
Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa
File: B4D9927A014E11EB9E13483FC4F9AE02.roa (raw, json)
Hash identifier: QBgYyEawhn1JXFywm9CFNs+9U5jAgMIpTHNoQrJwCB0=
Subject key identifier: C9:CB:78:CC:A4:90:43:0D:13:B7:29:77:44:D3:9F:3B:05:58:36:C1
Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial: 30F9
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa
Signing time: Tue 30 Apr 2024 15:52:41 +0000
ROA not before: Tue 30 Apr 2024 15:52:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 59.163.231.0/24 maxlen: 24
115.108.48.0/20 maxlen: 24
115.112.168.0/23 maxlen: 23
203.199.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12537 (0x30f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CE75
Validity
Not Before: Apr 30 15:52:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663113c9-f025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:43:41:04:94:54:6b:93:0f:b5:f9:e1:36:
96:76:64:91:ea:8a:e0:7e:3f:10:df:81:4a:b0:2d:
bb:7d:bd:90:35:62:c5:70:91:b1:fb:39:c9:a6:0d:
42:61:ed:65:3d:17:f3:27:65:05:1e:d9:09:95:ec:
a1:c7:f7:ec:25:4d:89:5d:bf:3b:77:42:41:a2:ad:
0f:75:66:85:1d:61:b7:aa:8e:7c:29:4a:1c:a9:58:
0a:2c:14:81:6d:45:8a:bd:25:76:5e:3a:76:af:49:
47:0b:cc:53:17:f9:2b:15:a6:e9:db:65:a6:8e:0b:
3f:00:09:08:39:54:24:e2:96:ed:c0:fb:12:03:2a:
06:e0:b8:d5:94:7e:96:90:38:9f:bb:8e:2f:ff:3a:
a3:b3:96:40:9e:54:9c:59:dc:56:ac:3d:5d:01:12:
65:c3:1b:fc:3e:c4:d6:b3:23:0d:22:9d:ab:0e:1d:
0c:80:9e:02:3d:33:ff:35:b5:e2:a4:4e:70:01:35:
c3:0a:d3:5a:3e:df:95:19:22:e5:d1:a2:02:22:e3:
c6:0e:11:47:15:de:3c:00:9c:dc:af:02:ca:aa:3f:
72:56:34:61:75:a8:30:a6:d7:16:48:e9:a5:7d:3d:
0f:c7:e5:fb:89:96:1c:31:a2:f5:7c:46:e5:17:34:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CB:78:CC:A4:90:43:0D:13:B7:29:77:44:D3:9F:3B:05:58:36:C1
X509v3 Authority Key Identifier:
keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.163.231.0/24
115.108.48.0/20
115.112.168.0/23
203.199.243.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7c:1c:e0:67:27:fe:30:cf:a2:cd:13:9f:e7:c6:cc:a7:9c:
3c:ca:ca:41:95:94:61:98:af:d5:2e:da:17:c6:42:7d:73:ac:
cd:31:e4:84:f1:4e:30:c2:9c:6b:19:ad:10:b2:5f:29:3a:84:
0a:5c:8c:7a:c5:25:1d:b0:f5:54:79:95:92:91:0d:bc:bd:71:
2e:b1:65:f0:dd:5f:6b:93:ed:cb:f1:08:73:21:1e:87:33:19:
b0:a8:fc:62:2f:bd:e2:ad:b8:41:68:f4:e5:62:3f:d5:76:6e:
47:f4:1a:1f:59:06:f1:bd:9b:39:62:14:1e:45:d7:3d:fc:13:
b5:b2:82:5d:1c:cf:a5:9f:3d:f7:c7:bb:97:5c:49:ff:07:88:
bc:7b:3e:7c:b2:f5:29:f0:7d:8c:ce:08:eb:6d:2d:25:37:0e:
d2:f8:34:94:99:d1:eb:74:c1:17:0a:29:85:50:d0:83:8a:61:
a7:99:d6:81:3f:9b:a7:4a:c6:6f:00:11:38:5c:d4:14:aa:74:
f9:02:1a:9f:31:75:d5:fb:1a:ef:a3:7d:b0:b1:18:ed:61:49:
93:ae:21:dc:cd:79:d7:46:12:8a:f3:0e:35:5a:1b:98:e9:dd:
00:6c:00:cc:ac:31:07:f7:18:59:7c:b2:e7:a3:1d:fb:3b:b1:
80:54:99:27
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICMPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjQwNDMwMTU1MjQxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjMxMTNjOS1mMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1DNDQQSUVGuTD7X54TaWdmSR6orgfj8Q34FKsC27fb2QNWLFcJGx+znJpg1C
Ye1lPRfzJ2UFHtkJleyhx/fsJU2JXb87d0JBoq0PdWaFHWG3qo58KUocqVgKLBSB
bUWKvSV2Xjp2r0lHC8xTF/krFabp22Wmjgs/AAkIOVQk4pbtwPsSAyoG4LjVlH6W
kDifu44v/zqjs5ZAnlScWdxWrD1dARJlwxv8PsTWsyMNIp2rDh0MgJ4CPTP/NbXi
pE5wATXDCtNaPt+VGSLl0aICIuPGDhFHFd48AJzcrwLKqj9yVjRhdagwptcWSOml
fT0Px+X7iZYcMaL1fEblFzQwVwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFMnLeMyk
kEMNE7cpd0TTnzsFWDbBMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvQjREOTkyN0Ew
MTRFMTFFQjlFMTM0ODNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBAA7o+cDBARzbDADBAFzcKgDBADLx/MwDQYJKoZIhvcNAQEL
BQADggEBAAJ8HOBnJ/4wz6LNE5/nxsynnDzKykGVlGGYr9Uu2hfGQn1zrM0x5ITx
TjDCnGsZrRCyXyk6hApcjHrFJR2w9VR5lZKRDby9cS6xZfDdX2uT7cvxCHMhHocz
GbCo/GIvveKtuEFo9OViP9V2bkf0Gh9ZBvG9mzliFB5F1z38E7Wygl0cz6WfPffH
u5dcSf8HiLx7Pnyy9SnwfYzOCOttLSU3DtL4NJSZ0et0wRcKKYVQ0IOKYaeZ1oE/
m6dKxm8AEThc1BSqdPkCGp8xddX7Gu+jfbCxGO1hSZOuIdzNeddGEorzDjVaG5jp
3QBsAMysMQf3GFl8suejHfs7sYBUmSc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:40:14 2025 by rpki-client