Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa
File: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (raw, json)
Hash identifier: JZiy70V+Bcf03i2tcs+Ua+Qtqt3kQ8NXwzZu/36baBg=
Subject key identifier: D3:69:52:43:3B:2F:CC:D3:5F:E4:72:B5:45:99:22:EE:45:9B:00:0E
Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Certificate serial: 02
Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa
Signing time: Thu 13 Feb 2025 09:24:53 +0000
ROA not before: Thu 13 Feb 2025 09:24:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4764
IP address blocks: 203.56.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4D54
Validity
Not Before: Feb 13 09:24:53 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67adba65-6d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:04:d3:52:90:00:ca:de:5b:82:e2:95:a1:
68:73:f3:22:6c:ce:21:24:c8:dc:47:b9:92:0d:87:
30:1d:6b:53:b1:e6:55:25:2a:f5:1a:0e:76:01:35:
43:4d:a6:46:e4:e4:75:ca:a8:4f:11:d8:a6:96:bc:
48:6a:bb:ea:53:f7:71:f2:59:4f:3c:28:35:ba:d9:
e3:6e:ba:3d:8a:00:a9:b2:7a:e5:b5:7e:89:a7:fb:
40:c7:e3:53:dd:a6:f3:7b:5f:2c:a5:d6:ad:c9:db:
88:8e:72:68:fd:86:3d:a4:17:57:94:15:20:56:36:
d5:1b:21:ed:db:95:50:18:05:6f:c0:ef:c1:c2:b2:
a0:2d:94:ff:ce:64:9a:19:6c:ca:b6:6e:57:f2:53:
28:e6:63:ac:77:e0:5a:75:ba:f7:d9:80:97:36:69:
a9:33:99:52:0d:e0:4d:0c:d7:ad:df:68:56:f4:83:
eb:12:a4:a5:cc:83:d8:1b:ba:3a:36:f7:0f:29:08:
99:89:54:4b:a5:d2:e2:b4:b0:dc:01:5e:15:b6:f1:
c3:80:fd:c4:a6:76:89:f3:e3:33:5c:62:28:56:27:
7c:24:62:06:2f:92:01:08:61:e6:80:b5:e6:61:bb:
47:c8:11:e7:cc:fb:ba:52:e9:f1:18:23:38:42:9b:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:69:52:43:3B:2F:CC:D3:5F:E4:72:B5:45:99:22:EE:45:9B:00:0E
X509v3 Authority Key Identifier:
keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.56.226.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:68:f5:1c:9b:73:46:b9:37:ec:93:b0:c9:40:20:ac:f6:bc:
28:37:bb:56:be:ed:db:d9:7b:0f:de:d0:28:b7:d3:86:8e:55:
71:00:09:20:89:c5:5a:3f:49:aa:73:ba:1d:4a:c4:40:74:37:
58:a2:de:61:cf:6c:18:7c:b1:33:de:7f:a5:bd:43:fb:31:f5:
86:9e:c0:15:82:e8:b6:2c:3a:e6:7a:ee:eb:9b:69:47:6b:82:
74:b4:de:cb:48:b3:be:ad:95:7b:f4:6a:8f:68:0d:4f:a9:1b:
20:7d:60:dd:a0:60:fd:ba:d7:e6:9d:71:b4:eb:83:23:8d:b8:
22:66:c1:c5:60:02:37:06:57:b1:8c:1a:dd:55:11:66:26:ac:
ef:44:11:01:85:63:28:f7:92:91:71:d9:30:8d:fc:77:c9:f9:
64:d8:c3:db:b1:3e:94:0d:54:52:cc:e8:00:58:f4:fe:34:7a:
66:9b:53:0f:89:ac:5c:c8:db:be:4d:58:00:2f:81:2f:c3:0a:
a9:a0:ec:2a:fd:09:77:69:34:fc:eb:c0:b0:ed:69:fb:ee:be:
9f:e0:83:fc:67:f7:48:1e:13:8a:65:0a:98:1b:1f:0b:3f:c0:
90:9a:27:90:18:0f:9e:ee:d6:78:b0:69:07:df:a8:8d:bd:60:
88:b3:a0:98
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NEQ1NDExMC8GA1UEBRMoQUY3NjEyNTdERTJDOURBNUYzM0U3MUM2NDE5RTI2N0E4
NjJERkI2MjAeFw0yNTAyMTMwOTI0NTNaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3YWRiYTY1LTZkNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGngTTUpAAyt5bguKVoWhz8yJsziEkyNxHuZINhzAda1Ox5lUlKvUaDnYBNUNN
pkbk5HXKqE8R2KaWvEhqu+pT93HyWU88KDW62eNuuj2KAKmyeuW1fomn+0DH41Pd
pvN7Xyyl1q3J24iOcmj9hj2kF1eUFSBWNtUbIe3blVAYBW/A78HCsqAtlP/OZJoZ
bMq2blfyUyjmY6x34Fp1uvfZgJc2aakzmVIN4E0M163faFb0g+sSpKXMg9gbujo2
9w8pCJmJVEul0uK0sNwBXhW28cOA/cSmdonz4zNcYihWJ3wkYgYvkgEIYeaAteZh
u0fIEefM+7pS6fEYIzhCm5XpAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU02lSQzsv
zNNf5HK1RZki7kWbAA4wHwYDVR0jBBgwFoAUr3YSV94snaXzPnHGQZ4meoYt+2Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0RDU0L0QyODc3REI2RTlF
QjExRUZBNDU0MkIxOEM0RjlBRTAyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0y
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcjNZU1Y5NHNuYVh6UG5IR1FaNG1lb1l0LTJJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEQ1NC9EMjg3N0RCNkU5RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi82MUFBRkNDQUU5
RUMxMUVGQjZENkQyMUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMs44jANBgkqhkiG9w0BAQsFAAOCAQEAvGj1HJtzRrk37JOw
yUAgrPa8KDe7Vr7t29l7D97QKLfTho5VcQAJIInFWj9JqnO6HUrEQHQ3WKLeYc9s
GHyxM95/pb1D+zH1hp7AFYLotiw65nru65tpR2uCdLTey0izvq2Ve/Rqj2gNT6kb
IH1g3aBg/brX5p1xtOuDI424ImbBxWACNwZXsYwa3VURZias70QRAYVjKPeSkXHZ
MI38d8n5ZNjD27E+lA1UUszoAFj0/jR6ZptTD4msXMjbvk1YAC+BL8MKqaDsKv0J
d2k0/OvAsO1p++6+n+CD/Gf3SB4TimUKmBsfCz/AkJonkBgPnu7WeLBpB9+ojb1g
iLOgmA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:32:50 2025 by rpki-client