Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/4793567206A211EEBDA4D34BC4F9AE02.roa
File: 4793567206A211EEBDA4D34BC4F9AE02.roa (raw, json)
Hash identifier: 0y1umhcXrzwIQDnq4Cka+2E+MR7Gy+fTGy43hos8bno=
Subject key identifier: B4:16:92:FD:D8:6E:29:B3:C2:3B:EE:5B:D2:A5:63:EB:A7:AB:57:D3
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 04AF
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/4793567206A211EEBDA4D34BC4F9AE02.roa
Signing time: Fri 26 Apr 2024 21:10:02 +0000
ROA not before: Fri 26 Apr 2024 21:10:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3258
IP address blocks: 85.113.70.0/24 maxlen: 24
91.199.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1199 (0x4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8
Validity
Not Before: Apr 26 21:10:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662c182a-b349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:3c:85:e5:bd:d6:8b:b1:93:59:1d:7f:33:
e8:84:bf:fb:9f:fd:dd:09:be:ab:7f:10:9c:95:f5:
0f:38:43:7e:55:bf:22:ea:6c:5e:1d:58:71:8e:f9:
a2:87:56:c5:0a:79:e7:6b:a3:d3:98:cf:bf:b8:ba:
d9:94:36:a4:14:e0:f7:23:e2:86:ed:27:2e:e5:b9:
e5:67:9a:57:bc:fe:d7:1c:62:02:de:76:35:cf:67:
0b:44:a8:9b:2d:fa:7b:78:be:c4:3f:3f:87:c7:29:
a3:3c:35:ee:51:c7:c3:d0:1b:13:91:b9:aa:e9:ee:
d6:2c:5d:19:8d:c8:83:3e:64:f6:dc:de:ac:42:bb:
c1:05:50:f3:1c:61:e3:e2:1e:aa:2f:1c:72:8d:d8:
1d:8f:a1:53:07:dd:77:1e:c7:c6:4b:96:fe:61:39:
ab:93:a7:90:3a:b4:86:3d:c9:c2:9f:5c:d5:40:e0:
5b:a4:5b:d7:55:1c:2d:4a:0c:71:6c:3e:e7:ad:2a:
b9:3c:5d:9e:82:d8:89:c5:17:ab:7e:94:df:3b:33:
1d:88:73:d2:f4:00:68:52:66:3a:be:f8:d9:44:74:
a0:b7:f7:a7:b6:a6:05:46:17:73:67:cd:64:35:d1:
cc:fe:8d:6c:68:50:5c:29:42:21:01:7b:91:a3:50:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:16:92:FD:D8:6E:29:B3:C2:3B:EE:5B:D2:A5:63:EB:A7:AB:57:D3
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/4793567206A211EEBDA4D34BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
85.113.70.0/24
91.199.209.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b6:23:ec:f3:c3:b1:85:e3:34:46:f0:f2:19:0e:ed:78:0f:
81:5f:3b:24:74:15:f0:15:23:6f:29:ae:ea:a7:c2:86:ba:f6:
89:8d:56:46:02:86:fd:3c:cc:b1:c1:e4:49:ac:cc:f1:b7:83:
70:c4:fa:1c:4d:c2:68:dc:cf:43:e6:ff:f7:09:95:62:19:da:
c0:c7:01:75:2c:7d:16:b5:17:0e:e0:d8:85:10:f9:56:97:30:
17:b9:ca:78:a5:40:2c:30:40:ff:cd:38:7d:10:54:4e:b7:f7:
30:8c:c8:90:85:94:ce:20:c3:e9:8b:2d:3d:58:62:64:ce:92:
7b:89:d1:30:c6:09:eb:f1:24:25:2f:fa:37:48:0c:dc:ea:bf:
19:e9:fc:21:83:c4:44:a9:9e:d3:a8:cc:6b:70:41:00:b0:75:
1c:38:c3:2b:ce:07:06:f8:c0:37:cb:c3:8b:f6:5a:e1:89:30:
b9:36:24:c5:48:4f:61:2a:1d:c0:ea:4e:1f:74:27:c3:0f:96:
bb:e2:56:f3:e0:c4:08:79:09:5e:ae:7d:76:9f:3f:6a:45:b4:
37:b8:93:42:43:f7:09:9b:da:a3:cb:b6:84:97:9b:2f:35:33:
87:f5:f4:e6:fc:b4:2a:21:86:8f:20:b4:36:86:f9:60:e3:0b:
53:4f:01:23
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE
RUY4QzNEM0IwHhcNMjQwNDI2MjExMDAyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjJjMTgyYS1iMzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu1A8heW91ouxk1kdfzPohL/7n/3dCb6rfxCclfUPOEN+Vb8i6mxeHVhxjvmi
h1bFCnnna6PTmM+/uLrZlDakFOD3I+KG7Scu5bnlZ5pXvP7XHGIC3nY1z2cLRKib
Lfp7eL7EPz+HxymjPDXuUcfD0BsTkbmq6e7WLF0ZjciDPmT23N6sQrvBBVDzHGHj
4h6qLxxyjdgdj6FTB913HsfGS5b+YTmrk6eQOrSGPcnCn1zVQOBbpFvXVRwtSgxx
bD7nrSq5PF2egtiJxRerfpTfOzMdiHPS9ABoUmY6vvjZRHSgt/entqYFRhdzZ81k
NdHM/o1saFBcKUIhAXuRo1CMXwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLQWkv3Y
bimzwjvuW9KlY+unq1fTMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB
QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0UwQTgvMEM0NzQ5MEFFQUIzMTFFQjk4MTFBNDY1QzRGOUFFMDIvNDc5MzU2NzIw
NkEyMTFFRUJEQTREMzRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABVcUYDBABbx9EwDQYJKoZIhvcNAQELBQADggEBAFG2I+zz
w7GF4zRG8PIZDu14D4FfOyR0FfAVI28pruqnwoa69omNVkYChv08zLHB5EmszPG3
g3DE+hxNwmjcz0Pm//cJlWIZ2sDHAXUsfRa1Fw7g2IUQ+VaXMBe5ynilQCwwQP/N
OH0QVE639zCMyJCFlM4gw+mLLT1YYmTOknuJ0TDGCevxJCUv+jdIDNzqvxnp/CGD
xESpntOozGtwQQCwdRw4wyvOBwb4wDfLw4v2WuGJMLk2JMVIT2EqHcDqTh90J8MP
lrviVvPgxAh5CV6ufXafP2pFtDe4k0JD9wmb2qPLtoSXmy81M4f19Ob8tCohho8g
tDaG+WDjC1NPASM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:52:08 2025 by rpki-client