Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/B926074003DE11F0BE74EF4FC4F9AE02.roa
File: B926074003DE11F0BE74EF4FC4F9AE02.roa (raw, json)
Hash identifier: MrES6foDiSHHoq/QKAoty9fVqNPmbywIIsyngqv/2Cs=
Subject key identifier: B5:13:F4:0D:DB:13:E8:13:00:9C:5B:71:04:A7:28:1A:F8:6D:2B:3C
Certificate issuer: /CN=A917BB9A/serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Certificate serial: 40
Authority key identifier: A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/B926074003DE11F0BE74EF4FC4F9AE02.roa
Signing time: Tue 25 Mar 2025 06:37:03 +0000
ROA not before: Tue 25 Mar 2025 06:37:03 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 56209
IP address blocks: 150.129.174.0/23 maxlen: 23
150.129.174.0/24 maxlen: 24
150.129.175.0/24 maxlen: 24
2401:a3e0::/48 maxlen: 48
2401:a3e0:1::/48 maxlen: 48
2401:a3e0:2::/48 maxlen: 48
2401:a3e0:3::/48 maxlen: 48
2401:a3e0:4::/48 maxlen: 48
2401:a3e0:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB9A
Validity
Not Before: Mar 25 06:37:03 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67e24f0f-fb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:c4:50:d7:f0:01:94:8f:5d:96:07:87:5f:
59:fe:eb:6f:61:a6:3a:b1:68:99:f4:31:c7:20:ac:
9f:87:60:ec:9e:57:13:a2:ec:29:7b:f7:c6:a0:7c:
e3:32:7f:6a:37:96:c1:73:34:dd:81:83:9a:b9:67:
67:c9:21:39:54:f9:e0:ac:2d:c6:69:93:ce:35:62:
ad:dc:5f:cf:de:1a:bb:c3:b3:5a:b3:21:6c:84:11:
42:a4:fa:33:f6:56:b9:d4:41:59:50:a2:25:15:24:
5f:39:c9:68:29:63:78:74:c4:d9:c9:f8:de:73:be:
75:4b:13:0f:a3:62:00:20:1a:b2:7d:db:2a:e2:94:
49:84:ab:83:7a:36:3e:23:54:9a:62:82:3d:49:3d:
98:55:b4:2f:31:b3:65:a6:a0:8e:72:ec:21:f8:de:
b1:e2:ef:f3:04:c3:98:d3:dd:d0:66:13:6c:05:2b:
4b:30:6a:fb:5d:22:59:87:cf:3c:36:70:47:27:f8:
55:7e:c2:e3:59:fe:49:4b:5d:27:21:5f:3f:2e:16:
9d:35:4e:76:bd:f4:9f:3f:9e:d8:87:3d:07:d7:9d:
01:32:32:56:7c:9c:1d:ce:a3:9d:ba:c3:88:c7:a5:
61:42:21:52:f9:ed:90:11:71:50:3c:0d:02:b0:fb:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:13:F4:0D:DB:13:E8:13:00:9C:5B:71:04:A7:28:1A:F8:6D:2B:3C
X509v3 Authority Key Identifier:
keyid:A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/B926074003DE11F0BE74EF4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.174.0/23
IPv6:
2401:a3e0::-2401:a3e0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b4:a2:f4:4b:4f:72:64:f1:8c:65:41:3b:69:86:ee:76:c7:ac:
dc:6c:81:64:38:71:a1:ea:d6:f3:1f:ec:79:61:dc:d8:51:ce:
9a:85:01:c1:02:12:59:e6:59:e1:70:11:5b:d0:3c:5a:64:47:
c2:87:53:af:79:17:c3:c8:ce:34:ea:0a:68:c5:27:a9:fa:6f:
b3:b4:5f:62:97:fb:51:fe:39:6e:52:78:bb:b8:aa:d1:94:02:
9c:76:66:1e:3a:d7:30:c7:83:4d:7b:3a:f6:33:9c:45:27:b5:
7e:b5:47:30:ae:e7:e3:1a:bf:14:ff:1b:77:3a:d8:84:cb:be:
0a:b5:3d:ba:d7:5b:4b:e3:3a:87:1a:be:e4:4f:37:9d:a8:68:
80:b3:5e:89:1a:7e:b6:f9:14:bd:a3:a8:51:ac:54:5e:b0:dc:
83:0d:58:52:d6:19:f9:dc:09:1e:70:8b:71:ec:2f:99:98:6d:
c4:52:33:3e:51:97:cc:08:0f:1d:99:ca:8b:9c:92:01:2d:d3:
8e:65:5d:e3:76:6d:29:ad:eb:56:c1:e8:18:85:82:f0:a0:5c:
76:38:85:4c:a9:2a:c6:a6:31:f9:0e:20:ca:76:f9:98:c1:f9:
c1:77:b9:2b:d7:c8:a0:6c:00:a1:a2:2d:5b:a3:6c:ba:46:04:
76:92:21:38
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QkI5QTExMC8GA1UEBRMoQTYxNzJFRUJFMUZDRDFBOTc4Q0NBNDY3RTFCNThBMzBC
Mzc5NTFFQjAeFw0yNTAzMjUwNjM3MDNaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZTI0ZjBmLWZiNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6GcRQ1/ABlI9dlgeHX1n+629hpjqxaJn0MccgrJ+HYOyeVxOi7Cl798agfOMy
f2o3lsFzNN2Bg5q5Z2fJITlU+eCsLcZpk841Yq3cX8/eGrvDs1qzIWyEEUKk+jP2
VrnUQVlQoiUVJF85yWgpY3h0xNnJ+N5zvnVLEw+jYgAgGrJ92yrilEmEq4N6Nj4j
VJpigj1JPZhVtC8xs2WmoI5y7CH43rHi7/MEw5jT3dBmE2wFK0swavtdIlmHzzw2
cEcn+FV+wuNZ/klLXSchXz8uFp01Tna99J8/ntiHPQfXnQEyMlZ8nB3Oo526w4jH
pWFCIVL57ZARcVA8DQKw+09NAgMBAAGjggKvMIICqzAdBgNVHQ4EFgQUtRP0DdsT
6BMAnFtxBKcoGvhtKzwwHwYDVR0jBBgwFoAUphcu6+H80al4zKRn4bWKMLN5Uesw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQjlBLzQ5Q0QwMzA0Q0ZG
MzExRUY5MDYyRTUyMUM0RjlBRTAyL3BoY3U2LUg4MGFsNHpLUm40YldLTUxONVVl
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcGhjdTYtSDgwYWw0ektSbjRiV0tNTE41VWVzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkI5QS80OUNEMDMwNENGRjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9COTI2MDc0MDAz
REUxMUYwQkU3NEVGNEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA5BggrBgEFBQcBBwEB/wQq
MCgwDAQCAAEwBgMEAZaBrjAYBAIAAjASMBADBQUkAaPgAwcBJAGj4AAEMA0GCSqG
SIb3DQEBCwUAA4IBAQC0ovRLT3Jk8YxlQTtphu52x6zcbIFkOHGh6tbzH+x5YdzY
Uc6ahQHBAhJZ5lnhcBFb0DxaZEfCh1OveRfDyM406gpoxSep+m+ztF9il/tR/jlu
Uni7uKrRlAKcdmYeOtcwx4NNezr2M5xFJ7V+tUcwrufjGr8U/xt3OtiEy74KtT26
11tL4zqHGr7kTzedqGiAs16JGn62+RS9o6hRrFResNyDDVhS1hn53AkecItx7C+Z
mG3EUjM+UZfMCA8dmcqLnJIBLdOOZV3jdm0pretWwegYhYLwoFx2OIVMqSrGpjH5
DiDKdvmYwfnBd7kr18igbAChoi1bo2y6RgR2kiE4
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:55:19 2025 by rpki-client