Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/56094384320611EA84C94231C4F9AE02.roa
File: 56094384320611EA84C94231C4F9AE02.roa (raw, json)
Hash identifier: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=
Subject key identifier: 58:86:A0:E5:51:59:91:F4:22:A8:52:C3:64:D4:D6:C0:A2:D5:0C:52
Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial: 1301
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/56094384320611EA84C94231C4F9AE02.roa
Signing time: Tue 10 Dec 2024 17:15:14 +0000
ROA not before: Tue 10 Dec 2024 17:15:14 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 45170
IP address blocks: 36.0.4.0/22 maxlen: 23
101.251.4.0/22 maxlen: 22
183.91.132.0/22 maxlen: 22
183.91.132.0/24 maxlen: 24
202.52.0.0/23 maxlen: 23
2404:2c00::/32 maxlen: 32
2404:2c00:8000::/47 maxlen: 47
2404:2c00:8000::/48 maxlen: 48
2404:2c00:8001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4865 (0x1301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91771E3
Validity
Not Before: Dec 10 17:15:14 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67587722-3c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:c4:71:13:16:af:09:cf:65:9f:39:db:4b:
b2:d2:cf:fa:61:9e:b7:0f:3b:9d:5a:40:75:10:62:
3b:0a:21:7e:38:10:1f:e5:d1:1f:1c:ac:25:64:35:
46:aa:9b:4f:b8:5b:54:97:87:27:e3:5f:7b:21:8b:
9c:77:d9:b2:f6:dc:32:73:57:f2:90:93:af:74:08:
51:df:94:48:93:71:95:42:4e:d6:a0:e6:08:cf:32:
6d:1d:50:ec:6d:da:13:bf:d3:59:5d:ca:ab:e6:be:
ce:69:47:04:91:ce:d1:2c:ad:f2:33:2a:0f:8f:ac:
3d:b7:72:5b:ff:31:f2:42:23:f4:bc:ce:4c:74:f8:
de:8a:29:e2:b0:60:a2:d3:b4:ca:3b:fd:cd:af:9e:
47:f2:7c:28:e8:ce:b5:27:49:88:43:d0:8b:00:24:
43:46:35:3b:db:77:34:85:56:50:8d:51:43:b8:b0:
72:0f:e8:b5:b7:63:ea:41:e4:83:65:74:eb:0b:c9:
a8:ad:25:35:51:7e:21:b7:0d:2a:aa:b1:f4:ae:8a:
c4:f6:70:7c:f4:07:b5:7b:96:18:24:3e:b1:8d:76:
29:73:05:5c:16:3f:db:81:a8:f3:4b:9b:a2:19:c9:
09:eb:03:f0:81:ea:74:cb:5f:b4:6c:09:2b:3b:8f:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:86:A0:E5:51:59:91:F4:22:A8:52:C3:64:D4:D6:C0:A2:D5:0C:52
X509v3 Authority Key Identifier:
keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/56094384320611EA84C94231C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.4.0/22
101.251.4.0/22
183.91.132.0/22
202.52.0.0/23
IPv6:
2404:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
87:cc:50:16:4e:2e:77:cf:04:69:ff:8c:22:e2:57:f8:2d:48:
34:3f:89:fb:e0:79:07:60:e9:e1:13:2a:e5:82:03:76:5f:d0:
6c:7c:c1:29:71:95:21:33:f5:d0:2e:46:c8:4d:5a:05:bc:6c:
a2:e4:5a:4f:85:57:a2:84:a0:ee:27:8a:f3:c4:82:05:70:cc:
a7:c3:43:cc:c1:7a:b4:aa:9b:e7:03:28:f1:37:ea:06:cf:02:
ac:10:ff:ba:b6:b7:56:93:6b:ec:3c:4e:79:d7:64:2d:cf:24:
e6:8d:ee:50:47:2a:22:d0:87:ea:be:88:cd:f1:82:b3:f1:d5:
87:11:f6:c4:b2:76:bd:69:03:8e:c6:12:d9:30:62:ab:dd:e1:
0b:24:8f:43:d7:c4:4e:fd:0c:9d:95:ee:2f:05:89:5b:b2:87:
d6:75:30:27:7f:0e:4d:ed:14:67:3f:f8:b4:1c:fc:83:c5:dc:
78:5f:43:43:4a:5a:23:d9:79:8e:34:3c:29:ba:25:86:db:44:
d9:1c:5a:f3:f7:44:41:50:04:9f:cb:03:bd:f1:09:7d:69:20:
b0:00:76:31:a3:e1:90:b0:0c:53:3f:e9:1e:47:66:81:74:3a:
58:85:e5:76:c3:bd:0b:43:60:1f:8d:ef:84:29:52:40:bc:c1:
b4:31:3a:54
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICEwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz
NDEzNzAxQTUwHhcNMjQxMjEwMTcxNTE0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzU4NzcyMi0zYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSPEcRMWrwnPZZ8520uy0s/6YZ63DzudWkB1EGI7CiF+OBAf5dEfHKwlZDVG
qptPuFtUl4cn4197IYucd9my9twyc1fykJOvdAhR35RIk3GVQk7WoOYIzzJtHVDs
bdoTv9NZXcqr5r7OaUcEkc7RLK3yMyoPj6w9t3Jb/zHyQiP0vM5MdPjeiinisGCi
07TKO/3Nr55H8nwo6M61J0mIQ9CLACRDRjU723c0hVZQjVFDuLByD+i1t2PqQeSD
ZXTrC8morSU1UX4htw0qqrH0rorE9nB89Ae1e5YYJD6xjXYpcwVcFj/bgajzS5ui
GckJ6wPwgep0y1+0bAkrO48IowIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFiGoOVR
WZH0IqhSw2TU1sCi1QxSMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE
NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzcxRTMvOTM4M0U2NDZBRDY1MTFFOEFDQkQwRDZBQzRGOUFFMDIvNTYwOTQzODQz
MjA2MTFFQTg0Qzk0MjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E
MTAvMB4EAgABMBgDBAIkAAQDBAJl+wQDBAK3W4QDBAHKNAAwDQQCAAIwBwMFACQE
LAAwDQYJKoZIhvcNAQELBQADggEBAIfMUBZOLnfPBGn/jCLiV/gtSDQ/ifvgeQdg
6eETKuWCA3Zf0Gx8wSlxlSEz9dAuRshNWgW8bKLkWk+FV6KEoO4nivPEggVwzKfD
Q8zBerSqm+cDKPE36gbPAqwQ/7q2t1aTa+w8TnnXZC3PJOaN7lBHKiLQh+q+iM3x
grPx1YcR9sSydr1pA47GEtkwYqvd4Qskj0PXxE79DJ2V7i8FiVuyh9Z1MCd/Dk3t
FGc/+LQc/IPF3HhfQ0NKWiPZeY40PCm6JYbbRNkcWvP3REFQBJ/LA73xCX1pILAA
djGj4ZCwDFM/6R5HZoF0OliF5XbDvQtDYB+N74QpUkC8wbQxOlQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:27 2025 by rpki-client