Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/B3501A3838BB11EB9F5B573BC4F9AE02.roa
File: B3501A3838BB11EB9F5B573BC4F9AE02.roa (raw, json)
Hash identifier: L/jYt5xxPCKBnIXxZUdgTrcg+twE9nZDfu0Pnb+WIaQ=
Subject key identifier: 2A:3B:F8:42:DC:EB:91:51:17:B1:30:38:67:81:E0:07:89:75:27:7B
Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial: 34E5
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/B3501A3838BB11EB9F5B573BC4F9AE02.roa
Signing time: Thu 06 Jun 2024 15:11:08 +0000
ROA not before: Thu 06 Jun 2024 15:11:08 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 137029
IP address blocks: 114.130.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13541 (0x34e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AABB1
Validity
Not Before: Jun 6 15:11:08 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6661d18c-35ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:fa:ee:10:04:a3:ca:50:e4:5a:2d:08:ac:
5b:e4:82:f8:93:76:e4:86:45:5f:40:91:57:c6:20:
7d:b2:8f:fc:20:b9:03:29:e4:ea:65:83:c8:3d:09:
c6:cb:2c:fa:f3:41:d8:82:d7:6b:01:c6:19:04:b5:
ad:5d:02:c2:ce:8c:7c:74:89:27:f7:b0:18:7c:1c:
81:3a:bc:7a:59:b2:04:da:30:8f:97:82:ff:34:d5:
17:43:7a:64:52:ea:6a:1a:4c:1e:0a:f6:5e:e2:b9:
29:42:63:2e:12:52:09:6c:56:01:c2:65:50:9d:ec:
09:78:9c:7c:14:c4:39:be:9f:e5:43:8d:01:e8:d5:
22:ed:b4:f3:ff:50:73:6b:b6:34:ee:2c:6a:b3:d8:
31:73:62:20:48:61:0e:3b:7a:08:f5:b6:6f:dd:ae:
02:29:36:90:2f:46:c0:de:75:db:ab:7a:88:85:27:
9f:da:17:41:7b:8d:91:de:91:e5:f4:b0:8c:c0:9b:
60:5a:d1:d9:f0:75:91:83:c6:b4:fd:d9:53:4e:d6:
6f:cf:fa:b5:e6:6c:dd:f2:3d:28:3c:da:77:71:33:
ef:f1:c2:50:ec:10:32:33:34:8a:4b:17:5c:97:8c:
dd:a7:53:40:53:d3:a5:bc:ab:ec:8d:5d:05:e0:4a:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3B:F8:42:DC:EB:91:51:17:B1:30:38:67:81:E0:07:89:75:27:7B
X509v3 Authority Key Identifier:
keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/B3501A3838BB11EB9F5B573BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.130.72.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c7:3b:b9:5b:e7:a5:f2:ea:65:22:ca:ed:31:f2:d9:f6:bc:
63:c7:c9:0e:f9:3d:67:d5:77:bf:8a:da:5d:26:08:29:59:70:
e9:28:60:d8:37:00:c6:65:65:ee:4c:ed:26:8a:a1:49:8b:73:
0e:4e:9a:78:f9:3b:52:b3:49:5d:e0:4f:b9:9f:27:43:b1:d8:
67:aa:13:c5:df:56:e8:79:71:40:f2:28:5b:74:8f:8c:b6:64:
2c:b8:b8:3d:89:0a:4b:b0:d3:a6:bb:8c:2b:69:39:0c:a7:b7:
ff:13:ab:cd:97:67:b0:b9:92:0a:da:e7:c7:dd:6b:de:0c:bc:
15:b9:02:42:15:cc:1e:62:74:27:33:61:02:dc:92:be:7e:5f:
cd:52:d4:2d:a4:1e:b9:d9:73:dc:17:c6:9c:b9:81:c3:3d:cd:
de:53:2b:61:85:40:75:31:9f:02:6e:0f:0b:75:02:c6:68:07:
c1:cc:9e:9e:9e:26:41:25:be:ba:c4:b4:0a:ed:1d:1f:64:2d:
15:00:7a:b2:07:64:aa:23:c0:a4:aa:98:80:db:eb:0c:35:46:
ee:e6:e8:5f:30:38:36:14:92:1a:19:ee:94:2b:d7:09:7d:bd:
59:46:5a:87:95:f9:73:0b:cc:55:31:ee:f9:5a:e9:cf:0d:9a:
2c:53:2a:a3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB
RUE2RkY4MDYwHhcNMjQwNjA2MTUxMTA4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjYxZDE4Yy0zNWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAouD67hAEo8pQ5FotCKxb5IL4k3bkhkVfQJFXxiB9so/8ILkDKeTqZYPIPQnG
yyz680HYgtdrAcYZBLWtXQLCzox8dIkn97AYfByBOrx6WbIE2jCPl4L/NNUXQ3pk
UupqGkweCvZe4rkpQmMuElIJbFYBwmVQnewJeJx8FMQ5vp/lQ40B6NUi7bTz/1Bz
a7Y07ixqs9gxc2IgSGEOO3oI9bZv3a4CKTaQL0bA3nXbq3qIhSef2hdBe42R3pHl
9LCMwJtgWtHZ8HWRg8a0/dlTTtZvz/q15mzd8j0oPNp3cTPv8cJQ7BAyMzSKSxdc
l4zdp1NAU9OlvKvsjV0F4EojswIDAQABo4IClTCCApEwHQYDVR0OBBYEFCo7+ELc
65FRF7EwOGeB4AeJdSd7MB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE
OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvQjM1MDFBMzgz
OEJCMTFFQjlGNUI1NzNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABygkgwDQYJKoZIhvcNAQELBQADggEBAFHHO7lb56Xy6mUi
yu0x8tn2vGPHyQ75PWfVd7+K2l0mCClZcOkoYNg3AMZlZe5M7SaKoUmLcw5Omnj5
O1KzSV3gT7mfJ0Ox2GeqE8XfVuh5cUDyKFt0j4y2ZCy4uD2JCkuw06a7jCtpOQyn
t/8Tq82XZ7C5kgra58fda94MvBW5AkIVzB5idCczYQLckr5+X81S1C2kHrnZc9wX
xpy5gcM9zd5TK2GFQHUxnwJuDwt1AsZoB8HMnp6eJkElvrrEtArtHR9kLRUAerIH
ZKojwKSqmIDb6ww1Ru7m6F8wODYUkhoZ7pQr1wl9vVlGWoeV+XMLzFUx7vla6c8N
mixTKqM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:09:02 2025 by rpki-client