Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BB117C7263E311EC8B936683C4F9AE02.roa
File: BB117C7263E311EC8B936683C4F9AE02.roa (raw, json)
Hash identifier: 0/EW64Mh63zMaVA14McIsT4SlAqq3SmbvYbfwCpi0z0=
Subject key identifier: A6:27:0C:A4:05:40:E4:D7:DE:28:C2:4E:BD:7D:24:52:56:76:8A:DD
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 463C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BB117C7263E311EC8B936683C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:35:37 +0000
ROA not before: Thu 05 Sep 2024 03:35:37 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 24066
IP address blocks: 117.122.124.0/22 maxlen: 24
203.119.36.0/22 maxlen: 24
2001:dc8:c000::/48 maxlen: 48
2001:dc8:c001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17980 (0x463c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 5 03:35:37 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92709-f478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:ce:67:6d:00:10:28:d3:16:32:f0:2d:f2:
07:42:24:63:cb:95:f0:e4:ed:2e:17:d7:65:5f:7c:
eb:4f:11:0d:12:c7:2a:99:6e:d5:a9:77:48:b9:04:
21:45:14:5c:42:08:f1:33:65:85:85:fb:ce:ae:a6:
33:31:ff:91:0a:55:3f:73:c6:03:25:3d:94:b6:c3:
ca:1c:21:97:ce:1e:39:20:73:96:09:e4:9b:7f:44:
ed:5a:db:3c:2e:27:ef:13:20:44:75:0c:d3:14:28:
92:1f:dd:0f:e4:4d:e9:75:10:c9:f9:bd:50:ce:7b:
92:19:35:1c:78:ba:c1:76:6c:9c:dd:f8:35:28:54:
7f:ff:02:49:29:38:62:08:c8:7a:bb:ce:9c:84:fc:
51:7b:e7:77:0f:47:f5:5d:20:92:14:aa:69:a5:a2:
f1:30:af:69:ce:0c:ed:66:51:eb:f1:07:40:33:27:
48:e1:07:8a:04:8c:a8:11:61:d6:cf:f7:48:e4:49:
10:7b:a8:a6:c6:e4:44:f6:2e:6a:de:6f:56:d5:b6:
95:2b:a9:86:2b:85:98:ee:a4:d5:53:71:8d:fc:12:
d5:7e:ab:6e:76:d9:a0:00:fb:87:7e:2e:c8:aa:ef:
a5:b4:92:fe:d0:73:1b:4c:97:44:da:49:64:f6:24:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:27:0C:A4:05:40:E4:D7:DE:28:C2:4E:BD:7D:24:52:56:76:8A:DD
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BB117C7263E311EC8B936683C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.122.124.0/22
203.119.36.0/22
IPv6:
2001:dc8:c000::/47
Signature Algorithm: sha256WithRSAEncryption
bb:3b:44:f5:18:f0:24:30:74:fe:17:5c:2e:c0:f8:a3:22:60:
fc:a6:0f:98:ba:a3:17:82:fb:49:54:1b:7a:a0:28:16:4d:9f:
b8:bf:46:86:53:ed:14:82:ec:8f:6b:a8:3c:ac:a1:ff:a7:d1:
e8:1c:b2:5b:6a:31:a0:ee:d5:c6:00:eb:ec:34:96:97:e5:f6:
75:15:ba:d0:39:70:3d:14:2d:23:5d:e3:cd:c8:40:4c:39:38:
68:dc:e9:0f:6e:e0:01:38:6e:fa:34:70:8c:e9:56:25:02:1e:
b8:7f:0d:b7:37:e2:38:91:b1:61:bd:35:19:eb:21:33:48:37:
50:fc:e4:e0:dc:4b:8c:ec:7c:53:07:b8:ce:08:17:f7:d2:8d:
d6:c3:ea:e8:0c:c2:ad:61:2a:7b:f1:54:20:d1:dd:95:a1:ee:
e2:85:db:67:d7:91:bf:74:aa:6b:d6:65:05:3a:49:b8:6d:a1:
01:4c:70:25:0c:38:a0:d5:d9:73:a8:c2:e1:ee:32:9e:37:f0:
ba:e0:07:dc:28:6c:50:d0:c4:4e:3e:24:c2:b7:c5:59:7f:02:
27:97:b1:0e:fa:20:d5:5d:1a:d0:05:4b:9b:a9:4e:78:0a:c7:
de:9e:58:01:b4:c7:ba:de:94:3e:c4:57:18:3e:98:74:5f:00:
25:62:e0:69
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICRjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTM3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjcwOS1mNDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvH7OZ20AECjTFjLwLfIHQiRjy5Xw5O0uF9dlX3zrTxENEscqmW7VqXdIuQQh
RRRcQgjxM2WFhfvOrqYzMf+RClU/c8YDJT2UtsPKHCGXzh45IHOWCeSbf0TtWts8
LifvEyBEdQzTFCiSH90P5E3pdRDJ+b1QznuSGTUceLrBdmyc3fg1KFR//wJJKThi
CMh6u86chPxRe+d3D0f1XSCSFKpppaLxMK9pzgztZlHr8QdAMydI4QeKBIyoEWHW
z/dI5EkQe6imxuRE9i5q3m9W1baVK6mGK4WY7qTVU3GN/BLVfqtudtmgAPuHfi7I
qu+ltJL+0HMbTJdE2klk9iS35wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFKYnDKQF
QOTX3ijCTr19JFJWdordMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkIxMTdDNzI2
M0UzMTFFQzhCOTM2NjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBAJ1enwDBALLdyQwDwQCAAIwCQMHASABDcjAADANBgkqhkiG
9w0BAQsFAAOCAQEAuztE9RjwJDB0/hdcLsD4oyJg/KYPmLqjF4L7SVQbeqAoFk2f
uL9GhlPtFILsj2uoPKyh/6fR6ByyW2oxoO7VxgDr7DSWl+X2dRW60DlwPRQtI13j
zchATDk4aNzpD27gAThu+jRwjOlWJQIeuH8NtzfiOJGxYb01GeshM0g3UPzk4NxL
jOx8Uwe4zggX99KN1sPq6AzCrWEqe/FUINHdlaHu4oXbZ9eRv3Sqa9ZlBTpJuG2h
AUxwJQw4oNXZc6jC4e4ynjfwuuAH3ChsUNDETj4kwrfFWX8CJ5exDvog1V0a0AVL
m6lOeArH3p5YAbTHut6UPsRXGD6YdF8AJWLgaQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:35:48 2025 by rpki-client