Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/5802E100BD1A11EFACD7C33CC4F9AE02.roa
File: 5802E100BD1A11EFACD7C33CC4F9AE02.roa (raw, json)
Hash identifier: djDFaCPYy5mYyTIxWAG/Kwi/pm16dtJzzBoXZ+73Gzg=
Subject key identifier: 97:B8:1F:C2:31:71:EB:DD:5A:4A:A5:E1:A9:FC:61:49:93:62:D8:8F
Certificate issuer: /CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
Certificate serial: 2558
Authority key identifier: 47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/5802E100BD1A11EFACD7C33CC4F9AE02.roa
Signing time: Wed 18 Dec 2024 08:30:32 +0000
ROA not before: Wed 18 Dec 2024 08:30:32 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 38235
IP address blocks: 118.67.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9560 (0x2558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B28
Validity
Not Before: Dec 18 08:30:32 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67628827-e473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:22:2d:6f:ce:a5:97:b3:37:8c:ec:d5:09:
a9:cf:26:ed:ca:f8:00:98:59:6b:50:fe:fb:ce:9f:
dc:73:5c:d8:67:f6:ca:a4:e4:c9:4f:8f:87:d1:bc:
40:51:5a:be:19:a2:31:09:b6:07:8e:12:2c:bf:05:
5e:58:4f:c6:5a:01:cc:62:eb:b2:b1:8a:05:94:9a:
21:44:82:88:0b:a5:03:56:28:a5:be:1d:fa:89:42:
41:09:82:37:82:72:86:6e:2b:a2:93:da:2c:7f:22:
8a:f0:7c:ab:9f:dc:21:ac:5b:6e:05:e7:36:77:94:
cb:44:fc:c3:75:7d:1f:44:be:84:fa:75:a6:e7:6f:
b5:95:d9:9b:0a:2f:72:a4:cf:42:07:5a:3c:e7:a6:
24:41:79:19:a6:f4:e1:72:41:68:59:c5:f1:d4:e8:
bb:01:f0:6e:43:ff:1b:fd:32:bb:dc:e6:39:80:e4:
e3:b4:20:63:e8:9a:90:8a:21:98:34:25:84:d3:c5:
c7:56:06:ce:4c:f4:28:04:aa:dd:d8:8c:c2:86:19:
a3:f3:b0:13:66:27:e3:69:65:fc:e5:42:b8:b3:8a:
0f:0c:aa:8e:31:cb:db:55:68:12:f3:20:7c:dd:1d:
df:92:6a:54:78:98:ab:6f:c9:f6:5d:27:9f:a7:ca:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B8:1F:C2:31:71:EB:DD:5A:4A:A5:E1:A9:FC:61:49:93:62:D8:8F
X509v3 Authority Key Identifier:
keyid:47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/5802E100BD1A11EFACD7C33CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.67.204.0/22
Signature Algorithm: sha256WithRSAEncryption
48:13:2e:8a:50:57:8f:0c:2c:eb:7a:84:4d:6d:6c:5c:fc:29:
b4:80:47:1a:ce:89:0e:7a:5f:4b:a8:58:27:88:2b:90:8d:0a:
5d:dd:5b:72:88:6c:2b:01:47:7a:8b:d9:1a:2e:b5:32:52:27:
19:78:2e:60:e4:e7:77:3b:59:ba:c8:eb:13:6f:46:46:13:63:
b9:ff:47:af:d1:47:83:f2:fd:7b:b4:03:5f:62:10:fb:54:08:
4e:39:30:73:63:33:f7:a8:fa:9b:d6:fc:9d:50:bc:13:5a:88:
ef:d8:e8:0e:06:3a:6a:02:cb:fe:e8:0c:41:2f:0e:76:a6:56:
f6:4f:83:20:be:de:55:43:de:ee:e6:44:b2:18:14:db:06:91:
4b:03:c7:06:70:35:1f:86:02:ba:b1:82:a9:07:3e:be:41:ca:
f5:85:ed:6b:e9:02:23:e1:35:be:71:4c:51:54:c2:78:c9:1e:
d5:34:9e:95:87:4e:60:05:43:7b:4e:89:55:e3:34:a6:c5:5a:
84:8c:0b:17:b9:57:33:5f:55:51:16:76:61:85:b2:43:12:5e:
32:7c:70:69:3c:b2:7f:ca:12:95:92:e3:de:43:f1:56:0d:74:
13:d9:df:ee:57:9c:a4:52:7f:b4:23:7f:cc:e9:3f:a9:17:4d:
93:f3:bd:21
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCMjgxMTAvBgNVBAUTKDQ3MTYwNjc4NUIzMkY0REYzRUM5NDNGMkE3ODdEQkEy
MTI2OTZFMUYwHhcNMjQxMjE4MDgzMDMyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzYyODgyNy1lNDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsE0iLW/OpZezN4zs1QmpzybtyvgAmFlrUP77zp/cc1zYZ/bKpOTJT4+H0bxA
UVq+GaIxCbYHjhIsvwVeWE/GWgHMYuuysYoFlJohRIKIC6UDViilvh36iUJBCYI3
gnKGbiuik9osfyKK8Hyrn9whrFtuBec2d5TLRPzDdX0fRL6E+nWm52+1ldmbCi9y
pM9CB1o856YkQXkZpvThckFoWcXx1Oi7AfBuQ/8b/TK73OY5gOTjtCBj6JqQiiGY
NCWE08XHVgbOTPQoBKrd2IzChhmj87ATZifjaWX85UK4s4oPDKqOMcvbVWgS8yB8
3R3fkmpUeJirb8n2XSefp8q97wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJe4H8Ix
cevdWkql4an8YUmTYtiPMB8GA1UdIwQYMBaAFEcWBnhbMvTfPslD8qeH26ISaW4f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkIyOC9GQUVGOENCRTEz
NDMxMUU1OTZGNTQwMUVDNEY5QUUwMi9SeFlHZUZzeTlOOC15VVB5cDRmYm9oSnBi
aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J4WUdlRnN5OU44LXlVUHlwNGZib2hKcGJoOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZCMjgvRkFFRjhDQkUxMzQzMTFFNTk2RjU0MDFFQzRGOUFFMDIvNTgwMkUxMDBC
RDFBMTFFRkFDRDdDMzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJ2Q8wwDQYJKoZIhvcNAQELBQADggEBAEgTLopQV48MLOt6
hE1tbFz8KbSARxrOiQ56X0uoWCeIK5CNCl3dW3KIbCsBR3qL2RoutTJSJxl4LmDk
53c7WbrI6xNvRkYTY7n/R6/RR4Py/Xu0A19iEPtUCE45MHNjM/eo+pvW/J1QvBNa
iO/Y6A4GOmoCy/7oDEEvDnamVvZPgyC+3lVD3u7mRLIYFNsGkUsDxwZwNR+GArqx
gqkHPr5ByvWF7WvpAiPhNb5xTFFUwnjJHtU0npWHTmAFQ3tOiVXjNKbFWoSMCxe5
VzNfVVEWdmGFskMSXjJ8cGk8sn/KEpWS495D8VYNdBPZ3+5XnKRSf7Qjf8zpP6kX
TZPzvSE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:27 2025 by rpki-client