Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/C45188B8554D11EBA9D33130C4F9AE02.roa
File: C45188B8554D11EBA9D33130C4F9AE02.roa (raw, json)
Hash identifier: oaZwV6VdiAWhU8LpCHEa1Wy0xGXTkB3v4AFCD4GLNIA=
Subject key identifier: 46:CD:81:87:68:62:45:7A:AC:2C:EE:1E:F3:C6:2E:1C:F7:9F:44:49
Certificate issuer: /CN=A91BB31B/serialNumber=27C5BE05E9FC30B312A069102DFEAF8EA75EF744
Certificate serial: 05FB
Authority key identifier: 27:C5:BE:05:E9:FC:30:B3:12:A0:69:10:2D:FE:AF:8E:A7:5E:F7:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8W-Ben8MLMSoGkQLf6vjqde90Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/C45188B8554D11EBA9D33130C4F9AE02.roa
Signing time: Sat 23 Mar 2024 00:02:28 +0000
ROA not before: Sat 23 Mar 2024 00:02:28 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 9381
IP address blocks: 45.120.168.0/22 maxlen: 24
103.6.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1531 (0x5fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB31B
Validity
Not Before: Mar 23 00:02:28 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65fe1c13-0239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:90:32:e0:d8:e5:9d:81:72:bf:dc:db:1e:
ca:77:ef:fc:c9:33:55:29:22:51:96:c1:f8:ef:c6:
e8:be:60:f0:77:a1:87:99:ce:bb:34:c1:38:ad:ca:
38:27:9d:8e:95:82:e2:79:02:8e:01:99:20:56:32:
ce:53:f9:13:30:59:c8:a4:e9:1f:4d:3a:f9:ab:6e:
14:9b:e7:94:18:46:5d:f8:7a:88:38:b2:9b:b4:14:
55:ce:db:4a:11:96:ec:60:24:da:9f:36:ca:e5:96:
b0:9c:9e:0c:31:88:24:ca:0e:2c:ba:50:17:f4:dd:
4f:96:fa:40:7c:80:58:b0:47:42:96:26:f5:7a:7d:
56:91:70:b8:aa:46:2f:f9:9e:73:44:47:c0:a7:7d:
c2:79:7b:7a:e0:37:86:62:64:2c:ea:ea:c8:dc:39:
1f:b2:f6:27:a9:09:2c:b7:d6:dd:bb:21:14:db:47:
42:4d:b6:be:be:a2:24:78:9b:ed:6d:e5:95:62:fb:
32:1b:87:b0:8a:ae:58:a0:d6:5c:4c:9a:cd:22:09:
f3:ac:86:af:9f:fb:d6:8d:77:5e:98:9f:dd:f3:ad:
ca:13:e9:25:3e:99:b7:17:c4:93:65:71:dd:2a:18:
6c:9f:2e:bc:4a:7d:19:37:dd:b9:4f:4c:16:28:52:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:81:87:68:62:45:7A:AC:2C:EE:1E:F3:C6:2E:1C:F7:9F:44:49
X509v3 Authority Key Identifier:
keyid:27:C5:BE:05:E9:FC:30:B3:12:A0:69:10:2D:FE:AF:8E:A7:5E:F7:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8W-Ben8MLMSoGkQLf6vjqde90Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/C45188B8554D11EBA9D33130C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.120.168.0/22
103.6.152.0/22
Signature Algorithm: sha256WithRSAEncryption
23:2e:0e:c0:e9:dc:2e:ea:3c:48:41:b5:09:34:7c:d0:c5:7a:
4e:07:0d:88:51:42:19:3d:5c:9e:5c:e6:22:36:9a:fc:a7:f4:
3c:09:60:62:00:6a:8e:45:39:7e:92:31:bb:b5:31:dd:38:5f:
a7:19:77:86:31:b8:a6:d6:87:b2:c3:d5:4b:1a:a1:38:3e:47:
8c:d0:a5:61:d9:42:e4:10:2d:a8:a2:af:2e:a2:23:f9:77:f7:
c5:d9:33:dd:4a:c6:df:68:e3:83:91:41:7d:75:3d:d9:79:50:
db:00:c1:34:15:cf:43:9f:60:2c:fe:6e:a9:db:71:cd:23:bc:
c6:8c:e6:05:38:15:f8:8f:db:99:45:0e:1d:65:eb:cc:e0:20:
bf:09:5a:23:ed:21:58:37:1c:61:40:93:4e:5d:8f:b4:5d:fb:
40:bc:ca:97:9d:f3:dd:16:ed:04:24:c7:55:ac:34:9e:7e:37:
7f:f3:63:c0:3d:1b:03:50:42:fc:00:2c:4f:88:76:79:40:e1:
8c:40:c5:27:1f:62:d7:6a:e8:37:61:9f:52:4c:69:ae:2f:45:
f0:e9:63:1f:06:fe:93:7b:05:67:8e:12:c2:66:fb:df:9e:95:
af:8d:b3:9b:92:9d:6c:6d:8c:09:3c:e9:6a:0b:bb:fd:f5:3a:
b3:c6:10:fd
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIzMUIxMTAvBgNVBAUTKDI3QzVCRTA1RTlGQzMwQjMxMkEwNjkxMDJERkVBRjhF
QTc1RUY3NDQwHhcNMjQwMzIzMDAwMjI4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NWZlMWMxMy0wMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxqWQMuDY5Z2Bcr/c2x7Kd+/8yTNVKSJRlsH478bovmDwd6GHmc67NME4rco4
J52OlYLieQKOAZkgVjLOU/kTMFnIpOkfTTr5q24Um+eUGEZd+HqIOLKbtBRVzttK
EZbsYCTanzbK5ZawnJ4MMYgkyg4sulAX9N1PlvpAfIBYsEdClib1en1WkXC4qkYv
+Z5zREfAp33CeXt64DeGYmQs6urI3DkfsvYnqQkst9bduyEU20dCTba+vqIkeJvt
beWVYvsyG4ewiq5YoNZcTJrNIgnzrIavn/vWjXdemJ/d863KE+klPpm3F8STZXHd
Khhsny68Sn0ZN925T0wWKFLBwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEbNgYdo
YkV6rCzuHvPGLhz3n0RJMB8GA1UdIwQYMBaAFCfFvgXp/DCzEqBpEC3+r46nXvdE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjMxQi83NTUyMDhEQzU1
M0UxMUVCOTE4N0Y0NzhDNEY5QUUwMi9KOFctQmVuOE1MTVNvR2tRTGY2dmpxZGU5
MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o4Vy1CZW44TUxNU29Ha1FMZjZ2anFkZTkwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkIzMUIvNzU1MjA4REM1NTNFMTFFQjkxODdGNDc4QzRGOUFFMDIvQzQ1MTg4Qjg1
NTREMTFFQkE5RDMzMTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIteKgDBAJnBpgwDQYJKoZIhvcNAQELBQADggEBACMuDsDp
3C7qPEhBtQk0fNDFek4HDYhRQhk9XJ5c5iI2mvyn9DwJYGIAao5FOX6SMbu1Md04
X6cZd4YxuKbWh7LD1UsaoTg+R4zQpWHZQuQQLaiiry6iI/l398XZM91Kxt9o44OR
QX11Pdl5UNsAwTQVz0OfYCz+bqnbcc0jvMaM5gU4FfiP25lFDh1l68zgIL8JWiPt
IVg3HGFAk05dj7Rd+0C8yped890W7QQkx1WsNJ5+N3/zY8A9GwNQQvwALE+IdnlA
4YxAxScfYtdq6Ddhn1JMaa4vRfDpYx8G/pN7BWeOEsJm+9+ela+Ns5uSnWxtjAk8
6WoLu/31OrPGEP0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:46 2025 by rpki-client