Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/79F85264827711EFAACDBD12C4F9AE02.roa
File: 79F85264827711EFAACDBD12C4F9AE02.roa (raw, json)
Hash identifier: y9ssG+Nlchy0jWaCyzN61HTdb2V4wt1xqBdScX6Lwak=
Subject key identifier: 4E:75:64:99:02:7E:D2:DC:2D:65:91:8A:19:09:20:50:5F:C9:F3:B5
Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial: 02
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/79F85264827711EFAACDBD12C4F9AE02.roa
Signing time: Fri 04 Oct 2024 17:38:33 +0000
ROA not before: Fri 04 Oct 2024 17:38:33 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 46844
IP address blocks: 14.1.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D5C
Validity
Not Before: Oct 4 17:38:33 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67002819-2abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:2d:31:f0:f3:3a:9c:46:36:4b:bd:ab:7b:
e7:e2:02:77:55:4d:75:a9:69:27:3e:e9:8b:70:70:
74:1e:d0:76:aa:de:fb:f7:d7:5e:e2:e3:8f:cf:42:
d9:f6:b2:b6:a6:f9:4f:8c:9d:6c:fb:64:9b:b8:fa:
be:49:59:d2:7c:6a:9b:b0:ba:c6:e8:e6:c3:1e:91:
98:9d:11:d1:cd:5d:df:fd:51:13:67:27:3d:b4:c0:
aa:e4:47:68:8d:46:f7:f3:ec:8a:c9:45:51:5a:31:
83:ef:25:2e:2a:23:46:9b:6e:94:0c:f1:7b:db:2b:
ff:11:ec:74:c6:b1:41:cc:8e:e5:89:bc:7b:b4:0c:
fa:b8:cc:b8:20:99:01:29:8d:0e:d0:c8:73:5f:9c:
ed:af:16:71:35:a8:ae:7b:8c:09:06:36:68:7a:e2:
1a:e1:eb:72:62:2f:5d:91:ce:b5:3c:20:de:c4:a5:
77:2b:1c:de:e0:f6:5f:24:38:ad:46:01:2d:aa:39:
ce:23:f7:62:57:f5:fa:2a:12:3c:9b:01:57:8f:6c:
be:2e:25:b5:d9:91:7b:33:c9:14:c3:bb:c4:12:ab:
4d:2a:57:8d:e9:15:cc:2a:03:ef:72:ba:7d:a7:fb:
f8:e9:02:f1:d8:c2:f8:a9:70:28:06:8d:5b:c8:3f:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:75:64:99:02:7E:D2:DC:2D:65:91:8A:19:09:20:50:5F:C9:F3:B5
X509v3 Authority Key Identifier:
keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/79F85264827711EFAACDBD12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.20.0/22
Signature Algorithm: sha256WithRSAEncryption
57:a5:cd:30:85:a3:bb:fe:ed:43:3e:8f:d4:cd:cb:18:4a:06:
67:26:8b:53:6a:d5:e1:ca:9f:05:c3:14:d6:37:c9:ef:95:fc:
04:0b:44:2f:b0:72:78:73:c1:30:99:7b:c2:7f:c0:c2:e4:d3:
8f:46:62:3c:5c:50:c3:fc:b1:1c:2b:df:1f:fd:96:c3:70:ae:
c8:c7:80:37:54:4b:9f:1e:24:cc:b4:a6:df:f2:a3:2d:4b:a1:
a1:36:f0:f2:97:ea:cc:63:75:e0:c1:17:51:24:c1:50:4c:47:
d0:68:85:64:8f:a8:3f:16:b3:7f:a6:a5:fe:9a:ed:3a:c7:d2:
4a:62:fe:ea:6a:3c:0c:fa:e0:5c:f8:58:36:90:50:d6:d6:88:
a8:8d:37:88:62:df:94:e9:6e:41:ec:9a:30:61:55:58:29:3f:
83:03:72:29:b2:c4:80:75:a6:4a:64:93:b8:0f:ac:ef:a3:00:
8b:67:4d:c4:f0:99:63:50:95:25:4d:2e:80:12:8b:24:be:c1:
b4:da:6e:7d:2f:40:fc:a2:05:68:a3:2e:e0:70:06:3f:38:6a:
21:16:e9:73:23:64:29:15:ca:6c:51:23:b2:0b:fd:fd:8e:30:
93:11:16:be:b7:c4:bf:ad:48:a7:ea:34:7e:30:7c:ec:4b:0a:
2e:b0:ba:aa
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MEQ1QzExMC8GA1UEBRMoMDY1NUJENTI0RTg3RDA3OUU2NUJFMzE2MUFBNjVCRTY4
RjlFODI3RTAeFw0yNDEwMDQxNzM4MzNaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3MDAyODE5LTJhYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDULC0x8PM6nEY2S72re+fiAndVTXWpaSc+6YtwcHQe0Haq3vv3117i44/PQtn2
sram+U+MnWz7ZJu4+r5JWdJ8apuwusbo5sMekZidEdHNXd/9URNnJz20wKrkR2iN
Rvfz7IrJRVFaMYPvJS4qI0abbpQM8XvbK/8R7HTGsUHMjuWJvHu0DPq4zLggmQEp
jQ7QyHNfnO2vFnE1qK57jAkGNmh64hrh63JiL12RzrU8IN7EpXcrHN7g9l8kOK1G
AS2qOc4j92JX9foqEjybAVePbL4uJbXZkXszyRTDu8QSq00qV43pFcwqA+9yun2n
+/jpAvHYwvipcCgGjVvIP0wtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUTnVkmQJ+
0twtZZGKGQkgUF/J87UwHwYDVR0jBBgwFoAUBlW9Uk6H0HnmW+MWGqZb5o+egn4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwRDVDL0NCRTZEQjBBODI3
NjExRUY4RTgzRUQwREM0RjlBRTAyL0JsVzlVazZIMEhubVctTVdHcVpiNW8tZWdu
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQmxXOVVrNkgwSG5tVy1NV0dxWmI1by1lZ240LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEQ1Qy9DQkU2REIwQTgyNzYxMUVGOEU4M0VEMERDNEY5QUUwMi83OUY4NTI2NDgy
NzcxMUVGQUFDREJEMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAg4BFDANBgkqhkiG9w0BAQsFAAOCAQEAV6XNMIWju/7tQz6P
1M3LGEoGZyaLU2rV4cqfBcMU1jfJ75X8BAtEL7ByeHPBMJl7wn/AwuTTj0ZiPFxQ
w/yxHCvfH/2Ww3CuyMeAN1RLnx4kzLSm3/KjLUuhoTbw8pfqzGN14MEXUSTBUExH
0GiFZI+oPxazf6al/prtOsfSSmL+6mo8DPrgXPhYNpBQ1taIqI03iGLflOluQeya
MGFVWCk/gwNyKbLEgHWmSmSTuA+s76MAi2dNxPCZY1CVJU0ugBKLJL7BtNpufS9A
/KIFaKMu4HAGPzhqIRbpcyNkKRXKbFEjsgv9/Y4wkxEWvrfEv61Ip+o0fjB87EsK
LrC6qg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:56:15 2025 by rpki-client