9d:
d5:a8:34:c1:f4:0f:d5:af:93:ef:e1:95:5a:e7:a9:
1a:3f:32:b4:87:f2:0f:0d:c4:0b:26:64:a4:86:d8:
63:f8:ae:d2:b1:4e:8b:75:ca:a6:e6:1b:8a:2e:66:
6d:bc:15:a2:7d:58:15:4c:6c:c3:c1:9e:83:17:1e:
0d:3a:08:26:09:e4:30:bf:ec:0d:72:02:da:10:e6:
87:cc:50:90:bc:22:20:4f:e7:e6:69:cb:95:8b:fe:
4c:c5:1c:55:80:67:4d:0c:25:b7:7a:f5:50:4f:11:
b1:45:10:43:5b:98:ab:e8:9f:f8:71:fa:86:10:04:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7B:47:73:8D:12:5B:6D:A3:5F:5B:6C:CC:34:07:EE:91:88:5B:F9
X509v3 Authority Key Identifier:
keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/7E1ADD74E00E11EDA7E1B640C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.189.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:aa:6e:7e:92:68:b2:50:51:da:36:e1:eb:60:a3:c3:02:f0:
40:fd:7e:25:26:93:69:a8:64:84:45:26:29:d8:51:43:89:67:
ae:61:be:cd:9a:66:6c:cc:09:8e:c3:e7:d8:e0:46:fe:6e:21:
76:c8:21:5e:e8:6d:01:40:c2:c3:73:52:8a:3d:f3:a5:20:28:
3c:1b:41:7c:9a:0c:6b:f6:85:0e:4c:23:08:51:01:0e:e7:80:
0a:ce:31:bd:9e:ff:be:8e:27:31:5a:f3:f1:d3:01:94:90:d3:
68:64:29:68:e4:5e:50:d5:1c:44:f9:f7:4b:6f:a1:d2:0f:0a:
2d:45:64:72:79:98:ca:33:91:f5:2a:6c:eb:5d:ab:ab:3d:df:
89:dc:0a:3f:e6:a0:9e:5e:ad:42:60:e7:12:bd:4d:15:56:44:
8c:9f:db:fc:d6:d9:fe:8a:a8:35:74:ba:1d:df:bf:4d:5e:8f:
35:b3:df:ec:1c:ca:22:98:97:e0:f9:eb:d4:f6:b0:3a:82:07:
20:e8:79:49:75:32:24:8b:43:70:96:66:9d:76:42:43:5b:6e:
f2:b6:3a:4e:58:0a:1d:bc:a7:d3:f9:3e:a6:86:e4:35:b0:ab:
d2:00:5c:04:8d:71:d6:5f:c8:c4:24:27:33:20:f2:75:da:a0:
50:32:a0:50
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2
NDg2MDIwMTgwHhcNMjQwOTIwMTYzNDMyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmVkYTQxOC1jZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApD2FhtxonF05zEs8NZBmK8GSQJPOrGfa2tKlCr8IA2R4oD/Q1mSlxWQ6OL1z
sLKiR2R/OQhtrIs30OPGL/LCOZTdMZe/5orT2s0RKeRl9dA+BcdFxmmXwNzKYjnt
kwK0dW8iBFM6Ypqvz45iQQk55/Rj5+DWkjG2o3mJyDmNETVZdwGLbJ3VqDTB9A/V
r5Pv4ZVa56kaPzK0h/IPDcQLJmSkhthj+K7SsU6Ldcqm5huKLmZtvBWifVgVTGzD
wZ6DFx4NOggmCeQwv+wNcgLaEOaHzFCQvCIgT+fmacuVi/5MxRxVgGdNDCW3evVQ
TxGxRRBDW5ir6J/4cfqGEATQUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ97R3ON
Eltto19bbMw0B+6RiFv5MB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNUVDQzE1QUEyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvN0UxQURENzRF
MDBFMTFFREE3RTFCNjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACLvX8wDQYJKoZIhvcNAQELBQADggEBADuqbn6SaLJQUdo2
4etgo8MC8ED9fiUmk2moZIRFJinYUUOJZ65hvs2aZmzMCY7D59jgRv5uIXbIIV7o
bQFAwsNzUoo986UgKDwbQXyaDGv2hQ5MIwhRAQ7ngArOMb2e/76OJzFa8/HTAZSQ
02hkKWjkXlDVHET590tvodIPCi1FZHJ5mMozkfUqbOtdq6s934ncCj/moJ5erUJg
5xK9TRVWRIyf2/zW2f6KqDV0uh3fv01ejzWz3+wcyiKYl+D569T2sDqCByDoeUl1
MiSLQ3CWZp12QkNbbvK2Ok5YCh28p9P5PqaG5DWwq9IAXASNcdZfyMQkJzMg8nXa
oFAyoFA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:36 2025 by rpki-client