Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/2F7EAF12932411EB97630343C4F9AE02.roa
File: 2F7EAF12932411EB97630343C4F9AE02.roa (raw, json)
Hash identifier: taEGqA6seasVUG8wh6upIg7VNN7tLKDnm912bRHf+NY=
Subject key identifier: 0D:7B:EF:F1:88:C7:2E:DA:75:6E:DB:0E:60:A6:63:64:80:EA:58:3D
Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Certificate serial: 091B
Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/2F7EAF12932411EB97630343C4F9AE02.roa
Signing time: Thu 16 May 2024 21:30:28 +0000
ROA not before: Thu 16 May 2024 21:30:28 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 58713
IP address blocks: 43.240.120.0/23 maxlen: 23
43.240.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2331 (0x91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D64F
Validity
Not Before: May 16 21:30:28 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66467af4-da2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:28:8c:e6:59:c0:2b:a4:89:39:db:76:73:
ac:c9:be:76:cc:2b:df:0c:ce:70:5a:9b:32:01:29:
1d:70:e8:fa:23:a0:6f:89:bb:be:f5:60:3a:59:f1:
9d:f2:ee:a5:d3:99:11:e3:01:2d:e8:e4:eb:26:e9:
67:e3:6e:e9:58:6b:1c:a5:ae:6c:a9:ca:c4:d8:25:
72:dd:96:10:40:8b:21:ac:83:6d:5f:81:aa:d1:64:
64:dc:31:c7:00:fd:2e:18:93:08:f7:9c:e4:7e:52:
1e:c8:77:75:f5:41:cb:32:ed:71:5e:c2:22:57:97:
79:e2:72:92:59:4b:df:2e:49:cc:6d:54:e4:93:a3:
09:76:d2:32:44:90:5a:08:91:47:c9:d5:64:0a:cd:
61:40:ac:d8:f3:33:56:dd:a6:df:25:35:7e:26:c9:
56:ce:f8:40:ad:cb:16:32:19:6c:63:6e:0d:4d:52:
8b:f4:3d:69:df:b6:7c:6f:ca:4d:aa:a0:fa:d3:40:
8c:5f:37:5f:cd:3f:df:74:2f:10:33:a9:99:ae:46:
1e:0c:b2:07:c1:1b:12:0f:46:0f:39:98:03:94:98:
3c:a3:78:8c:76:ee:c6:5b:3b:03:fc:b9:56:e0:61:
0f:23:f8:fe:2a:13:08:62:84:c5:29:35:4d:34:08:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7B:EF:F1:88:C7:2E:DA:75:6E:DB:0E:60:A6:63:64:80:EA:58:3D
X509v3 Authority Key Identifier:
keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/2F7EAF12932411EB97630343C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:68:5c:c1:a4:69:d9:54:2d:22:5e:5c:58:a3:29:b3:34:e5:
c6:5b:98:b1:9d:71:c3:c8:26:5f:ee:99:55:7f:15:2b:e2:e1:
a2:d7:a6:57:19:63:6a:ba:68:c5:78:f5:88:68:6e:70:1f:de:
05:2f:a0:f4:ff:86:3e:c4:5d:69:40:75:b2:92:42:7a:be:7f:
00:c5:13:dd:41:ec:7d:a4:e0:af:01:47:02:78:80:49:b9:89:
cb:fc:95:78:7d:ed:10:21:77:96:02:a5:95:d4:55:0b:d0:ec:
72:10:f7:2e:fb:7d:88:af:1f:f6:79:36:04:6e:88:d3:e9:ca:
1b:42:39:4e:a3:08:20:49:1b:b0:35:55:92:2c:58:bd:e2:c9:
7d:be:8a:5e:3a:b1:ab:90:f4:33:4d:b1:e7:5b:33:5d:73:4b:
54:da:3e:96:85:62:dd:d9:b0:bb:90:98:f4:7c:46:5e:6f:67:
a3:08:ab:6b:ea:2e:b3:76:84:11:ef:50:28:b8:2f:37:22:64:
b0:15:56:52:3e:fc:69:4b:11:e2:57:fb:60:cd:10:9b:40:8d:
b1:2f:ec:61:e2:b2:43:35:a6:ef:0e:ef:22:82:35:78:06:78:
f3:bf:b4:2c:83:ee:e6:ab:ed:ee:64:78:9a:c6:f4:ac:c7:3a:
b0:22:bf:f8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx
MTNFNjY4RDcwHhcNMjQwNTE2MjEzMDI4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjQ2N2FmNC1kYTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtgkojOZZwCukiTnbdnOsyb52zCvfDM5wWpsyASkdcOj6I6Bvibu+9WA6WfGd
8u6l05kR4wEt6OTrJuln427pWGscpa5sqcrE2CVy3ZYQQIshrINtX4Gq0WRk3DHH
AP0uGJMI95zkflIeyHd19UHLMu1xXsIiV5d54nKSWUvfLknMbVTkk6MJdtIyRJBa
CJFHydVkCs1hQKzY8zNW3abfJTV+JslWzvhArcsWMhlsY24NTVKL9D1p37Z8b8pN
qqD600CMXzdfzT/fdC8QM6mZrkYeDLIHwRsSD0YPOZgDlJg8o3iMdu7GWzsD/LlW
4GEPI/j+KhMIYoTFKTVNNAiUFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA177/GI
xy7adW7bDmCmY2SA6lg9MB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE
RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h
TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ2NEYvRjExNUI2NzI3REVEMTFFQTlBNUNDQzRCQzRGOUFFMDIvMkY3RUFGMTI5
MzI0MTFFQjk3NjMwMzQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAIr8HgwDQYJKoZIhvcNAQELBQADggEBAExoXMGkadlULSJe
XFijKbM05cZbmLGdccPIJl/umVV/FSvi4aLXplcZY2q6aMV49YhobnAf3gUvoPT/
hj7EXWlAdbKSQnq+fwDFE91B7H2k4K8BRwJ4gEm5icv8lXh97RAhd5YCpZXUVQvQ
7HIQ9y77fYivH/Z5NgRuiNPpyhtCOU6jCCBJG7A1VZIsWL3iyX2+il46sauQ9DNN
sedbM11zS1TaPpaFYt3ZsLuQmPR8Rl5vZ6MIq2vqLrN2hBHvUCi4LzciZLAVVlI+
/GlLEeJX+2DNEJtAjbEv7GHiskM1pu8O7yKCNXgGePO/tCyD7uar7e5keJrG9KzH
OrAiv/g=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:02:32 2025 by rpki-client