Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/E40AC356018611F0B7E46C83C4F9AE02.roa
File: E40AC356018611F0B7E46C83C4F9AE02.roa (raw, json)
Hash identifier: j28clk9Sd8Zx1GYNsBeAzLAwS2pagKGYYq9g+P46NC0=
Subject key identifier: 1D:AC:39:9A:61:B1:67:CC:77:78:C7:E3:DD:BB:2F:32:45:90:13:7F
Certificate issuer: /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Certificate serial: 08
Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/E40AC356018611F0B7E46C83C4F9AE02.roa
Signing time: Sat 15 Mar 2025 10:26:13 +0000
ROA not before: Sat 15 Mar 2025 10:26:13 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 153680
IP address blocks: 163.223.56.0/24 maxlen: 24
2001:df5:3340::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153850
Validity
Not Before: Mar 15 10:26:13 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67d555c5-f62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:90:32:3c:51:cf:20:ea:7d:4c:fe:5a:99:
52:26:3f:69:7a:e1:f7:b5:6f:70:01:1e:49:d0:81:
d0:2d:c3:24:f0:cb:56:8d:db:3d:bf:20:64:89:87:
a1:fc:7a:18:0b:09:f0:af:99:e7:7e:9c:6b:b9:57:
7b:8d:f4:0f:03:e6:76:dd:64:2c:18:50:7a:61:d7:
b7:39:0a:99:9f:c3:10:46:a3:6a:66:c8:8c:db:f3:
af:86:c1:6c:14:ed:85:ef:ee:23:9c:62:97:50:eb:
3e:8f:56:49:8d:d4:fd:ca:c4:88:78:0f:80:d0:fd:
50:ea:ff:e6:89:81:d9:0f:39:06:66:20:a9:f2:80:
5a:ce:2e:c0:0a:96:5a:87:50:f1:c1:a5:fa:f5:5b:
73:a7:0a:95:c6:14:40:b5:9e:bf:a7:10:44:eb:03:
37:72:89:35:34:20:00:39:fd:3e:0c:d5:e4:a1:83:
83:a7:00:fd:0b:1d:59:0a:25:0f:27:4d:69:12:ae:
9f:b6:24:73:f0:67:a8:01:ae:09:e0:df:d5:3f:27:
5e:df:71:69:42:8b:76:52:b3:be:a8:64:50:e3:b2:
3c:7c:cb:e8:7b:e3:d6:23:13:1b:58:31:b8:e5:22:
49:b6:cb:8f:7c:75:7d:e8:5b:3b:98:8f:af:79:f3:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AC:39:9A:61:B1:67:CC:77:78:C7:E3:DD:BB:2F:32:45:90:13:7F
X509v3 Authority Key Identifier:
keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/E40AC356018611F0B7E46C83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.56.0/24
IPv6:
2001:df5:3340::/48
Signature Algorithm: sha256WithRSAEncryption
72:77:30:c2:5a:21:63:76:15:d0:de:ae:b6:f7:82:ae:e2:10:
1c:54:c8:00:6e:e2:86:91:44:34:00:ef:46:92:a1:42:51:90:
6e:c6:d8:77:a2:dc:8a:d0:60:6c:ad:fd:f0:f6:5d:32:e9:49:
95:44:f0:8a:6b:0e:1f:ce:55:3e:8b:61:52:6d:5e:cd:5c:5c:
ab:99:83:d1:7b:1b:0d:98:5d:ba:e8:33:18:17:85:25:59:9f:
e2:40:c3:71:81:a2:20:84:48:7e:76:83:3a:e2:63:b5:73:a6:
cb:e3:61:8d:ad:33:e9:62:fe:d2:35:0c:1a:bf:39:21:2d:f8:
e7:37:73:0d:82:42:67:4c:af:8a:53:db:c0:e7:33:76:ca:d4:
d1:78:f9:cb:99:7a:2d:4e:3f:b5:4f:58:2c:86:0b:1c:b7:c0:
18:54:0b:8b:b7:5f:3d:bf:2c:87:af:43:13:7b:e2:fd:d6:7a:
d3:a7:b7:2a:ff:55:25:dc:03:be:70:35:8e:ea:38:0f:fb:2d:
c9:6f:89:75:c7:3f:67:e7:a8:38:d8:1d:38:ae:91:d8:3e:75:
33:b6:45:ec:c5:42:59:cc:33:89:be:e5:95:5f:12:25:3c:28:
6a:97:a1:f3:7a:ad:3e:7d:8f:c5:87:c4:a7:c1:98:92:29:31:
a1:92:a0:6c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
Mzg1MDExMC8GA1UEBRMoMkFCMjQzMkMzQUQ1MTI4RUQ3M0U5OUM0NjBEMDYxMUZB
RjREMjIwRTAeFw0yNTAzMTUxMDI2MTNaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZDU1NWM1LWY2MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLkJAyPFHPIOp9TP5amVImP2l64fe1b3ABHknQgdAtwyTwy1aN2z2/IGSJh6H8
ehgLCfCvmed+nGu5V3uN9A8D5nbdZCwYUHph17c5CpmfwxBGo2pmyIzb86+GwWwU
7YXv7iOcYpdQ6z6PVkmN1P3KxIh4D4DQ/VDq/+aJgdkPOQZmIKnygFrOLsAKllqH
UPHBpfr1W3OnCpXGFEC1nr+nEETrAzdyiTU0IAA5/T4M1eShg4OnAP0LHVkKJQ8n
TWkSrp+2JHPwZ6gBrgng39U/J17fcWlCi3ZSs76oZFDjsjx8y+h749YjExtYMbjl
Ikm2y498dX3oWzuYj69588UxAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUHaw5mmGx
Z8x3eMfj3bsvMkWQE38wHwYDVR0jBBgwFoAUKrJDLDrVEo7XPpnEYNBhH69NIg4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzODUwLzdCM0IzN0Q0MDE4
NjExRjBCMDVCNEM1OUM0RjlBRTAyL0tySkRMRHJWRW83WFBwbkVZTkJoSDY5Tkln
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvS3JKRExEclZFbzdYUHBuRVlOQmhINjlOSWc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Mzg1MC83QjNCMzdENDAxODYxMUYwQjA1QjRDNTlDNEY5QUUwMi9FNDBBQzM1NjAx
ODYxMUYwQjdFNDZDODNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAKPfODAPBAIAAjAJAwcAIAEN9TNAMA0GCSqGSIb3DQEBCwUA
A4IBAQBydzDCWiFjdhXQ3q6294Ku4hAcVMgAbuKGkUQ0AO9GkqFCUZBuxth3otyK
0GBsrf3w9l0y6UmVRPCKaw4fzlU+i2FSbV7NXFyrmYPRexsNmF266DMYF4UlWZ/i
QMNxgaIghEh+doM64mO1c6bL42GNrTPpYv7SNQwavzkhLfjnN3MNgkJnTK+KU9vA
5zN2ytTRePnLmXotTj+1T1gshgsct8AYVAuLt189vyyHr0MTe+L91nrTp7cq/1Ul
3AO+cDWO6jgP+y3Jb4l1xz9n56g42B04rpHYPnUztkXsxUJZzDOJvuWVXxIlPChq
l6Hzeq0+fY/Fh8SnwZiSKTGhkqBs
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:36:28 2025 by rpki-client