Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/0AF12E14BF8411EF9280B92BC4F9AE02.roa
File: 0AF12E14BF8411EF9280B92BC4F9AE02.roa (raw, json)
Hash identifier: bpSWB4OmekgU9S/fF7jb1OGGrkuwAEQp4Cm1HA29wic=
Subject key identifier: 4D:D2:46:D7:C7:DB:22:65:8E:2C:66:A2:43:AB:CE:79:B7:BF:1E:95
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 35D9
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/0AF12E14BF8411EF9280B92BC4F9AE02.roa
Signing time: Sat 21 Dec 2024 10:12:11 +0000
ROA not before: Sat 21 Dec 2024 10:12:11 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 151704
IP address blocks: 175.29.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13785 (0x35d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD
Validity
Not Before: Dec 21 10:12:11 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6766947b-90aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4f:a9:46:af:ad:ad:e7:7f:9a:98:67:92:8c:
3c:b4:68:75:c0:51:ef:80:41:b9:10:9b:0a:8c:ca:
1f:86:9c:6e:e2:65:6f:45:07:ce:78:bd:d4:53:a9:
8f:01:4a:63:19:37:cd:0c:e6:d7:90:ff:ba:13:8c:
06:21:04:9b:84:2b:43:1e:f2:e5:18:7a:fb:c1:f3:
37:ab:ff:cf:1e:9d:c9:37:59:d5:22:44:33:a3:6a:
ad:f4:c2:1f:07:10:9d:ef:0e:60:30:95:55:fd:cf:
e4:8e:ec:7a:c4:5d:3f:c3:13:ad:d5:a7:78:18:46:
7e:2e:49:85:39:7f:f7:97:c8:7b:8c:55:ec:93:83:
54:85:c5:81:e0:81:5a:f9:e0:b6:ee:39:7a:74:4e:
26:41:0c:99:1c:5a:27:0b:86:cc:5a:a8:2a:2b:6a:
da:c4:65:29:9f:20:d0:2e:1e:84:d8:9d:43:39:ba:
80:d1:ac:fb:24:13:f6:9c:b5:33:5f:9e:a7:bc:f5:
20:0f:cc:24:34:56:63:21:af:70:bb:18:dc:16:41:
ea:a7:d3:4c:a8:49:27:cc:4d:10:1f:65:87:d6:74:
6c:68:70:09:8f:c5:32:c3:af:05:86:6b:20:b3:bd:
8a:3e:0f:e7:c4:b2:5d:c7:c0:c0:60:29:9a:6b:4b:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D2:46:D7:C7:DB:22:65:8E:2C:66:A2:43:AB:CE:79:B7:BF:1E:95
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/0AF12E14BF8411EF9280B92BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.17.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:25:a5:fb:d1:a7:95:04:c0:e6:92:af:72:9a:d4:fc:ad:81:
41:de:ea:68:6a:7a:e9:2c:cb:58:f6:8d:a9:3e:5c:42:5e:07:
68:1f:15:dc:15:ab:af:0f:a5:8c:9e:86:0c:bd:24:91:84:be:
47:ea:bb:ea:f9:6c:1d:ad:b3:ee:fd:96:e4:f4:a5:65:27:0d:
5e:34:8e:d5:26:94:85:55:2f:b4:88:0a:fd:46:8f:9e:62:9b:
f6:f1:1e:bd:c0:6f:db:e1:9f:4a:9a:17:7a:71:95:00:9c:6f:
ee:33:01:a2:ae:a1:77:3d:7c:a2:0c:56:dd:6c:3b:c7:7c:ef:
49:f3:b6:62:f4:b0:50:9c:2a:fa:de:35:2e:df:1b:4d:0f:0a:
04:b1:cb:8a:ed:8d:f2:a8:54:9c:a7:53:10:d5:f3:6e:a8:9a:
96:4e:a0:3d:ae:4b:d6:24:29:d5:be:98:c2:06:27:f3:0e:05:
9a:1e:81:e9:16:0c:9d:22:ec:7e:f4:21:d5:a5:07:41:3d:94:
75:fa:6b:e6:cb:07:35:f4:e7:c6:85:8c:da:1d:b0:d2:97:7f:
05:1d:d8:ad:b4:af:c0:96:4a:b4:e8:56:63:42:b9:af:b0:32:
9e:84:ba:fd:8e:7c:43:13:cd:6d:1e:7f:2e:39:23:39:40:40:
6e:14:83:4d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjQxMjIxMTAxMjExWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY2OTQ3Yi05MGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2E+pRq+tred/mphnkow8tGh1wFHvgEG5EJsKjMofhpxu4mVvRQfOeL3UU6mP
AUpjGTfNDObXkP+6E4wGIQSbhCtDHvLlGHr7wfM3q//PHp3JN1nVIkQzo2qt9MIf
BxCd7w5gMJVV/c/kjux6xF0/wxOt1ad4GEZ+LkmFOX/3l8h7jFXsk4NUhcWB4IFa
+eC27jl6dE4mQQyZHFonC4bMWqgqK2raxGUpnyDQLh6E2J1DObqA0az7JBP2nLUz
X56nvPUgD8wkNFZjIa9wuxjcFkHqp9NMqEknzE0QH2WH1nRsaHAJj8Uyw68Fhmsg
s72KPg/nxLJdx8DAYCmaa0s3uwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE3SRtfH
2yJljixmokOrznm3vx6VMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvMEFGMTJFMTRC
Rjg0MTFFRjkyODBCOTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACvHREwDQYJKoZIhvcNAQELBQADggEBAAslpfvRp5UEwOaS
r3Ka1PytgUHe6mhqeuksy1j2jak+XEJeB2gfFdwVq68PpYyehgy9JJGEvkfqu+r5
bB2ts+79luT0pWUnDV40jtUmlIVVL7SICv1Gj55im/bxHr3Ab9vhn0qaF3pxlQCc
b+4zAaKuoXc9fKIMVt1sO8d870nztmL0sFCcKvreNS7fG00PCgSxy4rtjfKoVJyn
UxDV826ompZOoD2uS9YkKdW+mMIGJ/MOBZoegekWDJ0i7H70IdWlB0E9lHX6a+bL
BzX058aFjNodsNKXfwUd2K20r8CWSrToVmNCua+wMp6Euv2OfEMTzW0efy45IzlA
QG4Ug00=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:23:52 2025 by rpki-client