Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2561D00063DE11EC8CB33722C4F9AE02.roa
File: 2561D00063DE11EC8CB33722C4F9AE02.roa (raw, json)
Hash identifier: kWY228kKhwfNAaLn0WzhFXEm2JcRjYrrckQhxupmUj8=
Subject key identifier: 9D:3F:B9:17:88:91:47:AB:9F:65:2A:F6:67:CC:24:4B:ED:12:69:D0
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4651
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2561D00063DE11EC8CB33722C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:35:55 +0000
ROA not before: Thu 05 Sep 2024 03:35:55 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38736
IP address blocks: 203.119.60.0/22 maxlen: 24
2001:dc8:1000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18001 (0x4651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:35:55 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d9271a-875c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:9d:17:d9:53:e1:5f:ac:61:21:74:f3:7a:
9c:7e:dd:f2:0f:74:6b:8c:44:58:e3:c0:c4:df:9c:
ba:3a:5a:e8:14:a1:c1:3c:66:6e:fe:e9:04:e8:07:
ad:12:f1:c5:b4:33:c0:13:b0:ec:4d:f6:7f:b0:3d:
59:7d:8b:c3:3b:9b:2b:f5:de:bb:2d:86:7e:df:c9:
12:a9:33:a8:46:00:12:ae:af:5b:35:c3:2e:d3:42:
79:f7:21:ae:a9:54:e3:b6:6b:a9:79:4c:d9:be:fc:
e7:0a:bc:39:a8:c2:83:f8:86:3d:1a:8d:7b:fc:e8:
29:eb:73:72:4e:7a:f0:6e:46:33:35:d6:28:a0:e8:
b0:64:3f:f2:cf:38:32:7e:d2:79:22:ac:c1:ca:86:
e2:6d:c4:56:82:b6:9b:d6:da:48:23:fb:0e:3f:49:
b0:d9:79:34:e3:95:94:10:30:66:62:65:86:e5:bb:
e6:a0:50:c3:b3:6b:7b:d3:cb:5f:84:7d:47:3c:d4:
3e:37:84:6a:a9:5a:b0:e3:33:95:5f:70:fb:de:de:
66:62:d1:0a:4e:86:0b:e3:b7:65:df:f5:82:8b:5e:
bb:a8:aa:96:79:a7:34:2a:19:05:24:86:94:b7:05:
6e:1b:a7:23:6c:23:92:d8:75:73:d1:2a:bc:ce:64:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3F:B9:17:88:91:47:AB:9F:65:2A:F6:67:CC:24:4B:ED:12:69:D0
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2561D00063DE11EC8CB33722C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.119.60.0/22
IPv6:
2001:dc8:1000::/48
Signature Algorithm: sha256WithRSAEncryption
2f:ef:ce:5b:92:d2:86:a6:a8:48:ed:a0:86:06:a5:3a:fe:fd:
9b:16:6a:f6:50:b9:8e:8c:76:35:fe:2e:ed:f4:a8:7f:c0:94:
54:7b:df:36:43:70:f3:5f:b7:5a:fb:b7:85:c1:3a:62:92:c9:
40:24:7b:53:7e:76:d3:9b:2f:be:f7:d5:6e:c8:a6:36:12:fd:
50:ad:31:4c:ca:51:b2:9f:ea:d6:6f:6d:e0:51:0e:68:78:4a:
52:7a:a1:e3:32:05:40:5c:2b:e5:7f:26:26:b3:f4:a8:df:12:
09:3b:4f:5b:f8:3d:e6:a4:09:b6:50:83:07:d0:4e:85:73:48:
34:37:8a:bf:60:a4:e2:d2:8b:62:df:2b:84:1d:52:b8:6e:cd:
15:33:ef:3c:06:f5:64:f9:08:0e:21:0f:5d:4e:7c:cf:88:9b:
f2:98:3f:f3:bb:23:96:f6:aa:c7:85:39:c3:73:db:d1:05:ee:
62:7f:f3:38:da:78:c0:f5:69:44:92:95:f6:47:22:90:98:39:
a8:fd:65:de:07:92:fe:da:f7:ec:51:db:a7:77:66:cb:2f:18:
16:e5:fa:60:af:b3:e3:14:5f:6b:cb:c9:e3:db:14:2e:46:b5:
5e:c1:e2:09:78:5e:24:84:0e:75:6c:4b:fe:85:b6:7e:85:5e:
ba:c5:9f:89
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICRlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTU1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjcxYS04NzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqfudF9lT4V+sYSF083qcft3yD3RrjERY48DE35y6OlroFKHBPGZu/ukE6Aet
EvHFtDPAE7DsTfZ/sD1ZfYvDO5sr9d67LYZ+38kSqTOoRgASrq9bNcMu00J59yGu
qVTjtmupeUzZvvznCrw5qMKD+IY9Go17/Ogp63NyTnrwbkYzNdYooOiwZD/yzzgy
ftJ5IqzByobibcRWgrab1tpII/sOP0mw2Xk045WUEDBmYmWG5bvmoFDDs2t708tf
hH1HPNQ+N4RqqVqw4zOVX3D73t5mYtEKToYL47dl3/WCi167qKqWeac0KhkFJIaU
twVuG6cjbCOS2HVz0Sq8zmRHiwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJ0/uReI
kUern2Uq9mfMJEvtEmnQMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMjU2MUQwMDA2
M0RFMTFFQzhDQjMzNzIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBALLdzwwDwQCAAIwCQMHACABDcgQADANBgkqhkiG9w0BAQsF
AAOCAQEAL+/OW5LShqaoSO2ghgalOv79mxZq9lC5jox2Nf4u7fSof8CUVHvfNkNw
81+3Wvu3hcE6YpLJQCR7U35205svvvfVbsimNhL9UK0xTMpRsp/q1m9t4FEOaHhK
Unqh4zIFQFwr5X8mJrP0qN8SCTtPW/g95qQJtlCDB9BOhXNINDeKv2Ck4tKLYt8r
hB1SuG7NFTPvPAb1ZPkIDiEPXU58z4ib8pg/87sjlvaqx4U5w3Pb0QXuYn/zONp4
wPVpRJKV9kcikJg5qP1l3geS/tr37FHbp3dmyy8YFuX6YK+z4xRfa8vJ49sULka1
XsHiCXheJIQOdWxL/oW2foVeusWfiQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:41:16 2025 by rpki-client