Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3A5A84F8CB7111EBA9EEF440C4F9AE02.roa
File: 3A5A84F8CB7111EBA9EEF440C4F9AE02.roa (raw, json)
Hash identifier: LcxIbKxK3jutvAgu3ThkdTt7YT68VEQAWEq5z0WaOxY=
Subject key identifier: 26:52:76:6A:BA:37:49:38:99:22:E8:77:80:10:B2:E4:82:40:5E:A8
Certificate issuer: /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F
Certificate serial: 0BCB
Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3A5A84F8CB7111EBA9EEF440C4F9AE02.roa
Signing time: Tue 04 Feb 2025 18:47:32 +0000
ROA not before: Tue 04 Feb 2025 18:47:32 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 8739
IP address blocks: 116.251.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3019 (0xbcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158568
Validity
Not Before: Feb 4 18:47:32 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a260c4-5a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:ac:9b:41:12:68:7b:62:ed:df:47:52:90:
95:60:12:79:b7:5c:19:a6:1b:53:e9:f4:5d:c9:c9:
13:5a:1d:a0:e0:40:3a:b8:82:9b:3e:d8:2e:7f:ce:
c7:e7:25:a7:73:2d:62:79:cf:8e:43:03:5d:1c:c5:
80:eb:0c:ea:8a:7f:36:c9:b0:fb:53:b0:f3:eb:8e:
b6:3a:8f:a9:62:23:bc:e7:29:97:19:c9:fc:fe:59:
1e:a1:70:8a:94:89:94:17:f3:cc:68:49:5b:70:6b:
34:82:68:5e:76:6a:e6:cd:26:21:73:49:54:0a:bb:
6e:f6:24:f1:1c:a6:94:5b:a9:3f:12:90:0f:cd:60:
c3:4f:98:de:9c:d7:62:eb:b9:ef:e6:7c:1d:33:68:
7f:4c:58:f3:65:f1:16:91:37:65:4d:92:4e:68:23:
0f:75:00:0b:70:76:f5:71:4c:05:8a:3d:0d:1f:68:
81:8d:43:56:24:e3:be:77:f3:d8:01:51:c5:af:ab:
87:34:f6:42:53:bf:25:1d:d3:5f:c6:e6:b6:a6:4d:
b2:1e:9f:ea:b9:06:ca:64:8b:e5:31:31:3c:65:26:
c9:4c:37:28:f9:8f:fd:3f:34:cd:e1:16:7e:8b:fa:
a2:50:46:bd:5a:4c:ce:32:8d:1f:36:86:18:04:d9:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:52:76:6A:BA:37:49:38:99:22:E8:77:80:10:B2:E4:82:40:5E:A8
X509v3 Authority Key Identifier:
keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3A5A84F8CB7111EBA9EEF440C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.251.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:81:76:74:84:7c:4b:7e:0f:dc:11:cc:26:cf:aa:39:45:92:
c4:61:3f:21:cc:19:f7:4b:fc:2b:a3:9a:ab:2a:8c:04:91:03:
c3:50:e0:0a:4a:05:cf:46:9a:68:c2:f6:ae:57:48:05:8f:cb:
54:b8:24:71:70:11:8c:46:03:7e:49:82:b6:fb:7d:2d:77:97:
92:33:6c:88:e2:03:5f:c5:22:bb:30:46:da:b7:0d:ca:1e:1a:
25:96:c8:dd:9a:bb:e3:d8:ce:62:7b:7b:19:de:b0:c6:b8:fa:
36:c5:43:09:60:29:0d:2f:2e:23:c0:e5:3d:08:02:4d:00:40:
eb:93:3a:f7:e3:1c:df:b8:7a:75:04:5f:3a:07:2f:da:f0:c8:
f1:54:6b:7b:47:dc:ef:81:19:db:0d:00:b1:9d:d1:07:5c:93:
1e:69:56:1b:77:3f:40:28:c1:c6:7a:fb:ee:14:22:68:70:4a:
cc:8f:79:1b:7f:30:54:ca:88:c6:9a:93:a9:21:af:ca:5f:a7:
4c:cf:af:65:c2:e7:d6:dd:a7:49:d9:05:9f:dd:48:56:27:15:
b6:88:61:78:f5:33:3c:5d:29:02:fc:36:a5:0d:77:99:c8:2c:
3a:0d:d8:ad:ff:ce:a9:ab:22:78:9f:e1:2a:40:71:02:9f:85:
58:65:25:96
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFDOEVENDREOUNC
MjU1N0Y0M0YwHhcNMjUwMjA0MTg0NzMyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2EyNjBjNC01YTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApk2sm0ESaHti7d9HUpCVYBJ5t1wZphtT6fRdyckTWh2g4EA6uIKbPtguf87H
5yWncy1iec+OQwNdHMWA6wzqin82ybD7U7Dz6462Oo+pYiO85ymXGcn8/lkeoXCK
lImUF/PMaElbcGs0gmhedmrmzSYhc0lUCrtu9iTxHKaUW6k/EpAPzWDDT5jenNdi
67nv5nwdM2h/TFjzZfEWkTdlTZJOaCMPdQALcHb1cUwFij0NH2iBjUNWJOO+d/PY
AVHFr6uHNPZCU78lHdNfxua2pk2yHp/quQbKZIvlMTE8ZSbJTDco+Y/9PzTN4RZ+
i/qiUEa9WkzOMo0fNoYYBNk+oQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCZSdmq6
N0k4mSLod4AQsuSCQF6oMB8GA1UdIwQYMBaAFN8lNITc5SxBN8vRyO1E2cslV/Q/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC9EMzEzMDY3NjE4
NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExFRTN5OUhJN1VUWnl5Vlg5
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN5VTBoTnpsTEVFM3k5SEk3VVRaeXlWWDlEOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTg1NjgvRDMxMzA2NzYxODU3MTFFQTk4NjM0MTVFQzRGOUFFMDIvM0E1QTg0RjhD
QjcxMTFFQkE5RUVGNDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJ0+8wwDQYJKoZIhvcNAQELBQADggEBAH6BdnSEfEt+D9wR
zCbPqjlFksRhPyHMGfdL/CujmqsqjASRA8NQ4ApKBc9GmmjC9q5XSAWPy1S4JHFw
EYxGA35Jgrb7fS13l5IzbIjiA1/FIrswRtq3DcoeGiWWyN2au+PYzmJ7exnesMa4
+jbFQwlgKQ0vLiPA5T0IAk0AQOuTOvfjHN+4enUEXzoHL9rwyPFUa3tH3O+BGdsN
ALGd0Qdckx5pVht3P0AowcZ6++4UImhwSsyPeRt/MFTKiMaak6khr8pfp0zPr2XC
59bdp0nZBZ/dSFYnFbaIYXj1MzxdKQL8NqUNd5nILDoN2K3/zqmrInif4SpAcQKf
hVhlJZY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:26 2025 by rpki-client