Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/E12607CE6F0411EEA5298939C4F9AE02.roa
File: E12607CE6F0411EEA5298939C4F9AE02.roa (raw, json)
Hash identifier: 8l049HuRfYTZKVjmyHEuH/syy1lOm3iSGmRbwY8PSnM=
Subject key identifier: A8:F5:A9:B1:A7:16:15:2D:53:FD:36:6D:9E:CB:74:5E:EF:DB:C9:82
Certificate issuer: /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Certificate serial: FC
Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/E12607CE6F0411EEA5298939C4F9AE02.roa
Signing time: Thu 30 Jan 2025 19:38:38 +0000
ROA not before: Thu 30 Jan 2025 19:38:38 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 7575
IP address blocks: 132.234.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CABF
Validity
Not Before: Jan 30 19:38:38 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679bd53e-fd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:d8:2a:a4:1d:fb:dd:50:a5:d6:ab:e7:ac:
b4:f9:67:a3:b9:35:f9:52:24:5c:c5:06:cf:bc:c9:
4f:55:28:d5:28:4c:80:d5:0d:de:8e:60:bf:b3:23:
83:8b:f6:f6:4a:88:75:af:7d:1e:03:9f:3d:ce:2a:
1a:6d:c3:7d:cc:45:29:c8:62:58:fd:1f:8d:f6:e4:
fd:4c:d2:86:ad:b2:20:a2:7f:76:47:68:7e:41:3e:
1d:21:3b:46:44:ac:fa:cb:ec:96:c4:f0:d3:b5:5e:
f8:c7:4e:ef:69:34:3f:cb:08:4b:0f:a0:ab:4c:cf:
0f:18:b4:26:9c:99:20:a9:c8:61:57:c1:ec:15:71:
5e:d1:68:b0:5d:98:01:9b:1b:80:44:0e:0e:29:80:
18:64:77:0c:c2:a9:42:d2:3d:a3:c5:ca:fb:92:92:
c6:85:e6:d3:52:46:ed:51:e3:db:46:1c:ea:fd:b6:
6e:da:96:0f:a6:df:9d:cc:79:a5:95:da:d8:a4:4e:
47:4f:af:bc:a1:46:c9:fc:b7:23:7b:b4:6e:7d:ea:
f1:96:ed:cc:7f:94:8e:d1:27:b0:98:a4:5f:e4:50:
0e:93:6a:b9:b7:b7:c1:31:59:fc:a3:31:84:70:e4:
58:2d:ca:0e:b5:e1:c5:49:73:dd:2b:0a:3e:c7:17:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F5:A9:B1:A7:16:15:2D:53:FD:36:6D:9E:CB:74:5E:EF:DB:C9:82
X509v3 Authority Key Identifier:
keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/E12607CE6F0411EEA5298939C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
132.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:fa:9e:9a:ce:04:0c:51:64:43:0d:68:73:60:8f:79:87:ff:
7d:07:cf:dd:51:fd:8a:b4:aa:68:f8:3d:e8:43:b8:f0:ac:7e:
05:16:1c:3d:15:0c:c5:8e:18:ea:27:d1:24:20:2a:2b:17:66:
53:30:8e:46:88:15:bf:b9:4c:6d:d2:d9:5e:13:fe:f7:d6:cd:
4b:13:b3:eb:34:5f:27:32:e2:26:7d:39:f0:e7:d8:02:c6:92:
46:29:48:e8:e4:c3:10:a5:77:9b:03:dd:09:ba:0a:3f:1a:d7:
77:60:6e:2d:48:7e:3d:22:8d:f3:e9:d9:1d:d3:2a:1b:f4:20:
6d:7d:17:d9:af:a9:b2:6b:5e:5d:eb:1d:29:32:93:ad:57:aa:
f7:93:0c:e4:a1:88:77:a3:b8:c1:d9:28:82:ad:4f:a6:a6:ef:
d3:08:85:a3:ba:d2:28:54:73:8d:f3:7d:32:51:38:aa:c2:d6:
b3:6e:e6:de:4d:67:a1:ce:2d:e4:46:7d:82:15:0b:64:90:33:
98:96:17:55:3e:b2:ff:c9:33:c6:d5:51:00:e5:ec:7e:db:9e:
8b:54:35:e8:e8:7b:31:65:36:80:58:54:6d:c5:d5:30:36:6f:
b0:31:92:24:68:03:2d:42:db:36:57:c8:ef:70:87:b6:3e:7e:
38:51:c3:0e
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENBQkYxMTAvBgNVBAUTKEE0REVFRDk1OTNFNTkxMzAzQTlCMDM5ODA2MUZFOEVG
NTE4NjY1Q0EwHhcNMjUwMTMwMTkzODM4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzliZDUzZS1mZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApn7YKqQd+91Qpdar56y0+WejuTX5UiRcxQbPvMlPVSjVKEyA1Q3ejmC/syOD
i/b2Soh1r30eA589zioabcN9zEUpyGJY/R+N9uT9TNKGrbIgon92R2h+QT4dITtG
RKz6y+yWxPDTtV74x07vaTQ/ywhLD6CrTM8PGLQmnJkgqchhV8HsFXFe0WiwXZgB
mxuARA4OKYAYZHcMwqlC0j2jxcr7kpLGhebTUkbtUePbRhzq/bZu2pYPpt+dzHml
ldrYpE5HT6+8oUbJ/Lcje7Ruferxlu3Mf5SO0SewmKRf5FAOk2q5t7fBMVn8ozGE
cORYLcoOteHFSXPdKwo+xxe+fwIDAQABo4IClDCCApAwHQYDVR0OBBYEFKj1qbGn
FhUtU/02bZ7LdF7v28mCMB8GA1UdIwQYMBaAFKTe7ZWT5ZEwOpsDmAYf6O9RhmXK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi8xODkxOTVBQzY4
MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9wTjd0bFpQbGtUQTZtd09ZQmhfbzcxR0da
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BON3RsWlBsa1RBNm13T1lCaF9vNzFHR1pjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OENBQkYvMTg5MTk1QUM2ODJBMTFFRThBOUVCODJGQzRGOUFFMDIvRTEyNjA3Q0U2
RjA0MTFFRUE1Mjk4OTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwCE6jANBgkqhkiG9w0BAQsFAAOCAQEASPqems4EDFFkQw1o
c2CPeYf/fQfP3VH9irSqaPg96EO48Kx+BRYcPRUMxY4Y6ifRJCAqKxdmUzCORogV
v7lMbdLZXhP+99bNSxOz6zRfJzLiJn058OfYAsaSRilI6OTDEKV3mwPdCboKPxrX
d2BuLUh+PSKN8+nZHdMqG/QgbX0X2a+psmteXesdKTKTrVeq95MM5KGId6O4wdko
gq1Ppqbv0wiFo7rSKFRzjfN9MlE4qsLWs27m3k1noc4t5EZ9ghULZJAzmJYXVT6y
/8kzxtVRAOXsftuei1Q16Oh7MWU2gFhUbcXVMDZvsDGSJGgDLULbNlfI73CHtj5+
OFHDDg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:40:33 2025 by rpki-client