Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa
File: BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa (raw, json)
Hash identifier: gHO3ucDCMpaAi01yTk9v+DmdcMeSIsp2IE197EC8p+s=
Subject key identifier: 9B:DA:F5:00:05:4D:38:5E:2E:DD:59:9F:34:C4:E9:E4:22:FD:90:21
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 06F2
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa
Signing time: Fri 13 Dec 2024 06:13:32 +0000
ROA not before: Fri 13 Dec 2024 06:13:32 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 17762
IP address blocks: 27.107.0.0/16 maxlen: 16
27.107.0.0/20 maxlen: 24
27.107.16.0/21 maxlen: 24
27.107.24.0/21 maxlen: 24
27.107.32.0/20 maxlen: 24
27.107.48.0/20 maxlen: 24
27.107.64.0/20 maxlen: 24
27.107.144.0/20 maxlen: 24
27.107.160.0/20 maxlen: 24
27.107.176.0/20 maxlen: 24
27.107.192.0/23 maxlen: 24
27.107.194.0/23 maxlen: 24
27.107.196.0/23 maxlen: 24
27.107.198.0/23 maxlen: 24
27.107.208.0/20 maxlen: 24
49.201.24.0/21 maxlen: 24
49.249.192.0/19 maxlen: 24
103.8.36.0/22 maxlen: 24
115.160.208.0/20 maxlen: 24
182.156.6.0/23 maxlen: 24
182.156.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1778 (0x6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A
Validity
Not Before: Dec 13 06:13:32 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=675bd08c-5641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:e9:8e:2a:5e:03:a9:14:17:17:fe:c4:96:
bc:12:68:ab:bb:f7:e5:07:3c:98:b9:6b:e2:87:7b:
6f:87:79:a4:ec:35:e7:17:ac:77:9e:39:e6:c9:78:
b1:f9:50:b6:fe:4f:d2:99:e8:0c:55:52:c2:27:91:
ec:91:e5:b9:39:4e:45:6a:04:2d:96:4c:83:08:0e:
85:3a:ef:a8:3d:11:d3:08:e3:93:41:09:6d:39:a4:
73:6d:62:ae:e8:51:bf:c6:f2:f6:05:d3:70:51:5f:
f4:87:fd:cd:a9:00:e4:93:5c:11:bf:4c:36:16:80:
51:4c:3b:5c:7d:23:cb:33:a4:70:90:40:bb:ff:9b:
48:79:92:e1:b5:e6:17:78:04:3b:5d:40:55:c2:79:
5d:63:db:4d:bd:81:3d:fc:c0:f6:71:60:cd:7b:d5:
3e:6a:20:dd:2b:3d:a5:6e:ba:52:bc:b5:8f:09:a0:
ae:e5:d8:65:36:4b:dc:39:8f:41:32:84:5d:84:2c:
7d:79:d5:e7:6b:be:17:18:9c:a2:c4:39:e6:14:00:
97:df:9e:a5:ef:9d:be:b3:f2:f4:d6:68:86:ea:c5:
5b:ae:44:d9:77:e3:9a:2d:b7:66:79:f7:3a:5f:01:
04:dd:75:2f:7f:98:1f:e2:c4:c3:8b:ee:45:d5:7b:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DA:F5:00:05:4D:38:5E:2E:DD:59:9F:34:C4:E9:E4:22:FD:90:21
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.107.0.0/16
49.201.24.0/21
49.249.192.0/19
103.8.36.0/22
115.160.208.0/20
182.156.6.0/23
182.156.20.0/23
Signature Algorithm: sha256WithRSAEncryption
49:5d:26:4e:6e:27:b6:69:a5:5c:1f:3b:36:dc:76:d0:10:d9:
45:4a:e4:eb:78:56:15:e0:6b:cd:fb:4d:bb:b6:c4:b1:82:46:
41:2e:05:a3:5c:d3:b6:50:37:82:bc:9d:19:35:e4:00:d3:64:
cc:f4:86:07:6b:cb:55:72:72:3f:02:96:01:30:ac:e1:1c:37:
94:2e:11:be:92:c7:f4:3a:9b:58:43:ca:81:ae:2a:8a:69:a6:
2a:1b:97:4c:fc:d4:a2:5e:28:1b:58:48:c2:b4:b5:fe:2c:ce:
10:44:38:9b:63:9a:0e:5b:29:43:87:44:48:15:ee:db:5d:d0:
14:91:de:09:67:a4:41:22:d7:84:e6:68:c0:21:73:c7:a7:92:
db:06:d3:43:15:05:45:d8:ac:c7:d1:33:44:aa:dc:54:2a:7c:
fa:e8:c4:ac:ae:a8:7e:ad:a9:58:59:4f:33:84:0a:cb:d8:f1:
4c:40:90:90:48:61:23:e0:c6:05:23:0c:35:5f:fc:05:51:60:
60:0b:b5:ef:23:52:29:eb:9b:1f:95:ad:6f:99:ed:c9:59:9c:
32:46:e5:f7:35:ec:da:4a:7c:58:2c:8b:3d:fe:bd:e8:0a:30:
7d:f4:6a:12:90:85:16:91:d5:33:cb:95:91:10:71:10:85:1b:
e5:cb:7b:49
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx
MjM5MDMzNzkwHhcNMjQxMjEzMDYxMzMyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NzViZDA4Yy01NjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArevpjipeA6kUFxf+xJa8Emiru/flBzyYuWvih3tvh3mk7DXnF6x3njnmyXix
+VC2/k/SmegMVVLCJ5HskeW5OU5FagQtlkyDCA6FOu+oPRHTCOOTQQltOaRzbWKu
6FG/xvL2BdNwUV/0h/3NqQDkk1wRv0w2FoBRTDtcfSPLM6RwkEC7/5tIeZLhteYX
eAQ7XUBVwnldY9tNvYE9/MD2cWDNe9U+aiDdKz2lbrpSvLWPCaCu5dhlNkvcOY9B
MoRdhCx9edXna74XGJyixDnmFACX356l752+s/L01miG6sVbrkTZd+OaLbdmefc6
XwEE3XUvf5gf4sTDi+5F1XsMhwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFJva9QAF
TTheLt1ZnzTE6eQi/ZAhMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5
MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvQkYwNzBBQjZD
MUJDMTFFRUJBQjdGMjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E
MzAxMC8EAgABMCkDAwAbawMEAzHJGAMEBTH5wAMEAmcIJAMEBHOg0AMEAbacBgME
AbacFDANBgkqhkiG9w0BAQsFAAOCAQEASV0mTm4ntmmlXB87Ntx20BDZRUrk63hW
FeBrzftNu7bEsYJGQS4Fo1zTtlA3grydGTXkANNkzPSGB2vLVXJyPwKWATCs4Rw3
lC4RvpLH9DqbWEPKga4qimmmKhuXTPzUol4oG1hIwrS1/izOEEQ4m2OaDlspQ4dE
SBXu213QFJHeCWekQSLXhOZowCFzx6eS2wbTQxUFRdisx9EzRKrcVCp8+ujErK6o
fq2pWFlPM4QKy9jxTECQkEhhI+DGBSMMNV/8BVFgYAu17yNSKeubH5Wtb5ntyVmc
Mkbl9zXs2kp8WCyLPf696AowffRqEpCFFpHVM8uVkRBxEIUb5ct7SQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:28 2025 by rpki-client