Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB717BD003DD11F0981FB64EC4F9AE02.roa
File: FB717BD003DD11F0981FB64EC4F9AE02.roa (raw, json)
Hash identifier: 7HzTZgDMpZeXu1bCnN3wtZGA81X/fsecVg31oy94YL4=
Subject key identifier: FF:E3:CB:39:DF:C8:8A:AE:1C:BA:09:FA:05:32:01:BD:30:9E:4F:8F
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4A20
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB717BD003DD11F0981FB64EC4F9AE02.roa
Signing time: Tue 18 Mar 2025 09:47:19 +0000
ROA not before: Tue 18 Mar 2025 09:47:19 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 153647
IP address blocks: 163.223.6.0/23 maxlen: 23
2001:df5:2bc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18976 (0x4a20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Mar 18 09:47:19 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67d94127-592b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:66:22:38:23:d1:bf:b6:ac:05:70:ea:85:
e7:cb:9a:3a:a4:89:94:ca:db:9e:ef:3c:f1:af:38:
37:96:c9:4a:b5:19:1c:7c:e7:5f:be:bf:ba:ed:e1:
27:c7:7b:43:58:3a:46:71:07:a3:3c:db:26:ba:5a:
57:02:dd:0f:d7:d6:ee:ca:7d:c0:40:0f:35:94:3a:
20:97:42:52:e9:37:9d:39:dc:af:b5:13:a6:96:c7:
45:4e:81:bc:86:06:d3:3f:2b:7f:ba:3f:0b:ae:6c:
85:94:b7:af:12:3b:91:6b:56:c0:02:33:9e:ea:ad:
e8:40:d5:f5:8e:d1:5c:2d:7f:a2:d2:e1:cd:30:e2:
70:d8:69:57:86:a7:ad:f2:8c:e2:bd:53:96:2a:e6:
14:5c:ce:fc:ea:57:f9:ad:a7:95:01:b4:75:8c:2e:
bc:58:3f:4a:05:9f:47:6d:36:0b:98:9d:d2:28:dd:
55:57:86:ab:ba:15:b6:68:a2:89:95:f3:ae:b1:02:
d5:48:e0:b7:81:0b:bf:91:c2:9d:da:da:bd:3f:46:
22:b3:17:8d:54:0e:33:5b:9d:a5:45:69:a6:1e:3f:
5b:a4:26:6e:be:4c:d9:a6:94:1c:32:c5:46:e8:98:
95:14:2e:e6:a0:26:a3:d6:8e:2b:06:3a:c8:f4:a7:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:CB:39:DF:C8:8A:AE:1C:BA:09:FA:05:32:01:BD:30:9E:4F:8F
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB717BD003DD11F0981FB64EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.6.0/23
IPv6:
2001:df5:2bc0::/48
Signature Algorithm: sha256WithRSAEncryption
96:fb:04:3c:5c:33:5d:83:04:78:71:2c:c5:9d:4e:fc:a0:b2:
ff:af:5b:8e:a0:1b:ff:ff:7a:da:5c:70:ad:33:ee:aa:e9:6e:
19:b2:03:5c:4f:e0:49:d4:43:5e:9e:4d:61:75:05:b2:6e:3a:
f2:a0:b7:5a:65:ee:6a:2d:73:3e:b3:20:d3:41:9a:f6:48:75:
c6:80:5d:4f:ab:c7:37:11:80:9e:25:09:8a:69:2d:a0:e9:8e:
4e:8e:c6:c1:8d:88:dd:86:57:51:22:0d:d8:65:a6:e4:a6:70:
57:e0:b3:c4:5d:0d:c3:02:21:a5:ce:9e:48:90:45:32:93:39:
73:1c:92:78:3e:c7:ae:9c:4a:f6:9b:36:f9:57:88:ff:38:d2:
aa:00:33:28:ed:eb:4e:3a:ce:9b:27:17:15:5f:e8:7a:8b:5c:
e9:99:df:db:c2:8b:eb:db:34:86:1d:c5:8a:5f:b9:28:76:1d:
17:81:46:cc:33:b3:12:4a:fd:6a:ca:90:b4:d2:99:b2:7e:ad:
c4:19:5e:12:2e:de:80:a1:0c:3c:07:e7:76:63:92:ba:1c:65:
6e:e3:70:7c:18:81:57:3c:75:29:60:ce:1b:1b:44:40:53:55:
9d:da:7e:1c:d5:12:83:23:ec:c5:63:64:68:2b:1d:f2:4d:b2:
1f:2d:e2:c3
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICSiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwMzE4MDk0NzE5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Q5NDEyNy01OTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQtmIjgj0b+2rAVw6oXny5o6pImUytue7zzxrzg3lslKtRkcfOdfvr+67eEn
x3tDWDpGcQejPNsmulpXAt0P19buyn3AQA81lDogl0JS6TedOdyvtROmlsdFToG8
hgbTPyt/uj8LrmyFlLevEjuRa1bAAjOe6q3oQNX1jtFcLX+i0uHNMOJw2GlXhqet
8ozivVOWKuYUXM786lf5raeVAbR1jC68WD9KBZ9HbTYLmJ3SKN1VV4aruhW2aKKJ
lfOusQLVSOC3gQu/kcKd2tq9P0YisxeNVA4zW52lRWmmHj9bpCZuvkzZppQcMsVG
6JiVFC7moCaj1o4rBjrI9KcihQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFP/jyznf
yIquHLoJ+gUyAb0wnk+PMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkI3MTdCRDAw
M0REMTFGMDk4MUZCNjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAGj3wYwDwQCAAIwCQMHACABDfUrwDANBgkqhkiG9w0BAQsF
AAOCAQEAlvsEPFwzXYMEeHEsxZ1O/KCy/69bjqAb//962lxwrTPuquluGbIDXE/g
SdRDXp5NYXUFsm468qC3WmXuai1zPrMg00Ga9kh1xoBdT6vHNxGAniUJimktoOmO
To7GwY2I3YZXUSIN2GWm5KZwV+CzxF0NwwIhpc6eSJBFMpM5cxySeD7HrpxK9ps2
+VeI/zjSqgAzKO3rTjrOmycXFV/oeotc6Znf28KL69s0hh3Fil+5KHYdF4FGzDOz
Ekr9asqQtNKZsn6txBleEi7egKEMPAfndmOSuhxlbuNwfBiBVzx1KWDOGxtEQFNV
ndp+HNUSgyPsxWNkaCsd8k2yHy3iww==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:35:50 2025 by rpki-client