Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/9B8A0A56F56F11EF84317935C4F9AE02.roa
File: 9B8A0A56F56F11EF84317935C4F9AE02.roa (raw, json)
Hash identifier: 0bWlqpDV1jdZ32UUmwWBU46n0Ec3stYEb8RHblnMIUE=
Subject key identifier: 0B:7C:68:03:58:31:7F:92:66:9A:CF:46:AE:BD:49:FB:04:CA:FF:FB
Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial: 0343
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/9B8A0A56F56F11EF84317935C4F9AE02.roa
Signing time: Fri 28 Feb 2025 01:01:57 +0000
ROA not before: Fri 28 Feb 2025 01:01:57 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 55850
IP address blocks: 14.137.0.0/19 maxlen: 19
101.53.192.0/19 maxlen: 19
101.53.208.0/21 maxlen: 21
101.53.216.0/22 maxlen: 22
101.53.220.0/22 maxlen: 23
103.8.140.0/22 maxlen: 22
103.15.126.0/23 maxlen: 23
103.26.202.0/24 maxlen: 24
103.173.251.0/24 maxlen: 24
103.241.56.0/22 maxlen: 22
115.69.160.0/19 maxlen: 19
116.251.128.0/18 maxlen: 18
116.251.192.0/21 maxlen: 21
116.251.200.0/22 maxlen: 22
124.155.224.0/20 maxlen: 20
150.107.172.0/22 maxlen: 22
163.47.236.0/22 maxlen: 22
180.148.96.0/19 maxlen: 19
202.56.32.0/20 maxlen: 20
202.56.48.0/21 maxlen: 21
202.74.33.0/24 maxlen: 24
202.137.240.0/21 maxlen: 21
203.94.32.0/19 maxlen: 19
203.124.16.0/21 maxlen: 21
2401:2f40::/32 maxlen: 32
2406:5a00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835 (0x343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269
Validity
Not Before: Feb 28 01:01:57 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67c10b05-0644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:f0:0f:53:c6:77:20:c9:14:43:6f:56:80:
5b:bc:aa:03:73:d9:09:d4:26:33:4c:b6:c1:47:43:
d2:26:af:8e:c6:24:61:ce:fe:0c:62:80:2e:90:5b:
aa:e7:54:15:48:bd:9f:2e:ce:1e:40:e8:7e:38:0c:
ab:91:5d:03:c9:ef:bb:de:ff:6e:f3:f6:6a:5f:08:
9b:45:18:1c:aa:6b:cd:bf:d0:42:ba:cd:45:98:e9:
94:25:60:4c:e2:60:96:66:40:4c:9e:f8:f7:1a:3d:
79:63:39:37:9e:06:6d:4e:bf:ae:7c:ec:8d:ac:04:
d4:dc:07:81:95:76:03:76:d8:25:b6:05:c9:8a:75:
1d:ff:66:ce:5e:f0:0b:08:be:80:1d:b7:ce:5f:e2:
70:ff:6d:0c:74:b9:cb:45:bc:5b:38:91:54:82:69:
f5:56:06:5a:4a:7e:68:df:14:f7:38:1b:80:a7:99:
73:61:2c:c1:f6:a5:90:f6:86:5f:ab:46:d3:50:83:
94:91:a2:4b:1b:c7:90:83:fa:8e:57:cd:17:a6:8d:
96:8f:7e:55:9a:83:0c:6d:7c:ff:d5:44:3b:10:8b:
74:fb:71:6f:40:43:a2:d5:3c:ec:35:f9:9a:2d:c5:
42:d2:3d:67:9d:91:03:39:78:9a:07:4a:65:a1:07:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7C:68:03:58:31:7F:92:66:9A:CF:46:AE:BD:49:FB:04:CA:FF:FB
X509v3 Authority Key Identifier:
keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/9B8A0A56F56F11EF84317935C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.0.0/19
101.53.192.0/19
103.8.140.0/22
103.15.126.0/23
103.26.202.0/24
103.173.251.0/24
103.241.56.0/22
115.69.160.0/19
116.251.128.0-116.251.203.255
124.155.224.0/20
150.107.172.0/22
163.47.236.0/22
180.148.96.0/19
202.56.32.0-202.56.55.255
202.74.33.0/24
202.137.240.0/21
203.94.32.0/19
203.124.16.0/21
IPv6:
2401:2f40::/32
2406:5a00::/32
Signature Algorithm: sha256WithRSAEncryption
c6:a3:c0:c2:73:a7:39:d1:29:77:08:c6:27:c9:c9:b5:f6:b1:
80:00:e6:73:2f:7e:37:2f:aa:41:95:29:75:10:16:52:d8:d9:
5b:a6:15:ad:60:e7:92:04:cc:0d:76:be:0f:fd:b5:fa:7a:93:
9e:1a:d7:64:1f:1a:f3:5f:e8:2d:da:ba:3c:77:c2:ba:9b:92:
6d:11:9d:95:f4:ca:33:e9:7c:f1:dc:09:66:cc:c4:eb:1b:a6:
96:6b:40:ad:c3:af:f8:10:9a:a5:59:d5:23:3d:09:15:c0:7b:
ea:ae:48:53:b8:a6:0f:37:e3:6f:9d:fe:1d:10:1e:da:c2:f8:
d1:fb:cc:00:fb:de:f8:22:98:96:64:d3:a9:46:1f:4b:4c:f1:
bf:72:25:5f:bf:ca:ab:53:36:4c:59:06:00:ac:e1:60:9c:12:
4e:c3:a2:4c:35:d4:71:74:85:82:37:00:6a:6b:62:d4:45:05:
ed:b2:48:ae:a1:8c:18:9b:af:4f:33:56:9a:0e:fe:39:60:6e:
dc:77:97:74:9d:69:d4:c0:ad:49:69:d0:09:7b:3c:ad:36:90:
4a:8e:c2:63:87:40:a1:4d:02:3a:30:5e:8a:f6:35:ba:6b:4d:
c6:e5:d7:3b:8d:24:69:b8:29:8c:f0:97:e2:bd:be:9a:10:02:
bf:24:41:4c
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMyNjkxMTAvBgNVBAUTKDMwRTIwNjFGN0MyMEJEODQzQkVFNTM3MkMxMzIxQzM1
RkJCMUQzRUYwHhcNMjUwMjI4MDEwMTU3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2MxMGIwNS0wNjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsRrwD1PGdyDJFENvVoBbvKoDc9kJ1CYzTLbBR0PSJq+OxiRhzv4MYoAukFuq
51QVSL2fLs4eQOh+OAyrkV0Dye+73v9u8/ZqXwibRRgcqmvNv9BCus1FmOmUJWBM
4mCWZkBMnvj3Gj15Yzk3ngZtTr+ufOyNrATU3AeBlXYDdtgltgXJinUd/2bOXvAL
CL6AHbfOX+Jw/20MdLnLRbxbOJFUgmn1VgZaSn5o3xT3OBuAp5lzYSzB9qWQ9oZf
q0bTUIOUkaJLG8eQg/qOV80Xpo2Wj35VmoMMbXz/1UQ7EIt0+3FvQEOi1TzsNfma
LcVC0j1nnZEDOXiaB0ploQdWdwIDAQABo4IDJTCCAyEwHQYDVR0OBBYEFAt8aANY
MX+SZprPRq69SfsEyv/7MB8GA1UdIwQYMBaAFDDiBh98IL2EO+5TcsEyHDX7sdPv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CQTY3NkUzMENG
RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9NT0lHSDN3Z3ZZUTc3bE55d1RJY05mdXgw
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PSUdIM3dndllRNzdsTnl3VEljTmZ1eDAtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkMyNjkvQkE2NzZFMzBDRkU1MTFFQzk0QkJDNzVBQzRGOUFFMDIvOUI4QTBBNTZG
NTZGMTFFRjg0MzE3OTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwga4GCCsGAQUFBwEHAQH/
BIGeMIGbMIGCBAIAATB8AwQFDokAAwQFZTXAAwQCZwiMAwQBZw9+AwQAZxrKAwQA
Z637AwQCZ/E4AwQFc0WgMAwDBAd0+4ADBAJ0+8gDBAR8m+ADBAKWa6wDBAKjL+wD
BAW0lGAwDAMEBco4IAMEA8o4MAMEAMpKIQMEA8qJ8AMEBcteIAMEA8t8EDAUBAIA
AjAOAwUAJAEvQAMFACQGWgAwDQYJKoZIhvcNAQELBQADggEBAMajwMJzpznRKXcI
xifJybX2sYAA5nMvfjcvqkGVKXUQFlLY2VumFa1g55IEzA12vg/9tfp6k54a12Qf
GvNf6C3aujx3wrqbkm0RnZX0yjPpfPHcCWbMxOsbppZrQK3Dr/gQmqVZ1SM9CRXA
e+quSFO4pg8342+d/h0QHtrC+NH7zAD73vgimJZk06lGH0tM8b9yJV+/yqtTNkxZ
BgCs4WCcEk7Dokw11HF0hYI3AGprYtRFBe2ySK6hjBibr08zVpoO/jlgbtx3l3Sd
adTArUlp0Al7PK02kEqOwmOHQKFNAjowXor2NbprTcbl1zuNJGm4KYzwl+K9vpoQ
Ar8kQUw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:00 2025 by rpki-client