Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BDE8D4DCDE0F11EF86254166C4F9AE02.roa
File: BDE8D4DCDE0F11EF86254166C4F9AE02.roa (raw, json)
Hash identifier: olO4h1KYxITErmb/xTvGSu1dH1pUU519wfo4UEBSvZA=
Subject key identifier: 00:B6:03:A8:38:23:37:BB:D5:94:4D:D9:41:84:EC:C2:83:F2:BE:CC
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1CA1
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BDE8D4DCDE0F11EF86254166C4F9AE02.roa
Signing time: Wed 29 Jan 2025 07:07:46 +0000
ROA not before: Wed 29 Jan 2025 07:07:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134331
IP address blocks: 161.248.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7329 (0x1ca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 29 07:07:46 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6799d3c2-9931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:d8:3e:e4:e9:88:2f:45:b4:f6:88:99:74:
b6:ad:7c:ba:b7:25:65:a8:5f:27:13:dd:26:d9:db:
a6:a2:93:bf:5f:6d:84:73:c1:fe:bc:a4:74:49:52:
65:23:61:0d:5a:e4:4b:39:ba:69:b3:73:46:1f:33:
e8:38:8a:28:1d:cb:ec:f0:26:5d:43:5b:30:60:fa:
9b:30:d3:48:19:b0:53:a9:9e:da:93:bb:a5:4e:2b:
c4:b9:bf:dc:21:b6:b4:61:98:39:b2:7c:8b:e1:10:
b7:dd:61:29:04:99:86:66:26:31:78:fd:ba:d0:ed:
6a:97:68:5c:67:11:ac:96:9f:32:05:fe:cb:63:63:
12:bf:10:dc:0c:3b:ef:96:04:22:cd:74:d5:7a:a0:
95:5e:3c:61:0d:b8:0b:00:c8:87:9a:16:48:45:d1:
d0:89:7e:36:53:75:33:b3:2d:7c:0c:37:85:79:1a:
0a:c6:7d:1d:12:66:f5:a0:35:0b:6c:f0:b8:fc:ee:
22:9e:65:6b:54:b8:39:11:16:aa:62:6b:c4:b9:d3:
e4:75:90:6f:7c:99:8d:71:93:f2:cf:46:2e:ef:d1:
b9:dd:49:b4:2e:ff:35:a8:bc:d9:bd:7a:1a:3e:29:
6a:70:a7:19:f3:35:85:dc:d5:40:7f:14:b3:81:e0:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B6:03:A8:38:23:37:BB:D5:94:4D:D9:41:84:EC:C2:83:F2:BE:CC
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BDE8D4DCDE0F11EF86254166C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.64.0/23
Signature Algorithm: sha256WithRSAEncryption
72:26:03:c1:9e:95:e0:d2:c3:92:74:83:0f:f3:55:7c:c4:d2:
bc:83:79:12:4c:71:f0:17:c3:0f:3b:e8:d8:b0:97:99:fe:8c:
d8:99:af:ea:a7:0d:39:17:16:7b:d7:24:db:43:15:7b:c4:22:
1f:c0:cf:57:d8:d9:4a:cf:48:d1:1c:ff:5e:59:14:04:30:48:
2b:be:f6:c5:c3:c6:50:4d:bb:d3:08:a5:ed:02:61:f9:ed:45:
e3:0d:9b:93:f6:43:5f:8c:61:2a:a4:ae:97:eb:5c:b1:9c:bc:
af:19:69:1d:fe:21:b7:6a:05:84:83:e2:31:b7:ee:7c:6d:bc:
fa:ee:56:b8:b2:89:eb:63:10:b6:b9:39:a2:bb:db:d9:39:cd:
84:7a:dd:7a:04:99:d7:61:7b:e1:c8:bd:64:13:25:3b:a6:36:
ab:7c:56:bb:1b:e3:d2:47:13:e3:21:f7:15:7a:3b:12:dc:2b:
bf:7f:53:f4:a1:08:cb:90:ec:2e:b7:12:dc:89:f3:ea:08:d4:
15:bf:a5:33:a7:ec:31:ac:dd:45:36:fa:ab:5c:6b:4c:40:03:
54:14:26:b8:dc:01:2f:1e:ba:54:42:12:10:46:60:ed:f6:12:
3a:96:83:47:b1:3e:b9:bc:86:6f:89:c0:aa:92:e9:9a:d2:36:
40:57:2f:c9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwMTI5MDcwNzQ2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzk5ZDNjMi05OTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTPYPuTpiC9FtPaImXS2rXy6tyVlqF8nE90m2dumopO/X22Ec8H+vKR0SVJl
I2ENWuRLObpps3NGHzPoOIooHcvs8CZdQ1swYPqbMNNIGbBTqZ7ak7ulTivEub/c
Iba0YZg5snyL4RC33WEpBJmGZiYxeP260O1ql2hcZxGslp8yBf7LY2MSvxDcDDvv
lgQizXTVeqCVXjxhDbgLAMiHmhZIRdHQiX42U3Uzsy18DDeFeRoKxn0dEmb1oDUL
bPC4/O4inmVrVLg5ERaqYmvEudPkdZBvfJmNcZPyz0Yu79G53Um0Lv81qLzZvXoa
PilqcKcZ8zWF3NVAfxSzgeCicwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAC2A6g4
Ize71ZRN2UGE7MKD8r7MMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkRFOEQ0RENE
RTBGMTFFRjg2MjU0MTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGh+EAwDQYJKoZIhvcNAQELBQADggEBAHImA8GeleDSw5J0
gw/zVXzE0ryDeRJMcfAXww876Niwl5n+jNiZr+qnDTkXFnvXJNtDFXvEIh/Az1fY
2UrPSNEc/15ZFAQwSCu+9sXDxlBNu9MIpe0CYfntReMNm5P2Q1+MYSqkrpfrXLGc
vK8ZaR3+IbdqBYSD4jG37nxtvPruVriyietjELa5OaK729k5zYR63XoEmddhe+HI
vWQTJTumNqt8Vrsb49JHE+Mh9xV6OxLcK79/U/ShCMuQ7C63EtyJ8+oI1BW/pTOn
7DGs3UU2+qtca0xAA1QUJrjcAS8eulRCEhBGYO32EjqWg0exPrm8hm+JwKqS6ZrS
NkBXL8k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:01:26 2025 by rpki-client