Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
File: 253C821A388611ECBE8F7725C4F9AE02.roa (raw, json)
Hash identifier: h0WayUQjkIc+1k3KSDTUW0WJMm7/vM6nH4tLae6DlNo=
Subject key identifier: 1E:2F:94:29:32:E6:92:40:3B:08:8F:0E:5A:37:EF:5D:95:9D:9D:FE
Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial: 2614
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
Signing time: Wed 10 Apr 2024 16:22:46 +0000
ROA not before: Wed 10 Apr 2024 16:22:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147055
IP address blocks: 124.109.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9748 (0x2614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F
Validity
Not Before: Apr 10 16:22:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6616bcd6-89f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:c7:40:b5:f7:9d:72:6c:f3:49:0f:c3:e2:
72:6e:fe:77:6c:bb:c8:a2:a5:04:fd:11:cb:58:bb:
96:44:ff:0c:59:13:e9:c1:f9:43:2e:d1:45:4c:c7:
03:1e:49:0c:bc:27:b7:19:16:14:de:f3:3e:df:01:
89:be:b0:8d:02:e9:bf:f8:c1:dd:95:52:e6:2f:38:
2c:35:bc:53:c8:82:d1:4c:e8:94:34:32:9e:5f:43:
5c:95:aa:06:61:f7:66:f5:02:0f:b3:9e:45:93:1e:
72:6a:95:66:93:cd:0c:7e:ef:2e:6b:09:41:75:0b:
2a:c8:19:3b:e5:c3:c3:8f:9b:95:35:4e:5b:01:92:
6d:c2:e9:7f:1b:59:6d:8e:8e:98:c4:db:ca:b0:b2:
79:f6:a6:28:82:63:fc:b8:b9:21:55:af:8f:4c:7d:
75:2e:ff:34:99:50:1d:63:51:f5:0b:d6:cf:68:88:
3b:d9:36:e8:45:ca:a8:7b:bf:a8:ac:04:20:64:df:
fa:b1:88:44:aa:8e:b6:49:18:c2:64:4c:b6:dd:40:
7f:5b:cb:e0:4a:b4:d1:9c:29:36:78:59:02:81:41:
90:c9:1e:38:e8:98:86:7c:a6:31:a4:05:82:61:9b:
af:eb:c0:2d:83:bc:d3:ae:5c:2a:76:b0:8c:e5:40:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2F:94:29:32:E6:92:40:3B:08:8F:0E:5A:37:EF:5D:95:9D:9D:FE
X509v3 Authority Key Identifier:
keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.109.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2d:dd:2a:00:ac:40:56:85:5f:64:3d:64:89:b8:63:50:2e:
8a:07:21:c2:a0:9b:aa:1a:1a:2e:8f:30:ee:c6:96:30:de:41:
47:bc:89:da:15:4f:c0:3a:7b:1c:6f:56:b1:d2:ce:c5:27:66:
94:7b:c2:c2:12:b5:c0:97:b5:67:7c:44:1e:7e:b8:23:09:d1:
e9:82:c6:09:42:08:78:57:f5:a3:74:77:79:cc:7d:9a:58:f0:
12:65:7b:58:04:bc:89:4f:9a:4b:ce:d9:f0:19:4f:ad:f2:4f:
2d:4b:b2:00:c2:08:96:13:0f:6f:8d:62:b2:db:51:34:29:27:
f3:8f:ec:d0:de:d1:d8:bb:b0:1b:11:bd:ce:05:e5:75:54:91:
1e:22:f9:02:37:60:7f:84:ed:7f:05:b8:f1:14:7d:59:46:d8:
b7:69:7c:2d:76:99:cb:27:0c:cb:ef:b4:95:b9:97:45:94:eb:
f3:1f:f1:b8:a4:d5:fb:21:34:39:fa:cb:e8:6c:0a:6f:19:e8:
a6:64:8a:bc:d8:8e:41:78:be:76:f3:19:5b:85:16:3a:50:37:
de:12:b9:c0:1a:81:f0:d7:ff:99:06:32:f0:e2:38:b8:0b:dd:
32:de:b5:6f:ea:36:43:9a:73:ba:58:e8:56:f3:b5:70:3a:b0:
13:6f:4c:a9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE
MEFCOTRCRTUwHhcNMjQwNDEwMTYyMjQ2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjE2YmNkNi04OWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1krHQLX3nXJs80kPw+Jybv53bLvIoqUE/RHLWLuWRP8MWRPpwflDLtFFTMcD
HkkMvCe3GRYU3vM+3wGJvrCNAum/+MHdlVLmLzgsNbxTyILRTOiUNDKeX0NclaoG
Yfdm9QIPs55Fkx5yapVmk80Mfu8uawlBdQsqyBk75cPDj5uVNU5bAZJtwul/G1lt
jo6YxNvKsLJ59qYogmP8uLkhVa+PTH11Lv80mVAdY1H1C9bPaIg72TboRcqoe7+o
rAQgZN/6sYhEqo62SRjCZEy23UB/W8vgSrTRnCk2eFkCgUGQyR446JiGfKYxpAWC
YZuv68Atg7zTrlwqdrCM5UBTjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB4vlCky
5pJAOwiPDlo3712VnZ3+MB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB
Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTYyMkYvNjk3NTQ4QzhEQUNDMTFFNEE4MUFCRTUwQzRGOUFFMDIvMjUzQzgyMUEz
ODg2MTFFQ0JFOEY3NzI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB8bT8wDQYJKoZIhvcNAQELBQADggEBAIwt3SoArEBWhV9k
PWSJuGNQLooHIcKgm6oaGi6PMO7GljDeQUe8idoVT8A6exxvVrHSzsUnZpR7wsIS
tcCXtWd8RB5+uCMJ0emCxglCCHhX9aN0d3nMfZpY8BJle1gEvIlPmkvO2fAZT63y
Ty1LsgDCCJYTD2+NYrLbUTQpJ/OP7NDe0di7sBsRvc4F5XVUkR4i+QI3YH+E7X8F
uPEUfVlG2LdpfC12mcsnDMvvtJW5l0WU6/Mf8bik1fshNDn6y+hsCm8Z6KZkirzY
jkF4vnbzGVuFFjpQN94SucAagfDX/5kGMvDiOLgL3TLetW/qNkOac7pY6FbztXA6
sBNvTKk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:12 2025 by rpki-client