Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1ECC1CFEA02211EFA0EA5451C4F9AE02.roa
File: 1ECC1CFEA02211EFA0EA5451C4F9AE02.roa (raw, json)
Hash identifier: HlB4RL+DtSFEmas1SLeoMxpM+QiLyT3EqBxXbi9Cetc=
Subject key identifier: A5:CE:31:53:6E:2E:9E:84:68:18:C9:A5:C8:E6:20:6F:C5:75:13:70
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1C26
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1ECC1CFEA02211EFA0EA5451C4F9AE02.roa
Signing time: Mon 11 Nov 2024 11:43:08 +0000
ROA not before: Mon 11 Nov 2024 11:43:08 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 51765
IP address blocks: 180.178.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7206 (0x1c26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Nov 11 11:43:08 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6731edcc-082e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:42:ad:36:d0:8f:2a:f9:d4:47:4a:60:8c:
30:71:5a:50:f6:79:a8:4f:5c:6d:36:45:00:ed:69:
4a:ce:70:48:15:79:be:c1:a2:30:f3:03:75:4e:30:
bf:cb:9f:fc:82:87:f7:c3:75:e1:38:c7:99:17:f8:
e0:fa:a4:d8:52:81:a1:ce:49:9e:c7:95:d6:2c:cc:
c7:8a:ca:4f:54:67:7b:fa:42:05:66:98:fc:5a:25:
d9:2e:54:1e:66:de:5c:98:09:d2:12:db:4c:44:c1:
df:05:61:84:26:42:af:de:4d:dd:f6:07:ce:48:63:
2e:9d:67:bc:31:18:ac:ce:2e:f7:f5:9d:fd:29:31:
fa:5a:53:dd:3b:48:52:56:6d:7c:22:91:90:79:eb:
2a:59:79:95:3b:c5:c6:d8:35:7b:bc:44:33:90:d1:
aa:0f:96:9b:41:01:48:00:94:ba:00:40:38:0d:d9:
55:61:fe:73:75:0b:ed:2e:72:1b:65:f3:5f:ec:d2:
5d:70:fa:ca:56:4f:f7:9a:06:c0:e1:09:c0:91:39:
d6:02:8b:3f:1e:89:f9:07:72:b3:35:50:6b:d1:03:
5b:1b:2b:41:76:3e:5a:73:56:53:91:a5:de:c3:da:
f6:21:36:84:ab:72:70:d1:14:bc:cc:e8:83:83:b1:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CE:31:53:6E:2E:9E:84:68:18:C9:A5:C8:E6:20:6F:C5:75:13:70
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1ECC1CFEA02211EFA0EA5451C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.156.0/22
Signature Algorithm: sha256WithRSAEncryption
57:3e:8b:b2:e0:3b:f9:b9:8c:95:2b:91:5e:4c:26:30:79:d0:
2e:70:95:1e:6c:6f:70:3c:fe:e3:27:f9:11:fc:b9:53:2c:39:
a1:ad:ed:4d:15:32:df:d3:28:ed:63:d7:c4:1e:ba:c1:ea:87:
28:46:27:41:58:fd:b4:e8:77:bb:56:c9:9c:70:73:b0:4f:75:
62:40:10:f3:12:46:cd:93:b4:17:56:83:75:69:88:73:bc:65:
91:03:69:8e:da:98:08:dd:80:24:4e:5d:0e:8d:1f:7c:f8:64:
a9:9d:b7:44:72:af:83:3a:26:71:46:66:e8:00:5e:7d:76:a0:
01:ed:62:81:b6:77:c8:9e:14:51:20:11:22:1d:ed:7e:67:b3:
e0:79:ae:7a:7f:bb:07:15:92:af:f4:0b:6f:ee:24:b9:5b:cd:
ef:f7:22:76:4c:4d:54:9e:0a:f4:40:4e:b9:d2:db:d5:f8:c5:
b8:fd:25:93:da:01:04:a4:cb:df:6a:26:51:a6:ab:a5:0d:75:
a8:85:44:de:1a:07:a1:40:1a:c3:93:e6:be:de:a6:b4:ef:8c:
4d:bc:d8:ec:3a:dc:32:93:5f:ea:f4:c1:71:d8:38:e7:8a:ae:
43:5a:7d:5d:89:3d:74:fe:13:73:f0:50:0f:85:90:06:79:24:
c5:f9:4d:5d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMTExMTE0MzA4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzMxZWRjYy0wODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskhCrTbQjyr51EdKYIwwcVpQ9nmoT1xtNkUA7WlKznBIFXm+waIw8wN1TjC/
y5/8gof3w3XhOMeZF/jg+qTYUoGhzkmex5XWLMzHispPVGd7+kIFZpj8WiXZLlQe
Zt5cmAnSEttMRMHfBWGEJkKv3k3d9gfOSGMunWe8MRiszi739Z39KTH6WlPdO0hS
Vm18IpGQeesqWXmVO8XG2DV7vEQzkNGqD5abQQFIAJS6AEA4DdlVYf5zdQvtLnIb
ZfNf7NJdcPrKVk/3mgbA4QnAkTnWAos/Hon5B3KzNVBr0QNbGytBdj5ac1ZTkaXe
w9r2ITaEq3Jw0RS8zOiDg7FnXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKXOMVNu
Lp6EaBjJpcjmIG/FdRNwMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMUVDQzFDRkVB
MDIyMTFFRkEwRUE1NDUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAK0spwwDQYJKoZIhvcNAQELBQADggEBAFc+i7LgO/m5jJUr
kV5MJjB50C5wlR5sb3A8/uMn+RH8uVMsOaGt7U0VMt/TKO1j18QeusHqhyhGJ0FY
/bTod7tWyZxwc7BPdWJAEPMSRs2TtBdWg3VpiHO8ZZEDaY7amAjdgCROXQ6NH3z4
ZKmdt0Ryr4M6JnFGZugAXn12oAHtYoG2d8ieFFEgESId7X5ns+B5rnp/uwcVkq/0
C2/uJLlbze/3InZMTVSeCvRATrnS29X4xbj9JZPaAQSky99qJlGmq6UNdaiFRN4a
B6FAGsOT5r7eprTvjE282Ow63DKTX+r0wXHYOOeKrkNafV2JPXT+E3PwUA+FkAZ5
JMX5TV0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:20:50 2025 by rpki-client