Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/A295F860E71011E8899C3917C4F9AE02.roa
File: A295F860E71011E8899C3917C4F9AE02.roa (raw, json)
Hash identifier: MpKbuC4p+zIoKJkZfEG3DvMzDY6zY/kK40o2YHQcwMc=
Subject key identifier: 26:FB:18:D0:AD:B4:CA:D3:47:66:73:E5:01:27:29:02:C0:7F:11:B0
Certificate issuer: /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676
Certificate serial: 1199
Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/A295F860E71011E8899C3917C4F9AE02.roa
Signing time: Sat 30 Nov 2024 17:35:35 +0000
ROA not before: Sat 30 Nov 2024 17:35:35 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 9661
IP address blocks: 202.41.194.0/23 maxlen: 23
203.29.0.0/24 maxlen: 24
2001:df5:cc00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4505 (0x1199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DD2D
Validity
Not Before: Nov 30 17:35:35 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674b4ce6-15c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:ac:13:86:4c:9a:e4:d3:47:4b:10:0a:02:
0c:e4:10:7b:c1:eb:9b:e5:b7:b9:55:d1:15:f1:c3:
5d:7e:b5:90:34:8b:34:03:ec:c7:7a:72:f5:c7:85:
82:9e:2b:ad:7f:47:76:50:1d:8f:f7:e5:2d:cb:19:
75:97:fa:69:f6:f3:93:53:30:f9:53:b2:99:7b:33:
01:a7:51:c4:11:cd:ec:e9:cc:85:c4:9f:0c:31:51:
81:db:3b:9d:94:b9:d8:45:13:0a:79:99:90:b9:eb:
02:b8:52:7a:27:b6:3f:10:93:ce:4f:5d:23:1e:1a:
c8:6f:e2:d9:ae:49:e5:85:cc:ce:47:e3:e6:39:61:
31:88:71:d2:d7:e0:50:76:f9:d0:75:40:1c:f5:64:
f8:24:96:1e:85:3a:0e:ee:e0:de:86:10:54:79:e8:
65:c5:8a:e6:48:5a:d8:ef:8e:f0:a3:4d:29:ff:8b:
11:55:62:74:ff:bf:d8:6b:0a:fe:35:d3:f3:ab:35:
b8:a2:ac:5b:f6:14:79:dc:7d:62:be:06:f4:74:37:
b0:12:99:a1:44:52:9d:ff:7b:d3:f6:bc:9a:6b:6b:
18:06:b9:66:8d:b8:f6:a5:cc:ee:ae:81:a4:f4:39:
60:a6:b5:f6:ef:de:0d:68:bd:f2:ce:95:c5:b4:5a:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FB:18:D0:AD:B4:CA:D3:47:66:73:E5:01:27:29:02:C0:7F:11:B0
X509v3 Authority Key Identifier:
keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/A295F860E71011E8899C3917C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.41.194.0/23
203.29.0.0/24
IPv6:
2001:df5:cc00::/48
Signature Algorithm: sha256WithRSAEncryption
a3:19:a0:49:b3:45:5d:d1:03:de:05:33:53:9a:af:b5:01:a9:
19:06:84:bd:55:2a:b2:1b:5e:9e:4d:38:25:45:98:59:d3:61:
31:74:f3:82:da:eb:b5:db:cb:1b:2a:81:59:c3:75:33:e6:3d:
63:8c:27:81:d9:53:59:c4:d2:20:e5:b1:9c:e7:ec:81:bb:24:
4d:d7:56:84:e3:83:21:be:65:bc:ca:32:8e:e4:57:1a:b8:cb:
20:21:1e:da:5f:56:7b:e2:bb:1f:b4:b4:96:38:75:d0:f9:a4:
91:83:7a:7b:4e:73:ca:77:a0:b3:d5:e8:62:bd:ba:f0:6e:4c:
0c:01:cc:f9:fb:bd:04:34:1c:a2:6e:30:08:b6:9b:77:ea:09:
73:76:f3:b8:04:4d:56:7e:59:28:87:1b:f7:db:54:3f:a2:03:
0c:05:f7:6c:13:28:0d:94:21:c0:64:84:71:cf:91:c4:f5:54:
98:25:d4:4e:ac:66:71:4d:fc:7c:4a:3e:22:3c:32:36:60:37:
af:be:7a:53:b0:ad:31:92:7c:9e:b5:76:dc:b2:58:93:a0:75:
2f:68:19:3e:03:93:a7:28:02:4d:fd:aa:ef:56:83:f0:c7:75:
42:4c:11:b2:da:bf:7e:1a:12:bb:05:2c:ca:46:77:2d:79:0e:
5a:8f:53:8b
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICEZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRBNTQzQTIwM0E1
M0UzQ0U2NzYwHhcNMjQxMTMwMTczNTM1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRiNGNlNi0xNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn5OsE4ZMmuTTR0sQCgIM5BB7weub5be5VdEV8cNdfrWQNIs0A+zHenL1x4WC
niutf0d2UB2P9+Utyxl1l/pp9vOTUzD5U7KZezMBp1HEEc3s6cyFxJ8MMVGB2zud
lLnYRRMKeZmQuesCuFJ6J7Y/EJPOT10jHhrIb+LZrknlhczOR+PmOWExiHHS1+BQ
dvnQdUAc9WT4JJYehToO7uDehhBUeehlxYrmSFrY747wo00p/4sRVWJ0/7/Yawr+
NdPzqzW4oqxb9hR53H1ivgb0dDewEpmhRFKd/3vT9ryaa2sYBrlmjbj2pczuroGk
9DlgprX2794NaL3yzpXFtFoIjwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFCb7GNCt
tMrTR2Zz5QEnKQLAfxGwMB8GA1UdIwQYMBaAFIz0I5gP06f2fsX0pUOiA6U+POZ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyRC85RDEyNjk1Q0U3
MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBfWi14ZlNsUTZJRHBUNDg1
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pQUWptQV9UcF9aLXhmU2xRNklEcFQ0ODVuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUREMkQvOUQxMjY5NUNFNzBFMTFFODlBOTYzRDExQzRGOUFFMDIvQTI5NUY4NjBF
NzEwMTFFODg5OUMzOTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBAHKKcIDBADLHQAwDwQCAAIwCQMHACABDfXMADANBgkqhkiG
9w0BAQsFAAOCAQEAoxmgSbNFXdED3gUzU5qvtQGpGQaEvVUqshtenk04JUWYWdNh
MXTzgtrrtdvLGyqBWcN1M+Y9Y4wngdlTWcTSIOWxnOfsgbskTddWhOODIb5lvMoy
juRXGrjLICEe2l9We+K7H7S0ljh10PmkkYN6e05zynegs9XoYr268G5MDAHM+fu9
BDQcom4wCLabd+oJc3bzuARNVn5ZKIcb99tUP6IDDAX3bBMoDZQhwGSEcc+RxPVU
mCXUTqxmcU38fEo+IjwyNmA3r756U7CtMZJ8nrV23LJYk6B1L2gZPgOTpygCTf2q
71aD8Md1QkwRstq/fhoSuwUsykZ3LXkOWo9Tiw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:30 2025 by rpki-client