Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/1D6F108A00D511ED9262EB53C4F9AE02.roa
File: 1D6F108A00D511ED9262EB53C4F9AE02.roa (raw, json)
Hash identifier: ER+mxMq7fWPop6Mh+I1B9cH//3Uv1rN8D8hXzTSIngw=
Subject key identifier: C3:24:A0:F8:A2:30:28:AB:80:CB:B5:C8:37:A9:A5:24:47:E8:2E:E4
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 0554
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/1D6F108A00D511ED9262EB53C4F9AE02.roa
Signing time: Tue 03 Sep 2024 01:15:31 +0000
ROA not before: Tue 03 Sep 2024 01:15:31 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 45807
IP address blocks: 110.164.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561
Validity
Not Before: Sep 3 01:15:31 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d66333-1d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:6b:ff:85:47:be:4f:41:c6:9c:f3:fa:29:
ed:fd:55:35:ca:22:f3:bb:57:42:49:d3:c2:7a:de:
4b:92:0e:9c:2f:3c:34:a9:8c:3b:1c:b0:4c:d8:2b:
33:f7:39:45:4b:aa:c7:76:34:0e:f7:bf:d9:b6:65:
38:b1:1c:25:12:6a:26:03:f6:1a:b1:9e:52:dd:d1:
5f:23:9f:78:0d:c5:6b:22:07:63:d5:ed:2b:26:87:
39:bb:b4:c5:16:5c:9e:11:24:32:e0:af:ef:aa:d4:
ec:da:c8:65:fa:2e:ac:ed:f3:3e:0b:13:e1:99:9f:
25:c6:fc:74:6e:1e:19:62:3c:3c:6e:ac:6c:f8:3c:
1f:a6:5b:6b:82:a0:57:65:95:6d:a1:67:ef:9c:1b:
96:ca:b2:7e:94:93:71:ae:d4:2e:54:ee:01:15:7d:
0a:14:98:d3:6e:38:68:44:3a:76:97:97:2e:0d:73:
d1:53:15:7b:16:f2:69:28:73:70:9a:6a:5a:1a:7f:
e6:40:a7:f0:cd:87:4f:da:35:6e:ed:f4:fe:c7:9e:
83:9d:9a:fd:48:32:8d:98:fd:63:6e:33:b7:0f:20:
de:dd:d3:81:23:76:f5:37:b9:da:2a:a0:cd:f5:03:
1a:2a:80:de:91:7f:db:10:37:0e:1b:dd:73:9d:0c:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:24:A0:F8:A2:30:28:AB:80:CB:B5:C8:37:A9:A5:24:47:E8:2E:E4
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/1D6F108A00D511ED9262EB53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a6:aa:c8:5c:8e:ed:76:51:14:36:9b:79:7c:ef:62:d4:ab:
9d:18:50:5b:a0:84:ec:f8:62:22:1a:21:d0:8e:aa:2b:80:6d:
3a:76:73:bd:15:c4:eb:92:fd:12:85:83:ea:e9:c5:e4:be:91:
07:93:79:54:2d:8a:09:37:07:aa:bc:71:35:9a:54:14:31:57:
2a:48:a7:d2:fa:c0:ff:45:7f:8f:0c:35:f1:2f:58:2b:11:ee:
13:ea:13:dd:5e:e7:b1:dd:15:49:9f:c0:06:7d:05:79:32:bf:
74:5f:54:16:87:bb:7c:f6:3a:c3:a2:a0:1e:20:27:3d:ad:01:
51:d7:2f:1a:ad:02:8e:8a:46:7b:00:7e:d7:b7:25:ec:ff:f0:
0a:2a:6f:e9:30:d1:90:27:74:8c:a8:55:cc:f4:c2:5a:52:c1:
c6:11:28:ee:d5:a3:21:36:f9:c5:d1:72:16:a9:07:5d:c9:9b:
a6:e4:91:64:7e:d1:c4:05:6e:2f:04:3a:36:10:e6:d3:2f:07:
46:56:ae:f2:af:56:8c:94:a8:67:d1:4c:c6:80:87:81:8e:e9:
ab:66:64:67:d8:fb:ca:ad:0b:0e:85:21:38:dc:f3:3d:e2:62:
21:d3:e6:c6:8b:0a:8d:79:81:e2:f2:3f:5c:a2:37:06:69:78:
8e:ac:68:d2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE
RDhDRUNEMDQwHhcNMjQwOTAzMDExNTMxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ2NjMzMy0xZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1iBr/4VHvk9Bxpzz+int/VU1yiLzu1dCSdPCet5Lkg6cLzw0qYw7HLBM2Csz
9zlFS6rHdjQO97/ZtmU4sRwlEmomA/YasZ5S3dFfI594DcVrIgdj1e0rJoc5u7TF
FlyeESQy4K/vqtTs2shl+i6s7fM+CxPhmZ8lxvx0bh4ZYjw8bqxs+DwfpltrgqBX
ZZVtoWfvnBuWyrJ+lJNxrtQuVO4BFX0KFJjTbjhoRDp2l5cuDXPRUxV7FvJpKHNw
mmpaGn/mQKfwzYdP2jVu7fT+x56DnZr9SDKNmP1jbjO3DyDe3dOBI3b1N7naKqDN
9QMaKoDekX/bEDcOG91znQzOgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMMkoPii
MCirgMu1yDeppSRH6C7kMB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1
NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvMUQ2RjEwOEEw
MEQ1MTFFRDkyNjJFQjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABupI8wDQYJKoZIhvcNAQELBQADggEBABymqshcju12URQ2
m3l872LUq50YUFughOz4YiIaIdCOqiuAbTp2c70VxOuS/RKFg+rpxeS+kQeTeVQt
igk3B6q8cTWaVBQxVypIp9L6wP9Ff48MNfEvWCsR7hPqE91e57HdFUmfwAZ9BXky
v3RfVBaHu3z2OsOioB4gJz2tAVHXLxqtAo6KRnsAfte3Jez/8Aoqb+kw0ZAndIyo
Vcz0wlpSwcYRKO7VoyE2+cXRchapB13Jm6bkkWR+0cQFbi8EOjYQ5tMvB0ZWrvKv
VoyUqGfRTMaAh4GO6atmZGfY+8qtCw6FITjc8z3iYiHT5saLCo15geLyP1yiNwZp
eI6saNI=
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:15:06 2025 by rpki-client