Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/83ECD7C40CCA11ED97820077C4F9AE02.roa
File: 83ECD7C40CCA11ED97820077C4F9AE02.roa (raw, json)
Hash identifier: tsWCAJh3hDUuF0jt3mDhnNo48pJ1cTxWnbkE+ZQXBxw=
Subject key identifier: A3:E9:BD:31:AB:62:DF:79:43:0F:2C:98:90:87:C4:03:B2:36:DF:67
Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
Certificate serial: 0D09
Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/83ECD7C40CCA11ED97820077C4F9AE02.roa
Signing time: Tue 14 Jan 2025 18:16:07 +0000
ROA not before: Tue 14 Jan 2025 18:16:07 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 133772
IP address blocks: 134.159.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3337 (0xd09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0
Validity
Not Before: Jan 14 18:16:07 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6786a9e7-d25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:4f:89:b3:29:26:c3:87:82:7a:3d:54:40:
83:fb:70:b0:d2:10:68:3f:9d:c3:32:3c:0f:39:07:
9f:a7:89:0f:52:81:51:14:ab:5d:fe:9e:37:02:55:
84:a5:f4:b0:d2:07:ba:84:62:59:82:da:3e:0c:74:
c9:c1:8e:90:55:a2:bd:bc:d1:36:eb:92:43:9a:ef:
ba:3e:aa:3c:a3:3d:39:ae:65:2b:98:5d:4c:c0:83:
87:6a:44:d1:45:52:44:6b:a2:80:ed:49:31:76:9a:
da:aa:63:4b:54:e0:8d:60:76:b1:0b:88:5c:97:be:
5d:2d:32:90:af:3d:38:0b:25:6f:b6:11:c7:fc:02:
62:5b:6c:83:45:e2:86:f6:61:db:7c:ea:b2:0a:bb:
01:88:41:22:b2:3d:7a:2c:33:f1:a9:a4:63:73:cd:
68:53:96:9e:9a:74:ac:e3:1d:40:d9:f2:d4:1a:a4:
35:b4:b5:ca:58:43:ae:e2:b5:58:b8:1c:ee:62:14:
db:93:6b:9c:77:b5:3a:0b:f8:99:2e:1e:a4:44:83:
22:19:92:15:3b:7a:71:80:7d:ef:17:f2:11:ed:90:
78:c0:65:9c:5b:41:99:aa:a5:c1:e6:34:1f:1a:32:
3a:c1:be:d4:9e:6f:b1:0d:77:51:36:7b:80:d0:bd:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:BD:31:AB:62:DF:79:43:0F:2C:98:90:87:C4:03:B2:36:DF:67
X509v3 Authority Key Identifier:
keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/83ECD7C40CCA11ED97820077C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.159.80.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f0:63:aa:60:16:d5:99:1a:f2:7b:d0:06:83:14:c7:33:f5:
e0:a2:4d:f7:e8:6e:b9:30:10:10:d7:f2:2b:28:8e:a4:17:07:
0f:c3:e9:3a:ec:5c:65:72:0c:22:b1:5e:81:a0:e0:a4:bb:68:
12:dc:c5:2a:aa:c5:bd:56:a4:95:9e:4d:36:d1:06:e1:3a:72:
a1:85:8a:17:97:38:8c:90:65:c3:41:e9:72:15:9a:61:e5:9b:
c3:e6:ff:b7:a2:dc:d5:05:bf:e8:f8:fe:5f:63:c2:12:de:86:
34:b9:ea:19:5f:04:82:23:4e:26:1e:f7:dd:47:52:0c:f8:a9:
43:d3:86:7f:ce:13:da:71:1e:4b:00:91:d6:14:8b:6d:21:dd:
1a:ef:2b:7f:e6:83:3e:dc:15:2e:33:ce:9b:71:31:a8:6b:95:
da:43:3f:3b:cf:4c:7d:fe:f3:e4:bb:1d:b2:1f:cb:8c:e3:f7:
6c:6c:b5:d0:f4:4f:0b:e3:2c:cc:19:6d:f8:82:36:5a:6d:7d:
eb:1f:f5:26:e3:4a:c2:df:46:f2:3f:c6:dc:58:fb:db:87:18:
d3:52:dd:45:24:9f:0e:fd:0c:2e:a6:e3:10:e3:c2:76:08:4c:
9c:10:75:fc:81:7f:5a:fc:88:ff:c6:55:32:57:c6:10:3b:7c:
b6:ef:da:ca
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1
NTAzQ0VBNjAwHhcNMjUwMTE0MTgxNjA3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Nzg2YTllNy1kMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAFPibMpJsOHgno9VECD+3Cw0hBoP53DMjwPOQefp4kPUoFRFKtd/p43AlWE
pfSw0ge6hGJZgto+DHTJwY6QVaK9vNE265JDmu+6Pqo8oz05rmUrmF1MwIOHakTR
RVJEa6KA7UkxdpraqmNLVOCNYHaxC4hcl75dLTKQrz04CyVvthHH/AJiW2yDReKG
9mHbfOqyCrsBiEEisj16LDPxqaRjc81oU5aemnSs4x1A2fLUGqQ1tLXKWEOu4rVY
uBzuYhTbk2ucd7U6C/iZLh6kRIMiGZIVO3pxgH3vF/IR7ZB4wGWcW0GZqqXB5jQf
GjI6wb7Unm+xDXdRNnuA0L1DKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKPpvTGr
Yt95Qw8smJCHxAOyNt9nMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4
Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0ZGQTAvMTUwQkY2OTBEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvODNFQ0Q3QzQw
Q0NBMTFFRDk3ODIwMDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACGn1AwDQYJKoZIhvcNAQELBQADggEBABHwY6pgFtWZGvJ7
0AaDFMcz9eCiTffobrkwEBDX8isojqQXBw/D6TrsXGVyDCKxXoGg4KS7aBLcxSqq
xb1WpJWeTTbRBuE6cqGFiheXOIyQZcNB6XIVmmHlm8Pm/7ei3NUFv+j4/l9jwhLe
hjS56hlfBIIjTiYe991HUgz4qUPThn/OE9pxHksAkdYUi20h3RrvK3/mgz7cFS4z
zptxMahrldpDPzvPTH3+8+S7HbIfy4zj92xstdD0TwvjLMwZbfiCNlptfesf9Sbj
SsLfRvI/xtxY+9uHGNNS3UUknw79DC6m4xDjwnYITJwQdfyBf1r8iP/GVTJXxhA7
fLbv2so=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:47:44 2025 by rpki-client