Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/4C559E64054B11F08646F910C4F9AE02.roa
File: 4C559E64054B11F08646F910C4F9AE02.roa (raw, json)
Hash identifier: 0Xm3uacvSp3paq390FzXVAQQzWpRRD8IchY/Au4ztQ0=
Subject key identifier: 6A:B9:53:34:20:4D:B1:B1:40:03:51:C1:89:31:CD:FA:D0:15:88:B6
Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Certificate serial: 05
Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/4C559E64054B11F08646F910C4F9AE02.roa
Signing time: Thu 20 Mar 2025 05:22:21 +0000
ROA not before: Thu 20 Mar 2025 05:22:21 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 149507
IP address blocks: 163.223.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170927
Validity
Not Before: Mar 20 05:22:21 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67dba60d-3c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:14:ad:e7:59:e5:c4:64:bd:d1:50:bc:84:
4d:8a:96:43:63:66:2d:72:69:6a:19:a0:57:7a:b3:
b8:b6:31:c1:01:ad:13:2c:7f:e3:f4:3b:ab:1c:91:
02:64:99:b5:45:db:40:ef:0e:23:0f:c7:de:35:d8:
21:8f:2f:29:27:15:e4:63:75:bf:6f:98:2f:c4:42:
b6:e6:6f:9e:dd:74:de:56:b1:92:a2:02:ce:e2:81:
57:1e:e2:e4:aa:a2:3c:cf:a6:08:df:ff:6f:56:46:
5c:82:40:28:81:10:97:13:0a:dd:6c:bb:ab:9e:f0:
2e:1e:fc:72:ca:a9:dc:7c:3b:10:d1:66:20:28:59:
38:d1:eb:65:66:a7:4f:92:e6:14:e1:b5:94:c2:e7:
b8:96:8a:89:c5:18:ca:d5:d5:0e:a2:4f:83:d7:44:
9a:96:b1:1b:8a:a7:69:53:d3:c4:44:86:dc:33:7b:
5f:ae:cd:36:d9:64:e5:55:b5:c9:75:16:9e:2a:a3:
b6:e7:b7:d9:48:66:53:81:a6:6b:72:ed:05:23:e1:
64:a6:62:6c:af:59:ec:18:9f:4b:c4:06:5e:58:69:
a4:c9:7b:0e:0f:53:d1:da:66:c1:6d:69:cb:b8:e6:
cb:2c:ea:b8:90:98:59:e6:56:d9:5a:83:16:dc:c3:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B9:53:34:20:4D:B1:B1:40:03:51:C1:89:31:CD:FA:D0:15:88:B6
X509v3 Authority Key Identifier:
keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/4C559E64054B11F08646F910C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.120.0/23
Signature Algorithm: sha256WithRSAEncryption
be:43:c6:52:c8:48:f6:42:6d:6e:91:1d:f0:15:a5:56:56:57:
09:00:2b:62:24:98:b4:e7:ae:24:28:4e:14:be:70:18:e9:cb:
8d:83:75:10:16:86:74:01:e4:a5:5b:37:5e:8d:15:75:36:5a:
f2:e7:5a:f9:92:c7:66:e3:63:1a:4b:c2:7a:ac:4f:96:31:83:
65:4b:63:ee:71:03:02:af:34:ce:d9:35:89:2e:a1:f3:49:51:
55:c6:1c:97:bd:52:0c:ff:cd:7e:22:b7:d9:22:44:87:06:c5:
0e:18:22:1f:ab:71:49:2f:6d:47:38:be:16:7e:66:a7:2c:1c:
85:ae:36:03:09:b0:7c:4d:18:fb:eb:9b:d6:bf:a1:33:0a:a8:
aa:5a:8e:78:48:5f:d8:69:f6:12:05:a3:bb:b6:09:c3:ca:4d:
c8:1a:66:56:0d:b8:56:f7:8f:61:88:bd:59:ad:13:48:34:3d:
60:25:b6:e7:f4:e3:5d:5a:ac:a1:a9:15:c1:d6:22:6e:8a:15:
df:c6:2e:7a:c4:cf:a7:b7:ed:3e:c3:f8:e4:d3:93:a9:e6:f7:
2a:16:57:1b:5f:68:2d:44:e9:e7:46:b5:60:eb:25:cc:5b:2d:
56:1d:7e:91:8c:73:f8:35:df:14:32:81:5f:44:2f:34:98:cb:
f1:2e:06:ce
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MDkyNzExMC8GA1UEBRMoMjc5QzlENzk4MjRCQTIwNDZGMTM4QUY2Q0RCOEEzQjA4
RjAzQkVCMzAeFw0yNTAzMjAwNTIyMjFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZGJhNjBkLTNjMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDArxSt51nlxGS90VC8hE2KlkNjZi1yaWoZoFd6s7i2McEBrRMsf+P0O6sckQJk
mbVF20DvDiMPx9412CGPLyknFeRjdb9vmC/EQrbmb57ddN5WsZKiAs7igVce4uSq
ojzPpgjf/29WRlyCQCiBEJcTCt1su6ue8C4e/HLKqdx8OxDRZiAoWTjR62Vmp0+S
5hThtZTC57iWionFGMrV1Q6iT4PXRJqWsRuKp2lT08REhtwze1+uzTbZZOVVtcl1
Fp4qo7bnt9lIZlOBpmty7QUj4WSmYmyvWewYn0vEBl5YaaTJew4PU9HaZsFtacu4
5sss6riQmFnmVtlagxbcwxPrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUarlTNCBN
sbFAA1HBiTHN+tAViLYwHwYDVR0jBBgwFoAUJ5ydeYJLogRvE4r2zbijsI8DvrMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTI3L0MxMDZEMzNDMDRE
QzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dSdkU0cjJ6Ymlqc0k4RHZy
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSjV5ZGVZSkxvZ1J2RTRyMnpiaWpzSThEdnJNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDkyNy9DMTA2RDMzQzA0REMxMUYwQjZCMjVBNDNDNEY5QUUwMi80QzU1OUU2NDA1
NEIxMUYwODY0NkY5MTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaPfeDANBgkqhkiG9w0BAQsFAAOCAQEAvkPGUshI9kJtbpEd
8BWlVlZXCQArYiSYtOeuJChOFL5wGOnLjYN1EBaGdAHkpVs3Xo0VdTZa8uda+ZLH
ZuNjGkvCeqxPljGDZUtj7nEDAq80ztk1iS6h80lRVcYcl71SDP/NfiK32SJEhwbF
DhgiH6txSS9tRzi+Fn5mpywcha42AwmwfE0Y++ub1r+hMwqoqlqOeEhf2Gn2EgWj
u7YJw8pNyBpmVg24VvePYYi9Wa0TSDQ9YCW25/TjXVqsoakVwdYibooV38YuesTP
p7ftPsP45NOTqeb3KhZXG19oLUTp50a1YOslzFstVh1+kYxz+DXfFDKBX0QvNJjL
8S4Gzg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:48:24 2025 by rpki-client