Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/9095FC2CB2E811EBADBB3753C4F9AE02.roa
File: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (raw, json)
Hash identifier: h5dvfa3FRBYPtcjjdPkOqAVQA/qeLJ42SQi+kECAh1M=
Subject key identifier: 0C:AA:8C:84:2A:9B:00:1C:F5:36:D3:67:82:79:36:03:35:D2:35:28
Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Certificate serial: 059B
Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/9095FC2CB2E811EBADBB3753C4F9AE02.roa
Signing time: Sat 14 Dec 2024 23:01:48 +0000
ROA not before: Sat 14 Dec 2024 23:01:48 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 133847
IP address blocks: 72.35.248.0/22 maxlen: 24
74.114.48.0/22 maxlen: 24
135.84.232.0/21 maxlen: 24
146.88.152.0/21 maxlen: 24
159.117.132.0/22 maxlen: 24
159.117.136.0/21 maxlen: 24
159.117.201.0/24 maxlen: 24
159.117.223.0/24 maxlen: 24
165.84.232.0/21 maxlen: 24
208.66.232.0/21 maxlen: 24
208.71.212.0/22 maxlen: 24
208.81.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1435 (0x59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B777C
Validity
Not Before: Dec 14 23:01:48 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675e0e5c-ac4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:80:46:3a:0d:8c:88:47:0e:73:a3:6d:a6:
b1:0c:a5:a3:ff:56:7b:c5:cc:62:7b:8c:82:d9:98:
ca:e6:20:19:c1:fd:66:ce:f4:ee:0d:3c:2e:9f:f1:
35:0d:24:2d:a7:e5:7a:96:cd:38:b3:2d:1d:80:28:
92:54:b2:50:d7:ea:77:a1:3f:47:93:f5:c5:a3:3f:
62:3e:f2:22:61:90:06:70:49:0e:42:b8:46:08:1d:
e7:de:fa:e9:7d:ba:60:e5:02:36:88:60:b3:39:6e:
74:5d:93:1a:db:0e:20:22:88:ef:d1:be:4e:21:c4:
9d:0a:0c:83:dc:b7:27:ad:72:05:ca:0c:57:13:dc:
ee:53:c5:ca:4d:be:63:d7:2c:e4:bb:ee:f7:48:fd:
2a:da:0f:e9:e7:98:8b:d7:dd:18:29:0b:59:54:f1:
34:37:07:c8:27:9b:60:b1:a9:be:16:f2:13:0f:6b:
93:a8:7c:44:22:e1:e2:0f:b7:52:83:52:6e:3b:8d:
93:8d:12:38:fb:19:b8:1f:c7:9a:c9:a5:01:3a:f2:
20:ba:26:f7:bf:b9:55:4c:9a:e2:60:4d:98:94:42:
12:04:9a:8f:3d:90:fe:9e:c3:e4:79:a0:69:fa:5f:
67:f3:f1:18:1b:03:ba:e6:48:79:34:c6:9d:60:9f:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AA:8C:84:2A:9B:00:1C:F5:36:D3:67:82:79:36:03:35:D2:35:28
X509v3 Authority Key Identifier:
keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/9095FC2CB2E811EBADBB3753C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
72.35.248.0/22
74.114.48.0/22
135.84.232.0/21
146.88.152.0/21
159.117.132.0-159.117.143.255
159.117.201.0/24
159.117.223.0/24
165.84.232.0/21
208.66.232.0/21
208.71.212.0/22
208.81.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ee:ec:cf:b0:cf:9f:96:d6:c9:63:97:eb:b9:ab:0a:93:11:
49:5d:49:7e:6b:69:3b:c2:e7:58:bf:ba:5c:ac:69:90:65:f2:
b4:23:a5:28:82:40:92:01:ab:2c:9d:c6:ab:1e:d4:10:da:76:
89:14:56:b9:e0:2b:b4:de:70:25:49:84:b6:98:7b:5f:32:04:
07:40:1c:88:56:33:aa:64:0a:38:1a:78:b8:b8:ec:3a:f2:e0:
e7:f5:7f:bb:7a:0d:99:71:cf:ab:ba:bb:5b:fb:ef:58:28:84:
32:47:7f:3f:a3:2d:2e:b9:3b:4f:75:73:ac:3e:de:d7:5c:df:
45:6e:8e:f9:50:73:02:e7:86:dc:43:43:64:67:4c:14:6a:e9:
05:da:37:3b:75:ff:08:da:c2:62:a0:4c:53:c2:96:3a:29:46:
a9:20:12:25:38:ab:2c:40:57:5b:d8:59:45:a9:15:f2:da:b7:
09:01:1f:b5:44:20:d0:1f:e1:10:61:47:83:8b:e4:ec:66:72:
ba:18:aa:cd:7c:83:16:39:f0:94:9d:51:cd:93:75:8d:61:f1:
cd:3f:be:9d:e1:da:40:63:54:62:9a:e5:b7:1d:3b:71:41:68:
a5:0c:65:b9:60:37:21:06:28:66:39:ac:d4:c1:81:a5:9e:7a:
c7:9f:3f:11
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3N0MxMTAvBgNVBAUTKEIwOTEwQjA3Qzg2QjBGRkEzMDBBNTJBQzdDMzFGQ0I1
MkMwNTMyRDcwHhcNMjQxMjE0MjMwMTQ4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzVlMGU1Yy1hYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy9mARjoNjIhHDnOjbaaxDKWj/1Z7xcxie4yC2ZjK5iAZwf1mzvTuDTwun/E1
DSQtp+V6ls04sy0dgCiSVLJQ1+p3oT9Hk/XFoz9iPvIiYZAGcEkOQrhGCB3n3vrp
fbpg5QI2iGCzOW50XZMa2w4gIojv0b5OIcSdCgyD3LcnrXIFygxXE9zuU8XKTb5j
1yzku+73SP0q2g/p55iL190YKQtZVPE0NwfIJ5tgsam+FvITD2uTqHxEIuHiD7dS
g1JuO42TjRI4+xm4H8eayaUBOvIguib3v7lVTJriYE2YlEISBJqPPZD+nsPkeaBp
+l9n8/EYGwO65kh5NMadYJ8EzQIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFAyqjIQq
mwAc9TbTZ4J5NgM10jUoMB8GA1UdIwQYMBaAFLCRCwfIaw/6MApSrHwx/LUsBTLX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82MkQwM0U4Q0Iy
REExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRfb3dDbEtzZkRIOHRTd0ZN
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3NKRUxCOGhyRF9vd0NsS3NmREg4dFN3Rk10Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjc3N0MvNjJEMDNFOENCMkRBMTFFQjhCMzg0QTYwQzRGOUFFMDIvOTA5NUZDMkNC
MkU4MTFFQkFEQkIzNzUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYwYIKwYBBQUHAQcBAf8E
VDBSMFAEAgABMEoDBAJII/gDBAJKcjADBAOHVOgDBAOSWJgwDAMEAp91hAMEBJ91
gAMEAJ91yQMEAJ913wMEA6VU6AMEA9BC6AMEAtBH1AMEAtBRdDANBgkqhkiG9w0B
AQsFAAOCAQEAO+7sz7DPn5bWyWOX67mrCpMRSV1JfmtpO8LnWL+6XKxpkGXytCOl
KIJAkgGrLJ3Gqx7UENp2iRRWueArtN5wJUmEtph7XzIEB0AciFYzqmQKOBp4uLjs
OvLg5/V/u3oNmXHPq7q7W/vvWCiEMkd/P6MtLrk7T3VzrD7e11zfRW6O+VBzAueG
3ENDZGdMFGrpBdo3O3X/CNrCYqBMU8KWOilGqSASJTirLEBXW9hZRakV8tq3CQEf
tUQg0B/hEGFHg4vk7GZyuhiqzXyDFjnwlJ1RzZN1jWHxzT++neHaQGNUYprltx07
cUFopQxluWA3IQYoZjms1MGBpZ56x58/EQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:36:38 2025 by rpki-client